EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats
95 Risk Score

High Risk

Threat Level: ALTO • Impersonating: AT&T

⚠ Risk Factors

  • Brand impersonation of AT&T on non-official domain
  • JavaScript obfuscation detected (7 patterns)
  • Credential harvesting indicators detected
  • OTP/2FA stealing indicators detected

Visual Capture

Screenshot of docs.google.com

Detection Info

https://docs.google.com/presentation/d/e/2PACX-1vThR9Kq9YnQTmkz35aGaky_00ys7Tj1bFT7uRjoxog4lwwG7vkJ6bmekcxOWMY7gASME95Y3KBYtAOz/pub?start=false&loop=false&delayms=3000
Detected Brand
AT&T
Country
Unknown
Confidence
100%
HTTP Status
200
Report ID
619d9b07-677…
Analyzed
2026-01-09 08:18
Final URL (after redirects)
https://docs.google.com/presentation/d/e/2PACX-1vThR9Kq9YnQTmkz35aGaky_00ys7Tj1bFT7uRjoxog4lwwG7vkJ6bmekcxOWMY7gASME95Y3KBYtAOz/pub?start=false&loop=false&delayms=3000&slide=id.p

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T114E26532C1423132A6AB52E1E8F0777E26D3832ECE0714055B7C9B956FFBD967442A4D
CONTENT ssdeep
768:dZCHNEpPbrdneec+CLpdhDNe1ARkapjTdPUxkuo:+EpPbrdneec+CLpdhDNe1ARkapjTdPUo

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
910181f17f7bb193
VISUAL aHash
6e7f260000ffffff
VISUAL dHash
dadede404c161600
VISUAL wHash
4e1e000000ffffff
VISUAL colorHash
07e00000040
VISUAL cropResistant
dadede404c161600,ba9e9ee8eebefe00,9adee6fe8001f64c

Code Analysis

Risk Score 95/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔒 Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • unescape
  • hex_escape
  • unicode_escape
  • base64_strings

Scan History for docs.google.com

Found 10 other scans for this domain