Phishing Analysis
Detailed analysis of captured phishing page
95
Risk Score
High Risk
Threat Level: ALTO
• Impersonating: AT&T
⚠ Fatores de Risco
- Falsificação da marca AT&T em domínio não oficial
- Ofuscação JavaScript detectada (7 padrões)
- Indicadores de roubo de credenciais detectados
- Indicadores de roubo de otp/2fa detectados
Visual Capture
Detection Info
https://docs.google.com/presentation/d/e/2PACX-1vQPS2cF7SDQjxK5cNZyzaOdWNls6kMoCtsLSZXfGUe9qpKNObdq-p-lBe5SNO58RA5ogiH9PdoZBTmO/pub?start=false&loop=false&delayms=3000&slide=id.p
Detected Brand
AT&T
Country
Unknown
Confidence
100%
HTTP Status
200
Report ID
328c41ae-1ff…
Analyzed
2026-01-09 07:47
Final URL (after redirects)
https://docs.google.com/presentation/d/e/2PACX-1vQPS2cF7SDQjxK5cNZyzaOdWNls6kMoCtsLSZXfGUe9qpKNObdq-p-lBe5SNO58RA5ogiH9PdoZBTmO/pub?start=false&loop=false&delayms=3000&slide=id.p&slide=id.p
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T167D24632C1427532626B52E5E8B077B925D3C32ECE0B08016B7C97957FFBD967482A8D |
|
CONTENT
ssdeep
|
768:i00tiOEv8JxJezjdneec+CLpdhDNe1ARkapjTdPUxkuo:0Ekfkdneec+CLpdhDNe1ARkapjTdPUxi |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
be1c959f8a62cc51 |
|
VISUAL
aHash
|
9f9f10009d9fefff |
|
VISUAL
dHash
|
6032252531284d00 |
|
VISUAL
wHash
|
9f1a0000159fe7ff |
|
VISUAL
colorHash
|
060000001c0 |
|
VISUAL
cropResistant
|
6032252531284d00,2b6145820102c54b,8c8089c166592513,0c26261d49c3671d,0c969633330369c0,004d0c4d4d8ccccd,004d0ccdcd4d8dcd,86a4a8d163653913,8e8008b1c3451b26 |
Code Analysis
Risk Score
95/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- unescape
- hex_escape
- unicode_escape
- base64_strings
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for docs.google.com
Found 10 other scans for this domain
-
https://docs.google.com/presentation/d/e/2PACX-1vS...
https://docs.google.com/presentation/d/e/2PACX-1vT...
https://docs.google.com/document/d/e/2PACX-1vTh3iy...
https://docs.google.com/presentation/d/e/2PACX-1vS...
https://docs.google.com/forms/d/1ZrJdSKe4SJ2QUAPcf...
https://docs.google.com/forms/d/e/1FAIpQLSdMQ4frGs...
https://docs.google.com/presentation/d/e/2PACX-1vQ...
https://docs.google.com/forms/d/1qUV0ZKLYHGW_4y4Pf...
https://docs.google.com/forms/d/e/1FAIpQLSdrYyw_8J...
https://docs.google.com/forms/d/e/1FAIpQLSdbKfmfqZ...