EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of forms.office.com

Detection Info

https://forms.office.com/r/FW78zsPqLB
Detected Brand
United States Department of the Treasury
Country
USA
Confidence
100%
HTTP Status
200
Report ID
9aba4e55-e33…
Analyzed
2026-01-09 09:53
Final URL (after redirects)
https://forms.office.com/pages/responsepage.aspx?id=zSXTo9jj40CUl6glJqLIJAU5Bx_29VpPv8Lmi8zMsdFURE5ESVVYUEE1MzhCQ1BSMDJIUUxOOFAyRC4u&route=shorturl

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T190827772A2510437563B4DDA70F9777AA3B2D38CEF4B401482AE476407EFDA1BB67221
CONTENT ssdeep
384:RLhT4pB1kxxxFuGgHgPg8wg+g5Xfphukn6Lv8p9fGYSZdt3voh/+ZdtSvohJ0dtI:RLh8pB1kxxDuG26Lw/KXfphukn6ve9fY

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
eb699221963696d6
VISUAL aHash
c3c38181818181ff
VISUAL dHash
0f1323230b0b496d
VISUAL wHash
e7c3c3c3818181ff
VISUAL colorHash
030000001c0
VISUAL cropResistant
0f1323230b0b496d,0e169686cad2d248,0b13232b0b0b4d45

Code Analysis

Risk Score 100/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔒 Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • unescape
  • unicode_escape
  • base64_strings

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
United States Department of the Treasury
https://forms.cloud.microsoft/pages/responsepage.aspx?id=zSX...
Jul 23, 2026

Scan History for forms.office.com

Found 10 other scans for this domain

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.