docs.google.com

Classification: Whitelisted

docs.google.com is a whitelisted (trusted) hostname. Reported by 13 threat sources, last seen 2026-09-03.

Current activity

  • Offline — no longer resolving. Last online 2026-09-03 02:04:06.
  • Command & Control server — Used by cybercriminals to control victim computers.
  • Malware distribution — This indicator is distributing malware.
  • Stores phishing content — Phishing resources are hosted here.

MITRE ATT&CK associations

Malware families: TRICKBOT (S0266) ASYNCRAT (S1087)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Phishing Phishtank 2017-10-15 16:11:09 2026-09-03 02:04:06 compromised malicious-activity phishing
Banco de Loja S.A phishing Maltiverse 2026-08-23 08:01:12 2026-08-28 08:04:45 malicious-activity phishing T1566 Phishing
Matched whitelist source: Misp_google_domain Maltiverse 2026-06-20 08:01:40 2026-08-28 05:42:58 benign
Artisan Partners phishing Maltiverse 2026-08-19 08:01:05 2026-08-19 08:01:05 malicious-activity phishing T1566 Phishing
Suspicious URL Triage 2026-04-29 21:25:52 2026-08-04 23:07:21 anomalous-activity malicious-activity
Meta phishing Maltiverse 2025-10-24 02:46:00 2026-07-17 10:09:31 malicious-activity phishing T1566 Phishing
GoFundMe phishing Maltiverse 2026-07-15 10:02:11 2026-07-15 10:02:11 malicious-activity phishing T1566 Phishing
Facebook phishing Maltiverse 2025-11-08 21:15:00 2026-06-04 10:03:49 malicious-activity T1566 Phishing
PostFinance phishing Maltiverse 2026-06-04 10:02:44 2026-06-04 10:02:44 malicious-activity T1566 Phishing
Xmrig Triage 2026-05-24 23:05:59 2026-05-24 23:05:59 malicious-activity
Canva phishing Maltiverse 2026-05-05 01:02:50 2026-05-08 02:15:05 malicious-activity T1566 Phishing
Asyncrat Triage 2026-04-09 22:37:34 2026-05-07 08:26:45 malicious-activity S1087 AsyncRAT
DocuSign phishing Maltiverse 2026-05-02 01:01:31 2026-05-07 02:14:10 malicious-activity T1566 Phishing
Malicious URL Triage 2026-02-02 16:07:21 2026-04-20 16:26:12 malicious-activity
Top Popularity Site Cisco Umbrella 2022-07-18 20:31:31 2026-04-13 14:02:57 benign
Paperless Post phishing Maltiverse 2026-02-26 01:01:34 2026-03-09 01:15:06 malicious-activity T1566 Phishing
Rakuten phishing Maltiverse 2026-03-08 01:01:26 2026-03-09 01:02:32 malicious-activity T1566 Phishing
WhatsApp phishing Maltiverse 2025-12-03 09:51:08 2026-02-20 01:03:55 malicious-activity T1566 Phishing
DigitalBridge phishing Maltiverse 2026-01-20 04:24:41 2026-01-20 04:24:41 malicious-activity T1566 Phishing
Phishing AT&T Phishtank 2020-07-28 11:40:15 2025-12-12 18:51:41 compromised malicious-activity
Phishing Optus Phishtank 2025-10-03 08:28:03 2025-11-20 10:00:23 compromised malicious-activity
Microsoft phishing Maltiverse 2025-11-05 02:45:57 2025-11-05 02:45:57 malicious-activity T1566 Phishing
Phishing Internal Revenue Service Phishtank 2017-10-15 18:57:44 2025-10-27 13:05:51 compromised malicious-activity
Phishing Amazon.com Phishtank 2021-01-07 18:32:49 2025-10-17 20:14:44 compromised malicious-activity
Phishing Telefónica UK Phishtank 2025-10-03 15:11:21 2025-10-03 15:11:21 compromised malicious-activity
Phishing Google Phishtank 2018-01-12 23:35:43 2025-10-03 14:59:01 compromised malicious-activity
Phishing Microsoft Phishtank 2017-12-18 19:58:57 2025-10-03 14:19:55 compromised malicious-activity
Phishing Bank of America Corporation Phishtank 2025-10-03 10:34:15 2025-10-03 13:41:40 compromised malicious-activity
Phishing HSBC Group Phishtank 2025-10-03 12:51:41 2025-10-03 13:14:18 compromised malicious-activity
Phishing eBay, Inc. Phishtank 2021-04-12 21:23:42 2025-10-03 11:16:30 compromised malicious-activity
XRed ThreatFox Abuse.ch 2025-09-17 07:17:11 2025-09-17 07:17:11 malicious-activity
LockBit ThreatFox Abuse.ch 2025-07-05 10:17:05 2025-07-05 10:17:05 malicious-activity
AMOS ThreatFox Abuse.ch 2025-03-29 16:17:11 2025-03-29 16:17:16 malicious-activity
Malware Download URLhaus Abuse.ch 2022-03-15 14:15:42 2025-03-06 08:27:27 malicious-activity
Google Domain Maltiverse 2024-03-20 16:49:19 2024-03-20 16:49:19
Phishing Antiphishing.com.ar 2023-01-15 08:37:42 2024-01-27 14:24:36 malicious-activity T1566 Phishing
Malicious URL Hybrid-Analysis 2023-05-15 20:00:07 2024-01-10 17:15:05
Phishing Coinbase Phishtank 2022-04-29 17:21:34 2022-12-16 13:20:07 compromised malicious-activity
Safe Site Cisco Umbrella 2022-07-14 23:25:17 2022-07-16 01:15:28 benign
Phishing British Telecom Phishtank 2019-11-28 08:44:49 2022-06-26 01:20:34 compromised malicious-activity
AT&T phishing Antiphishing.com.ar 2019-06-04 11:52:55 2022-04-24 04:11:34
generic phishing Antiphishing.com.ar 2022-02-18 01:04:19 2022-02-18 01:04:19
Phishing Mr.Looquer 2019-07-09 02:42:13 2021-06-29 15:27:01
Phishing DocuSign Phishtank 2020-12-13 08:28:51 2021-05-02 21:50:57 compromised malicious-activity
Phishing bitFlyer Phishtank 2021-03-16 16:25:39 2021-05-02 21:46:12 compromised malicious-activity
Malicious url Cyber Threat Coalition 2020-12-14 23:01:01 2021-05-02 20:55:06 malicious-activity
Malware Download Abuse.ch 2018-12-10 19:28:37 2021-04-30 07:15:29 malicious-activity
Phishing DocuSign Maltiverse Research Team 2020-11-25 21:17:23 2021-04-29 18:17:26 malicious-activity
Social Engineering Antiphishing.com.ar 2021-02-10 14:27:14 2021-04-13 14:15:14 malicious-activity
Phishing JPMorgan Chase and Co. Phishtank 2019-07-20 02:41:20 2021-04-03 15:26:07 compromised malicious-activity
DHL phishing Antiphishing.com.ar 2021-03-17 12:08:06 2021-03-31 13:00:00
other phishing Antiphishing.com.ar 2021-03-27 01:51:45 2021-03-27 01:51:45
Yahoo phishing Antiphishing.com.ar 2020-04-24 02:30:15 2021-03-20 22:54:50
Social Engineering Phishtank 2018-09-01 14:32:43 2021-03-07 16:20:52 malicious-activity
higher_ed phishing Antiphishing.com.ar 2020-06-19 05:05:59 2021-03-05 18:09:40
Wells Gargo phishing Antiphishing.com.ar 2021-03-03 06:02:12 2021-03-03 06:02:12
Phishing KeyBank Maltiverse Research Team 2021-02-10 18:17:33 2021-02-10 20:17:42 malicious-activity
Wells Fargo Bank phishing Antiphishing.com.ar 2021-02-10 14:27:14 2021-02-10 14:27:14
Phishing Facebook Phishtank 2020-09-01 20:13:47 2021-01-31 12:02:19 compromised malicious-activity
Verizon Media phishing Antiphishing.com.ar 2020-06-14 09:38:38 2021-01-08 22:37:42
IRS phishing Antiphishing.com.ar 2019-12-06 01:44:43 2021-01-07 17:27:39
General Phish phishing Antiphishing.com.ar 2021-01-06 18:09:25 2021-01-06 18:09:25
Generic Phish phishing Antiphishing.com.ar 2020-12-14 04:26:45 2021-01-06 12:29:48
courier phishing Antiphishing.com.ar 2020-12-30 19:21:09 2020-12-30 19:21:09
QQ phishing Antiphishing.com.ar 2020-12-29 21:13:48 2020-12-29 21:13:48
Covid19 scam Cyber Threat Coalition 2020-04-16 13:00:23 2020-12-13 23:36:01 malicious-activity
Tordal Maltiverse Research Team 2020-11-23 18:18:09 2020-11-23 19:17:51 malicious-activity
Money Transfer phishing Antiphishing.com.ar 2020-10-12 04:55:22 2020-10-12 04:55:22
Wells Fargo phishing Antiphishing.com.ar 2020-04-29 02:22:47 2020-10-03 04:50:35
Phishing PayPal Phishtank 2019-11-21 08:44:21 2020-09-21 08:01:52 compromised malicious-activity
Phishing American Express Phishtank 2020-09-01 20:47:30 2020-09-01 20:47:30 compromised malicious-activity
Chase Bank phishing Antiphishing.com.ar 2020-08-18 04:07:47 2020-08-18 04:07:47
Chase phishing Antiphishing.com.ar 2020-03-04 01:58:19 2020-08-14 03:11:58
Yahoo! phishing Antiphishing.com.ar 2020-02-14 01:43:47 2020-06-26 03:38:37
NA phishing Antiphishing.com.ar 2020-06-04 09:40:50 2020-06-04 09:40:50
Alexa Top 1 Million Maltiverse Research Team 2020-04-27 18:31:23 2020-04-27 18:31:23
Bell Canada phishing Antiphishing.com.ar 2020-04-19 02:23:03 2020-04-19 02:23:05
target unspecified phishing Antiphishing.com.ar 2019-12-06 01:44:19 2020-03-20 01:56:43
Bank of America phishing Antiphishing.com.ar 2020-01-21 01:40:41 2020-01-21 01:40:41
Rakuten phishing Antiphishing.com.ar 2020-01-16 08:16:53 2020-01-16 08:16:53
Malicious url Maltiverse Research Team 2019-03-21 08:47:48 2019-12-04 08:46:26
Banco Votorantim S/A phishing Antiphishing.com.ar 2019-11-30 01:47:50 2019-11-30 01:47:50
Phishing Blockchain Phishtank 2019-11-27 02:19:36 2019-11-27 02:19:36
Trickbot Mr.Looquer 2019-09-09 02:23:53 2019-10-14 08:54:12 S0266 TrickBot
Social Engineering Google Safebrowsing 2018-07-06 08:32:00 2018-07-06 08:32:00
LinkedIn phishing Maltiverse 2018-01-11 12:34:34 2018-01-11 12:34:34
Phishing United Services Automobile Association Phishtank 2017-10-15 18:32:11 2017-10-15 18:32:11

Tags

phishing none malware_download exe gozi gbr dridex can icedid danabot aus compressed zipped-vbs downloader imminent loader payload 2019 fraud trickbot doc malware binary covid19 coronavirus scam asyncrat stealer office vba macro hancitor xls zloader xlsm nut maldoc 0493 3290 3463 7639 5037 pw-8921 2764 3289 1220 1528 0599 1680 1129 2064 1684 1185 8552 2525 6089 2024 4433 2190 7448 9854 3641 5503 0093 2354 9658 6681 1234 2589 6578 3082 2082 3382 9051 7824 1401 2970 5637 amos amosstealer atomic macos stealer lockbit abcd ransomware triage defense_evasion discovery persistence privilege_escalation amazon adware spyware trojan macos execution ransomware z-oct-16 rat pinino xmrig xmrig_linux antivm linux miner google xfinity

IP addresses resolved by this hostname

Whois information

AS name
AS15169 Google LLC
Domain
google.com
TLD
com
DNSSEC
['unsigned']
Nameservers
NS1.GOOGLE.COM, NS2.GOOGLE.COM, NS3.GOOGLE.COM, NS4.GOOGLE.COM, ns4.google.com, ns2.google.com, ns1.google.com, ns3.google.com
Registrant
MarkMonitor, Inc.
City
Mountain View
State
CA
Country
US — United States 🇺🇸
Contact email
[email protected], [email protected]
Domain created
1997-09-15 04:00:00
Domain expires
2028-09-14 04:00:00
First indexed
2017-10-15 16:11:09
Last updated
2026-09-03 02:04:29