Phishing Analysis
Detailed analysis of captured phishing page
95
Risk Score
High Risk
Threat Level: ALTO
• Impersonating: AT&T
⚠ Risk Factors
- Brand impersonation of AT&T on non-official domain
- JavaScript obfuscation detected (7 patterns)
- Credential harvesting indicators detected
- OTP/2FA stealing indicators detected
Visual Capture
Detection Info
https://docs.google.com/presentation/d/e/2PACX-1vQynI3a4HpOEphSZgQ_0M1Fm7Y1usa70jHiQEq6uqJukMCX-fihbfOidRaAfHOg7fSn3J8Nl8n_6fkt/pub?start=false&loop=false&delayms=3000
Detected Brand
AT&T
Country
Unknown
Confidence
100%
HTTP Status
200
Report ID
718a3dc6-884…
Analyzed
2026-01-09 08:51
Final URL (after redirects)
https://docs.google.com/presentation/d/e/2PACX-1vQynI3a4HpOEphSZgQ_0M1Fm7Y1usa70jHiQEq6uqJukMCX-fihbfOidRaAfHOg7fSn3J8Nl8n_6fkt/pub?start=false&loop=false&delayms=3000&slide=id.p
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T133F26432C1422132E2FF52E2E8F0777E2993832ECE0B14415B3C97956FFBD566546A89 |
|
CONTENT
ssdeep
|
768:iT0lLEwQtA7Pydneec+CLpdhDNe1ARkapjTdPUxkuo:rEwQtAjydneec+CLpdhDNe1ARkapjTdR |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
be1eb1976260649d |
|
VISUAL
aHash
|
ff9f10009fffffc3 |
|
VISUAL
dHash
|
6170362531601333 |
|
VISUAL
wHash
|
ff1f00001c9fff81 |
|
VISUAL
colorHash
|
060000001c0 |
|
VISUAL
cropResistant
|
6170362531601333,132b45820182452b,8e88a0c1626d2113,1c26261d49c3673d,0e969733332969c0,104d0c4d4d8ccccd,114d0ccdcd4d8dcd,86c4a0d963653913,0e0ca099c3653b16 |
Code Analysis
Risk Score
95/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- unescape
- hex_escape
- unicode_escape
- base64_strings
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for docs.google.com
Found 10 other scans for this domain
-
https://docs.google.com/document/d/e/2PACX-1vTh3iy...
https://docs.google.com/presentation/d/e/2PACX-1vS...
https://docs.google.com/forms/d/1ZrJdSKe4SJ2QUAPcf...
https://docs.google.com/forms/d/e/1FAIpQLSdMQ4frGs...
https://docs.google.com/presentation/d/e/2PACX-1vQ...
https://docs.google.com/forms/d/1qUV0ZKLYHGW_4y4Pf...
https://docs.google.com/forms/d/e/1FAIpQLSdrYyw_8J...
https://docs.google.com/forms/d/e/1FAIpQLSdbKfmfqZ...
https://docs.google.com/presentation/d/e/2PACX-1vS...
https://docs.google.com/forms/d/e/1FAIpQLSd6pIhriV...