Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
No screenshot available
Detection Info
https://xfeoxxokua9.typeform.com/to/hz9ethxr
Detected Brand
Typeform
Country
International
Confidence
100%
HTTP Status
200
Report ID
b391f52e-090…
Analyzed
2026-01-05 17:43
Final URL (after redirects)
https://www.typeform.com/explore?utm_source=typeform.com&utm_medium=typeform&utm_content=typeform-incorrectURL&utm_campaign=viral_expt%0A%20%20%20%20
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1E4E3A6B2F144642B52430FE4B1A06B4CB2E7D25DCD830855B3F9979A2BC2D96CDADB1C |
|
CONTENT
ssdeep
|
3072:sinqpjJqZzUpaTTkSaw5Dps3O56aV7ja46GadNxa+vsapIIa5U7aKmT2aHMZzs3G:s8a+vQ |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
ee6a911f1168176d |
|
VISUAL
aHash
|
00f1f1f1f1f1f1ff |
|
VISUAL
dHash
|
790727256565a3d8 |
|
VISUAL
wHash
|
00f1f19191b1f1fe |
|
VISUAL
colorHash
|
06010600000 |
|
VISUAL
cropResistant
|
45a725256565a3d8,c0c198909c9880b4,0020167969192800,1e69f2d0d8da1807 |
Code Analysis
Risk Score
95/100
Threat Level
BAJO
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Threat: No threat detected - This is a legitimate website.
• Target: Users interested in online form creation.
• Method: Website promotes Typeform's services.
• Exfil: No data exfiltration involved.
• Indicators: Official website of Typeform.
• Risk: LOW - Legitimate website.
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- document.write
- hex_escape
- unicode_escape
- base64_strings
🎯 Kit Endpoints
- /admin-security
- https://admin.typeform.com/signup
- /blog/typeform-vs-jotform
- /partners/technology
- /blog/typeform-vs-formstack
- /blog
- https://admin.typeform.com/?cello-open=true
- https://admin.typeform.com/to/dwk6gt/
- https://admin.typeform.com/
- https://admin.typeform.com/login/
📡 API Calls Detected
- GET
- https://www.google.com/ccm/geo
- POST
- //
- https://www.typeform.com/api/v2/track/page/
- https://api.typeform.com/me
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
No screenshot
Typeform
https://www.typeform.com/explore?utm_source=typeform.com&utm...
Jan 20, 2026
Typeform
https://n07ukcgs2x2.typeform.com/ATTsecureportal
Jan 09, 2026
Typeform
https://attbusiness.typeform.com/AirforBusiness
Jan 07, 2026
No screenshot
Unknown
https://form.typeform.com/to/rzX94a3q?typeform-source=rt.wiu...
Jan 07, 2026
Typeform
https://form.typeform.com/to/ObPkVWcU?typeform-source=rt.wiu...
Jan 07, 2026
Scan History for xfeoxxokua9.typeform.com
Found 1 other scan for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.