ScanMalware.com

Security Scan Report: docs.google.com

Site favicon
Submitted: Nov 5, 2025, 1:57:04 AMCompleted: Nov 5, 2025, 1:58:35 AMpubliccompleted
Loading additional data...

Summary

This website contacted 13 IPs in 2 countries across 7 domains to perform 21 HTTP transactions. The main domain is docs.google.com.

Submitted URL: https://docs.google.com/drawings/d/1OcgwFfyQrfLx0EioeE7PPTqTwp3JA_mk20yfb3NNOu8/edit

AI Security Verdict

High Risk

Confidence: 80%

7
Risk Score

High‑risk phishing page impersonating Amazon, hosted on Google Docs.

Risk Factors
Brand impersonation of Amazon on a non‑Amazon domain
Use of a legitimate platform (Google Docs) to host potentially deceptive content
Domain not ranked in Cisco Umbrella top 1 M (unranked status adds suspicion)
Domain age information unavailable

Details

Page Title

M76OUJGHIK67ERTWFDXNTR5HG - File 1 - Google Drawings

Scan Type

public

Language

🇩🇪

German

(50% confidence)

Category

documentation technical

(33%)

Domain Information

You're looking at domain 'docs.google.com' on the commercial generic top-level domain (.com), featuring subdomain 'docs'. Count 6 characters in 'google' with 3 vowels and three consonants. Segmentation suggests 1 word: google. Median word length is six characters. The linguistic tilt is Sinhala for 'google'. You will also see it in Danish and English contexts. Net impression: Sinhala phrase with single-word simplicity.

Screenshot

Security scan screenshot of https://docs.google.com/drawings/d/1OcgwFfyQrfLx0EioeE7PPTqTwp3JA_mk20yfb3NNOu8/edit

Page Load Overview

45.67s
Total Load Time
21
HTTP Requests
7
Domains
1.7 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:50%
Script Type:Latin
HTML Lang Attribute:de
Text Length:410 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical33% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
33%

Detected Features

OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9142.250.186.129United States
AS15169GOOGLE
1142.250.186.99United States
AS15169GOOGLE
1142.250.186.67United States
AS15169GOOGLE
1142.250.186.142United States
AS15169GOOGLE
1142.250.185.227United States
AS15169GOOGLE
1142.250.186.78United States
AS15169GOOGLE
1142.250.184.234United States
AS15169GOOGLE
12a00:1450:4001:811::2001Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
12a00:1450:4001:829::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
12a00:1450:4001:813::2003Frankfurt am Main, Hesse, Germany
AS15169GOOGLE
2113--

Detected Technologies4

X-UA-Compatible
100%
Open-Graph-Protocolvarticle
100%
HTTP/3
40%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12F14076241212C76EE6788B260976507391E403BF94B0479E3FCCFA53FE6DAE125672C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:F3F91XtSIh91E8i38R+bX74WlKu+S2wBo4L/Irb5dEoGEqOhWsPdpTQ1mX6nwCd:F3F91XtSIh9I38R+bX74WlK1S2so4L/1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:200544:AgjAYIkLNSOxCHMYYCmBBIcTCOApRjQCIAYcIQ1gOKiWK4hrwWKahBYQCQUERCEMAFAwbR3EZoyRgYECE2pGYFGiKMpSgjkL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:2ee7efe7e7e7e7ff
Perceptual Hash:b7150d171515dd55
Difference Hash:c80d484c4c4c4c10
Wavelet Hash:0047c7c7c4c4c4c4
Color Hash:#539aac

Other Hashes

Crop Resistant:c80d484c4c4c4c10

Scan History

Scan history not available

Unable to load historical scan data