# heyform.net — Recorded security evidence | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/heyform.net/
Machine-readable companion: https://phishdestroy.io/domain/heyform.net/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: Last known active
- First observed by PhishDestroy: 2026-10-28 20:30:25 UTC
- Selected availability observation: 2026-11-10T23:37:51Z
- Stored record updated: 2026-11-10 23:37:51 UTC
- VirusTotal detections in the stored snapshot: 3/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean

## Stored labels and detections

- Automated brand label (collector metadata; not a confirmed impersonation finding): dropbox

## Stored infrastructure

- Observed IP address: 104.21.45.94
- Registrar in stored WHOIS data: Squarespace Domains II LLC
- Registrar country in stored WHOIS data: US
- Last stored HTTP status: 200 (observed: 2026-11-10T23:37:51Z)
- Registration date in stored WHOIS data: 2020-07-22 01:52:27 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a18433-1a3e-7439-9899-9039c9de01f1/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/heyform.net
- Certificate Transparency search: https://crt.sh/?q=%25.heyform.net
- Web Archive lookup: https://web.archive.org/web/*/https://heyform.net/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy stores a record for heyform.net. Source observations are dated separately; missing checks do not establish safety.

PhishDestroy stores a record for heyform.net. Source observations are dated separately; missing checks do not establish safety.

A reviewed analysis is not available for this text revision. Consult the dated source records below.
Package revision: a6a349db7c96000f67720298c90d605938b90ea33aff1d8c7805976837095957
Source facts (timestamps as stored): {"record_id":1698502,"first_recorded_at":"2026-10-28 21:30:25","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":3,"denominator":92,"malicious":2,"suspicious":1,"vendors":{"Seclookup":"malicious","Gridinsoft":"phishing","alphaMountain.ai":"suspicious"},"observed_at":"2026-10-27T05:30:01Z","checked_at":null,"fetched_at":"2026-10-28T21:34:28Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":8,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","Chong Lua Dao","DNS8","Forcepoint ThreatSeeker","Gridinsoft","Seclookup","URLQuery","VIPRE"],"observed_at":null,"checked_at":"2026-11-01 04:03:12","fetched_at":"2026-11-01 03:03:13","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"Seclookup":"malicious","Gridinsoft":"phishing","alphaMountain.ai":"suspicious"},"vendor_names":["Seclookup","Gridinsoft","alphaMountain.ai"],"stats":{"timeout":0,"harmless":53,"malicious":2,"suspicious":1,"undetected":36}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-10 18:00:35"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-10-29 00:30:22"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1698502,"scope":"checked_url","observed_at":"2026-11-10T23:37:51Z","http_status":200,"http_observed_at":"2026-11-10T23:37:51Z","stored_http_code":200,"stored_http_observed_at":"2026-11-10T23:37:51Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"served_at_root","content_classification_at":"2026-11-10T11:23:39Z","registration_state":"unknown","policy":"20261102-dated-availability-v2"}}

## Stored page captures

- URLScan · 2026-10-28: https://screenshots.phishdestroy.io/01a18433-1a3e-7439-9899-9039c9de01f1.png
  Captured: 2026-10-28 20:28:38 UTC
  Source report: https://urlscan.io/result/01a18433-1a3e-7439-9899-9039c9de01f1/
- URLScan · 2025-12-08: https://screenshots.phishdestroy.io/us/019afdc1-2dcf-749f-a0e1-a1afeb89beec.png
  Captured: 2025-12-08 11:38:12 UTC
  Source report: https://urlscan.io/result/019afdc1-2dcf-749f-a0e1-a1afeb89beec/
  SHA-256: f5f38f692fb27d93d71429982bc5330bc127011b1d42dd637cc0894a4bc6798e
- URLScan · 2026-03-20: https://screenshots.phishdestroy.io/us/019d0970-ae45-732a-be78-b555f44a87e1.png
  Captured: 2026-03-20 04:11:20 UTC
  Source report: https://urlscan.io/result/019d0970-ae45-732a-be78-b555f44a87e1/
  SHA-256: f5f38f692fb27d93d71429982bc5330bc127011b1d42dd637cc0894a4bc6798e
- URLScan · 2026-04-30: https://screenshots.phishdestroy.io/us/019ddda1-09ed-7518-998e-2ccc9c4119f8.png
  Captured: 2026-04-30 09:03:37 UTC
  Source report: https://urlscan.io/result/019ddda1-09ed-7518-998e-2ccc9c4119f8/
  SHA-256: a4971030ddc4db690b2469cac6df141a268574477eb0af69297334e1843f32f0
- URLScan · 2026-04-30: https://screenshots.phishdestroy.io/us/019dddf2-43ee-7525-8784-4cd66f3cbc8f.png
  Captured: 2026-04-30 10:32:23 UTC
  Source report: https://urlscan.io/result/019dddf2-43ee-7525-8784-4cd66f3cbc8f/
  SHA-256: 6995a4761afcfd2fb955b1bc05f8426831ced21ade9d429caf7fba21ef3dbb93
- URLScan · 2026-06-01: https://screenshots.phishdestroy.io/us/019e83b7-77aa-736f-89e2-bdaa168f5bd3.png
  Captured: 2026-06-01 15:05:50 UTC
  Source report: https://urlscan.io/result/019e83b7-77aa-736f-89e2-bdaa168f5bd3/
  SHA-256: 0586b9556fc8c539a4829a276b36ca919b130318685131b2ee9d289b3197bc10
- URLScan · 2026-10-23 · via date-aidan.click: https://screenshots.phishdestroy.io/us/01a168c9-9c69-71f5-a92f-b79deceb9ac5.png
  Captured: 2026-10-23 12:43:31 UTC
  Source report: https://urlscan.io/result/01a168c9-9c69-71f5-a92f-b79deceb9ac5/
  SHA-256: a903cd5f46b4a953d3b53cbce8689c3b79e06fefa5c9934fae2300205d98486d
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/a842f5fa-2608-4c5e-9d9d-ef4cf59cc18c.png
  Captured: 2026-10-28 21:02:26 UTC
  Source report: https://radar.cloudflare.com/scan/a842f5fa-2608-4c5e-9d9d-ef4cf59cc18c
  SHA-256: eafe49c5ad1a5cbe7a7a4ac3d738bc29f61aa1e27e4c8f3b73c279a561048614
- URLQuery: https://screenshots.phishdestroy.io/uq/3a86b2e7-10b2-4877-b4a4-37b65ed24030.png
  Source report: https://urlquery.net/report/3a86b2e7-10b2-4877-b4a4-37b65ed24030
  SHA-256: 8f91dc6698ceabf52f1aa8c47d2322dcdb39cedf816a35967a1b5f7556d392c5

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-28T21:03:07Z",
        "uuid": "01a18433-1a3e-7439-9899-9039c9de01f1",
        "scanned_at": "2026-10-28T20:28:38Z",
        "final_url": "https://heyform.net/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://heyform.net/",
                "from": "http://heyform.net/",
                "status": 307
            }
        ],
        "ip": "104.21.45.94",
        "domains": [
            "rybbit.thestack.net",
            "www.googletagmanager.com",
            "accounts.google.com",
            "heyform.b-cdn.net",
            "hackernews-badge.vercel.app",
            "region1.google-analytics.com",
            "ad.doubleclick.net",
            "www.google.com",
            "r2.leadsy.ai",
            "cdn.trackdesk.com"
        ],
        "ips": [
            "216.239.32.36",
            "142.251.14.149",
            "142.251.152.119",
            "104.26.7.99",
            "142.251.14.97",
            "104.21.84.119",
            "142.251.127.84",
            "188.114.97.3",
            "185.111.111.158",
            "216.198.79.195",
            "104.21.45.94"
        ],
        "asns": [
            "15169",
            "13335",
            "212238",
            "16509"
        ],
        "countries": [
            "US",
            "DE"
        ],
        "link_domains": [
            "my.heyform.net",
            "docs.heyform.net",
            "github.com",
            "www.producthunt.com",
            "x.com",
            "trstp.lt",
            "www.linkedin.com",
            "trendshift.io",
            "discord.gg",
            "climate.stripe.com",
            "earlybird.im",
            "www.facebook.com",
            "twitter.com"
        ],
        "social": [
            "https://github.com/heyform/heyform",
            "https://x.com/valtlfelipe/status/1846216318338343321",
            "https://x.com/kakeyang/status/1846479958035620236",
            "https://x.com/JulienDelRio/status/1825813043608965441",
            "https://x.com/iamkylebalmer/status/1839313606036586545",
            "https://x.com/lycfyi/status/1846182673917653329",
            "https://x.com/CoooolXyh/status/1798263302642090278",
            "https://x.com/khulanwar/status/1847811512821567587",
            "https://x.com/QuentinLemCode/status/1795451909022654472",
            "https://github.com/heyform/heyform/releases",
            "https://discord.gg/sgT4v4GSTe",
            "https://x.com/LuoBaishun",
            "https://x.com/mufeng_me",
            "https://www.facebook.com/HeyformHQ",
            "https://twitter.com/HeyformHQ"
        ],
        "doc_hash": "e951de767b6e5131991b36ede16d9e2025f2916317aa640daa86098b59183ab1",
        "script_hashes": [
            "218a25387a23ae4acf3970558cc49e68c20d79efcd51fa0ea5106ba9747991ad",
            "b36172c0a107f644cf23c8713df4ac74194d46450e398f0f56cd1c97170b1e10",
            "15f08a96d4f8948b5fb3d0a15e23be8aa5f793d1ae15364ae21d4ff5a5a84765",
            "819b9ab6a4e1da52953123913bb7dc13f53439ed19eea4d9111265d7ccac6083",
            "aec49b929510e871e6eb3586eb18c102826c40d087930bfefbca950e3c804ba8",
            "96b6a95a944c6a485d85454e953fa0fcc53e75d093a6a5a7242af1c731c3904e",
            "661d846f652085a816fb34e6729a8778101bae44a63bfb0792a523615dcb59f5",
            "ebeb7f7addd98a3890c4db51da512a9af4bae1f1f968afc23df18210a3ac8d7c",
            "995cd12531229932686c784120e86b92cb8950173dbe15913f324c3800c1f038",
            "28800ab37fb7a11833581bc66f824f41e520d3181061a2fa7cc04f90fd316dae"
        ],
        "globals": [
            "$RT",
            "$RB",
            "$RV",
            "$RC",
            "TURBOPACK",
            "next",
            "__next_set_public_path__",
            "__webpack_hash__",
            "__NEXT_DATA__",
            "__SSG_MANIFEST_CB",
            "__NEXT_P",
            "__turbopack_load_page_chunks__",
            "__BUILD_MANIFEST",
            "__SSG_MANIFEST",
            "__MIDDLEWARE_MATCHERS",
            "TrackdeskObject",
            "trackdesk",
            "gtag",
            "dataLayer",
            "_extends",
            "rybbit",
            "default_gsi",
            "_F_toggles_default_gsi",
            "google",
            "__G_ID_CLIENT__",
            "closure_lm_641522",
            "google_tag_data",
            "google_tag_manager",
            "onYouTubeIframeAPIReady",
            "gaGlobal"
        ],
        "cookies": [
            "HEYFORM_USER_ID",
            "_gcl_au",
            "_ga_NGB9WX5Z4X",
            "_ga",
            "g_state"
        ],
        "storage_keys": [
            "__sak",
            "_gcl_ls"
        ],
        "tls": {
            "san": [
                "heyform.net",
                "*.heyform.net"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "heyform.net",
            "protocol": "QUIC",
            "valid_to": "2027-01-15T17:37:46Z",
            "valid_from": "2026-10-17T16:39:54Z"
        },
        "domain_age_days": 1997,
        "apex_age_days": 1997,
        "tls_age_days": 11,
        "tls_valid_days": 90,
        "requests": 99,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 5,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "priority": "u=0,i"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-28T21:03:09Z",
        "uuid": "a842f5fa-2608-4c5e-9d9d-ef4cf59cc18c",
        "scanned_at": "2026-10-28T21:02:26Z",
        "final_url": "https://heyform.net/",
        "status": 200,
        "history": [
            {
                "url": "https://heyform.net/",
                "status": 200
            }
        ],
        "dom_hash": "3670dd63d96ca7eb1647b11406af46897d1e1a0cb5a064719dc5f67598dced59",
        "doc_hash": "cb0348530296a130261622ab3ae88f44cc234a38e53eb489129f3d9a426a233e",
        "domain_risks": [
            "Business",
            "Business & Economy",
            "Technology"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "heyform.net",
                "type": "A",
                "value": "104.21.45.94"
            },
            {
                "name": "heyform.net",
                "type": "A",
                "value": "172.67.212.218"
            },
            {
                "name": "heyform.net",
                "type": "AAAA",
                "value": "2606:4700:3032::ac43:d4da"
            },
            {
                "name": "heyform.net",
                "type": "AAAA",
                "value": "2606:4700:3030::6815:2d5e"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.33",
        "whois": {
            "registrar": "Squarespace Domains II LLC",
            "created": "2020-07-22T03:52:27Z",
            "updated": "2024-05-15T01:00:13Z",
            "expires": "2032-07-22T03:52:27Z",
            "nameservers": [
                "dave.ns.cloudflare.com",
                "erin.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-28T21:34:28Z",
        "analysis_at": "2026-10-27T05:30:01Z",
        "stats": {
            "timeout": 0,
            "harmless": 53,
            "malicious": 2,
            "suspicious": 1,
            "undetected": 36
        },
        "detections": {
            "Seclookup": "malicious",
            "Gridinsoft": "phishing",
            "alphaMountain.ai": "suspicious"
        },
        "reputation": 0,
        "popularity": {
            "Alexa": 204613,
            "Statvoo": 204613,
            "Majestic": 468227,
            "Cisco Umbrella": 933538,
            "Cloudflare Radar": 1000000
        },
        "registrar": "Squarespace Domains II LLC",
        "created": "2020-07-22T03:52:27Z",
        "expires": "2032-07-22T03:52:27Z",
        "updated": "2024-05-15T01:00:13Z",
        "first_seen": "2023-10-12T16:30:37Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3030::6815:2d5e"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "ahrefs-site-verification_b075203e1bc3f4149b1cb97d509e2b96067fcb86285b8b06ca162d9761e58bde"
            },
            {
                "ttl": 3600,
                "type": "CAA",
                "value": "ssl.com"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "yandex-verification: eace346392141d0f"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "v=spf1 mx -all"
            },
            {
                "ttl": 3600,
                "type": "CAA",
                "value": "digicert.com;"
            },
            {
                "ttl": 3600,
                "type": "CAA",
                "value": "comodoca.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3032::ac43:d4da"
            },
            {
                "ttl": 3600,
                "type": "CAA",
                "value": "letsencrypt.org"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "hubspot-developer-verification=ODA5NTJmNjgtYTYwZi00MmU1LWE2ZjYtOWU4OWFmOGYzMzZk"
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "root.v2d.net",
                "priority": 10
            },
            {
                "ttl": 3600,
                "type": "CAA",
                "value": "pki.goog;"
            },
            {
                "ttl": 3600,
                "type": "CAA",
                "value": "letsencrypt.org"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.212.218"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "dave.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "mail-host-verify=19360d0"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "erin.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "dave.ns.cloudflare.com"
            },
            {
                "ttl": 3600,
                "type": "CAA",
                "value": "pki.goog;"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "google-site-verification=w-DeMZKJFCmHr4lvBoy3AcznOGWKs5uxE5G_8b57_Kg"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.45.94"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "google-site-verification=H_DED5pehiUywmh3xceLJ2brtp27DIx0DLrg6CWeNH8"
            },
            {
                "ttl": 3600,
                "type": "CAA",
                "value": "ssl.com"
            },
            {
                "ttl": 3600,
                "type": "CAA",
                "value": "digicert.com;"
            },
            {
                "ttl": 3600,
                "type": "CAA",
                "value": "comodoca.com"
            }
        ],
        "dns_at": "2026-10-27T05:30:29Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "heyform.net",
                "*.heyform.net"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "53062d94b15c21da13ab0271cccffbc8",
            "sha256": "1dcaffa99a87db1ab668e415a2b618e3e6becf99754002e892054464ecbbfe0f",
            "subject": "heyform.net",
            "valid_to": "2027-01-15T17:37:46Z",
            "valid_from": "2026-10-17T16:39:54Z"
        },
        "whois": {
            "registrar": "Squarespace Domains II LLC",
            "registrar_iana_id": "895",
            "registrar_url": "http://domains2.squarespace.com",
            "created": "2020-07-22T03:52:27Z",
            "updated": "2024-05-15T01:00:13Z",
            "expires": "2032-07-22T03:52:27Z",
            "status": [
                "client",
                "clientDeleteProhibited",
                "clientTransferProhibited"
            ],
            "nameservers": [
                "dave.ns.cloudflare.com",
                "erin.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited",
                "client delete prohibited"
            ],
            "events": {
                "expiration": "2032-07-22T03:52:27Z",
                "last changed": "2024-05-15T01:00:13Z",
                "registration": "2020-07-22T03:52:27Z",
                "registrar expiration": "2032-07-22T03:52:27Z",
                "last update of RDAP database": "2024-05-15T01:00:13Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-28T20:49:01Z",
        "mail_config": {
            "mx": [
                "root.v2d.net"
            ],
            "spf": "v=spf1 mx -all",
            "dkim": [
                "dkim",
                "mail"
            ],
            "dmarc": true,
            "dkim_bits": 2048,
            "spf_lookups": 1
        },
        "caa_records": {
            "count": 10,
            "domain": "heyform.net",
            "issuers": [
                "ssl.com",
                "comodoca.com",
                "digicert.com; cansignhttpexchanges=yes",
                "letsencrypt.org",
                "pki.goog; cansignhttpexchanges=yes"
            ]
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-28T20:31:24Z",
            "first": "2010-12-30T03:58:08Z",
            "changes": 218,
            "days_archived": 244,
            "scans_per_day": 0.04,
            "avg_page_bytes": 13177
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://heyform.net/sitemap.xml",
                "https://heyform.net/blog/sitemap.xml",
                "https://heyform.net/changelog/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 242
        },
        "social_tags": {
            "ogUrl": "https://heyform.net",
            "title": "HeyForm: Open source form builder, built for small business success",
            "ogType": "website",
            "ogImage": "https://heyform.net/static/og.png",
            "ogTitle": "HeyForm: Open source form builder, built for small business success",
            "ogSiteName": "HeyForm",
            "themeColor": "#fff",
            "description": "Create surveys, quizzes, and polls with HeyForm's free form builder. Sign up now to craft beautiful, interactive online forms easily and quickly for FREE.",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://heyform.net",
            "ogDescription": "Create surveys, quizzes, and polls with HeyForm's free form builder. Sign up now to craft beautiful, interactive online forms easily and quickly for FREE."
        },
        "trackers": {
            "requests": 50,
            "trackers": [
                {
                    "name": "Bunny CDN",
                    "company": "BunnyWay",
                    "country": "SI",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 205,
                "tls": 42,
                "wait": 355,
                "connect": 11,
                "download": 11
            },
            "response_ms": 624
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 146951,
            "co2_grams": 0.0054,
            "cleaner_than": 14
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.192.113",
                    "host": "erin.ns.cloudflare.com"
                },
                {
                    "ip": "173.245.59.109",
                    "host": "dave.ns.cloudflare.com"
                }
            ],
            "zone": "heyform.net"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "HEYFORM_USER_ID",
                    "secure": true,
                    "same_site": "Strict"
                },
                {
                    "name": "_gcl_au"
                },
                {
                    "name": "g_state"
                },
                {
                    "name": "_ga_NGB9WX5Z4X"
                },
                {
                    "name": "_ga"
                }
            ]
        },
        "location": {
            "ip": "2606:4700:3030::6815:2d5e",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "heyform.net"
        },
        "dns": {
            "A": [
                "172.67.212.218",
                "104.21.45.94"
            ],
            "MX": [
                "{\"exchange\": \"root.v2d.net\", \"priority\": 10}"
            ],
            "NS": [
                "dave.ns.cloudflare.com",
                "erin.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"dave.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417744509, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "ahrefs-site-verification_b075203e1bc3f4149b1cb97d509e2b96067fcb86285b8b06ca162d9761e58bde",
                "google-site-verification=w-DeMZKJFCmHr4lvBoy3AcznOGWKs5uxE5G_8b57_Kg",
                "mail-host-verify=19360d0",
                "google-site-verification=H_DED5pehiUywmh3xceLJ2brtp27DIx0DLrg6CWeNH8",
                "v=spf1 mx -all",
                "hubspot-developer-verification=ODA5NTJmNjgtYTYwZi00MmU1LWE2ZjYtOWU4OWFmOGYzMzZk",
                "yandex-verification: eace346392141d0f"
            ],
            "AAAA": [
                "2606:4700:3030::6815:2d5e",
                "2606:4700:3032::ac43:d4da"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3030::6815:2d5e",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://heyform.net"
            ]
        },
        "rank": {
            "domain": "heyform.net"
        },
        "linked_pages": {
            "external": [
                "https://my.heyform.net/sign-up",
                "https://www.producthunt.com/products/heyform",
                "https://www.producthunt.com/products/heyform-2-0",
                "https://x.com/valtlfelipe/status/1846216318338343321",
                "https://x.com/kakeyang/status/1846479958035620236",
                "https://x.com/JulienDelRio/status/1825813043608965441",
                "https://trstp.lt/fhQyN9KXm",
                "https://www.producthunt.com/products/heyform-2-0",
                "https://www.linkedin.com/posts/alicorn-hunt_testing-heyform-heyform-activity-7181051201398919168-Hzme",
                "https://www.linkedin.com/posts/olivier-poncet-33369010_github-heyformheyform-heyform-is-an-open-source-activity-7181168567910903810-junw",
                "https://x.com/iamkylebalmer/status/1839313606036586545",
                "https://x.com/lycfyi/status/1846182673917653329",
                "https://x.com/CoooolXyh/status/1798263302642090278",
                "https://trstp.lt/O92NlW4-x",
                "https://x.com/khulanwar/status/1847811512821567587",
                "https://x.com/QuentinLemCode/status/1795451909022654472",
                "https://github.com/heyform/heyform",
                "https://trendshift.io/repositories/9025",
                "https://docs.heyform.net/integrations/lark-suite",
                "https://docs.heyform.net/integrations/telegram",
                "https://docs.heyform.net/integrations/email",
                "https://docs.heyform.net/integrations/webhook",
                "https://docs.heyform.net/integrations/hubspot",
                "https://docs.heyform.net/integrations/google-drive",
                "https://docs.heyform.net/integrations/airtable"
            ],
            "external_count": 46,
            "internal_count": 31
        },
        "whois": {
            "registrar": "Squarespace Domains II LLC",
            "created": "2020-07-22T03:52:27Z",
            "updated": "2024-05-15T01:00:13Z",
            "expires": "2032-07-22T03:52:27Z",
            "status": [
                "clientDeleteProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "dave.ns.cloudflare.com",
                "erin.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8"
            }
        }
    }
}
```

## Complete dated records
Availability observations: https://phishdestroy.io/domain/heyform.net/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/heyform.net/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/heyform.net/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/heyform.net/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/heyform.net/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/heyform.net/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/heyform.net/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/heyform.net/records.json?source=content&format=json

## Dated availability observation
Latest stored reachability observation
```json
{
    "state": "alive",
    "label_key": "availability.active",
    "detail_key": "detail.latest_reachability",
    "params": [],
    "source": "current_http_probe",
    "record_id": 1698502,
    "scope": "checked_url",
    "observed_at": "2026-11-10T23:37:51Z",
    "http_status": 200,
    "http_observed_at": "2026-11-10T23:37:51Z",
    "stored_http_code": 200,
    "stored_http_observed_at": "2026-11-10T23:37:51Z",
    "legacy_site_status": "alive",
    "supports_outcome_badge": false,
    "content_classification": "served_at_root",
    "content_classification_at": "2026-11-10T11:23:39Z",
    "registration_state": "unknown",
    "policy": "20261102-dated-availability-v2"
}
```