What Is Docs.Google.com?
Docs.google.com is the URL associated with Google Docs, an online Google office suite found within the Google Drive service. The Google Docs Editors office suite includes many Google services including Google Docs, Google Drawings, Google Forms, Google Keep, Google Sheets, Google Slides, Google Sites, Google Slides, and Google Keep. You don’t have to open a Google office suite to use all of those services; Google Keep for instance has its own site URL here: keep.google.com. Some of them such as Google Forms don’t have their own URLs and can only be opened via the office suite.
Website: https://docs.google.com/
Is Docs.Google.com Safe?
I conducted a series of malware tests to find out if docs.google.com is safe and legit. Here are the results:
I installed the Malwarebytes Browser Guard on my Edge browser and was able to browse the site docs.google.com without any issues.
To check this further I ran malware scans with Malwarebytes and Spybot on my computer after browsing the site docs.google.com and they returned no malware detection. I also ran a system-wide scan with Microsoft Defender and no malware was found.
To try to confirm that the site is clean, I also checked the site mega.nz on the online malware scanner Sucuri and it returned with no issues. You can see the same here: https://sitecheck.sucuri.net/results/docs.google.com
Sucuri says there was a 404 Not Found site issue when it attempted to scan the site docs.google.com for the following URL:
https://accounts.google.com/signin/usernamerecovery?continue=https://docs.google.com/&ifkv=AWnogHeQXFZLWRO5TmEVdbn03E5N2EyAq19RUVoVrldeFuOmDcxcJGddOpX2IiYJdey8Oq_EbpC9Rg&hl=en
However, I can see that this is just the sign-in page. Sucuri was able to scan the rest of the site without any issues and it concluded that the site docs.google.com was a low security risk and doesn’t have any malware.
Some hardening improvements could be made such as creating an SPF record to prevent email spam and solving the missing security headers listed below:
Missing security header for ClickJacking Protection. Alternatively, you can use Content-Security-Policy: frame-ancestors ‘none’. Affected pages:
https://accounts.google.com/signin/v2/’ _.C(_.Uv(h).replace(/;/g,
https://policies.google.com/privacy?gl=US&hl=en
https://policies.google.com/terms?gl=US&hl=enMissing Strict-Transport-Security security header. Affected pages:
https://accounts.google.com/signin/v2/’ _.C(_.Uv(h).replace(/;/g,
https://docs.google.com/404javascript.js
https://docs.google.com/404testpage4525d2fdc
https://policies.google.com/privacy?gl=US&hl=en
https://policies.google.com/terms?gl=US&hl=enMissing Content-Security-Policy directive. We recommend to add the following CSP directives (you can use default-src if all values are the same): script-src, object-src, base-uri, frame-src. Affected pages:
https://accounts.google.com/ServiceLogin?continue=https://docs.google.com/&dsh=S1258511599:1678072787265307&emr=1&flowEntry=ServiceLogin&followup=https://docs.google.com/&ifkv=AWnogHexH1QnY3Y4vA9hL8k4J5-5jDcumeWIoxafb8BzCQ0MTRn8YTBc4x-YFDexWm7ESMGjonv3&nojavascript=1
https://accounts.google.com/signin/v2/’ _.C(_.Uv(h).replace(/;/g,
https://accounts.google.com/signup/v2/nojs?continue=https://docs.google.com/
https://policies.google.com/privacy?gl=US&hl=en
https://policies.google.com/terms?gl=US&hl=enThe ‘unsafe-eval’ keyword in Content-Security-Policy is not recommended. Please consider fixing the JavaScript code.
However, these hardening improvements are minor issues and don’t change the overall grade of the scan.
Lastly, I ran a malware scan with VirusTotal on the domain docs.google.com and one security vendor flagged the domain as malicious. You can see the same here: https://www.virustotal.com/gui/domain/docs.google.com
However, only 1 out of 88 security vendors doesn’t necessarily mean the site docs.google.com is malicious.
In conclusion, the site docs.google.com is a low security risk according to Sucuri and doesn’t have any malware. Moreover, no security vendor associated with Sucuri has blacklisted the domain. One security vendor associated with VirusTotal has flagged the site docs.google.com as malicious but 1 out of 88 often points to a false positive rather than a domain being malicious. All things considered, the site docs.google.com is likely safe.