Security Scan Report: form.jotform.com

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 2 domains to perform 15 HTTP transactions. The main domain is jotform.com and was registered 20 years ago.

Submitted URL: https://form.jotform.com/262591344749366

The Cisco Umbrella rank of the primary domain is #15,649 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 80%

3
Risk Score

French-language form on Jotform titled 'Outlook' collecting username, email and old/new access codes — brand impersonation and credential harvesting, not a Microsoft page.

Risk Factors (3)
Brand impersonation of Microsoft Outlook on a non-Microsoft domain
Form collects username, email and two secret access codes (old/new) — functional credential harvesting
No legitimate relationship between Jotform-hosted form and Microsoft account management
Safety Factors (5)
Hosting platform form.jotform.com is a well-established domain (20 years, ranked ~15K)
No Indicators of Compromise, YARA malware, IDS alerts or JavaScript behavioral anomalies detected
No payment fields and cross-origin submission goes to Jotform's own submit endpoint
Established domain (7645 days old) with no strong malicious indicators — risk clamped from 8 to 5
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

Outlook

Scan Type

public

Domain Name Analysis

The domain name 'form.jotform.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'form'. The second-level label 'jotform' is 7 characters long split between two vowels and 5 consonants. Word splitting yields two words: jot, form. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://form.jotform.com/262591344749366

Page Load Overview

0.64s
Total Load Time
90 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:51%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:132 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as fr

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
834.102.158.113Google · CDNKansas City, Missouri, United States
AS396982Google LLC
78.233.166.209Google · CDNKansas City, Missouri, United States
AS396982Google LLC
152--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C1C2F64E6A71591A263789E8F1CFFBC463798011C60C4D24F16E58E92BDEFD5912339C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:ve1T2Ia6p2LGWx1c4qimCWoP1PAIP8P4P+PEPHP9NTkoV5DxVF+NX2r4yQ49NMBM:XLGU1cPhDotII0wGMPFNTkmDxaXm4o

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28253:IHBrHIInEFRABiWQdEAIhyizBDfAagcAHE8AnAFGjzgrOEFEJYpUcAhszCBhaxQkhoMN6BoAJECkBikUX6gogwBCAN0AFA4J

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c3c3c3c00000000
Perceptual Hash:9b9b716464667171
Difference Hash:69696969700c0000
Wavelet Hash:3c3c3c3c00000000
Color Hash:#d279a7

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data