EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

No screenshot available

Detection Info

https://form.typeform.com/to/Oc4j3ZjW#state=dans%20les%20Hauts-de-Seine&phone=33612321109&md5=f746e34f6af1af0541ab11da57de4e03&utm=PC134&[email protected]&name=Emmanuel&lastname=Sellier&city=Nanterre&zip=92000&useragent=&ip=107.21.207.171
Detected Brand
French Government
Country
France
Confidence
100%
HTTP Status
200
Report ID
4de77508-74c…
Analyzed
2026-01-20 13:51
Final URL (after redirects)
https://form.typeform.com/to/Oc4j3ZjW?typeform-source=www.facebook.com#state=dans%20les%20Hauts-de-Seine&phone=33612321109&md5=f746e34f6af1af0541ab11da57de4e03&utm=PC134&[email protected]&name=Emmanuel&lastname=Sellier&city=Nanterre&zip=92000&useragent=&ip=107.21.207.171

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T19D5272313A9A3B27164316C8BCF3574DA247F33ECA01C445E2F75AE367D6E60A484769
CONTENT ssdeep
192:wRKZTpE5KJOw34dPwmWg+WWGkNEf3n2/6MqCOFHVNoxTwS/YQM8AiWJkxp0Qv7CC:AK/A0xLPO8dFhlWPXnmHIU

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
cc91b16a936d649d
VISUAL aHash
fffff0f8f0f0f0ff
VISUAL dHash
00013454c1e52700
VISUAL wHash
fff090103070f0ff
VISUAL colorHash
074c0008000
VISUAL cropResistant
00013454c1e52700,0207070f0e0d3b32,52b212dad8d8d803,4e6ecaf01e260e8f

Code Analysis

Risk Score 100/100
Threat Level BAJO
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Information gathering survey related to heat pump subsidies.
• Target: Residents of the Hauts-de-Seine region in France.
• Method: Online form hosted on Typeform to collect property ownership information.
• Exfil: Potentially data sent to the French government or related agency.
• Indicators: Legitimate government logos, form.typeform.com domain.
• Risk: LOW - Standard data collection via online survey.

🔒 Obfuscation Detected

  • atob
  • fromCharCode
  • unescape
  • hex_escape
  • unicode_escape
  • base64_strings

📡 API Calls Detected

  • GET
  • POST

Scan History for form.typeform.com

Found 10 other scans for this domain

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.