# platform.formbot.com Forms page blank capture | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/platform.formbot.com/ Machine-readable companion: https://phishdestroy.io/domain/platform.formbot.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-11-02 01:53:52 UTC - Selected availability observation: 2026-11-05T02:58:18Z - Stored record updated: 2026-11-05 11:24:00 UTC - VirusTotal detections in the stored snapshot: 7/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 157.151.132.94 - Registrar in stored WHOIS data: Gandi SAS - Last stored HTTP status: 200 (observed: 2026-11-05T02:58:18Z) - Registration date in stored WHOIS data: 2004-08-30 09:01:48 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a199f6-2921-761b-9a60-c7ec6bcca930/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/platform.formbot.com - Certificate Transparency search: https://crt.sh/?q=%25.platform.formbot.com - Web Archive lookup: https://web.archive.org/web/*/https://platform.formbot.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy describes a blank capture of the Forms page at platform.formbot.com, showing only a loading indicator. The captured page at platform.formbot.com carries the title Forms, but the screenshot shows an essentially empty light-colored canvas with a small circular loading indicator in the upper-right corner. No form fields, headings, or other page content are visible, so the main interaction could not be observed in this capture. The page appears to have been captured while still loading, leaving the intended form interface undocumented. The stored VirusTotal domain result reports 7 detections out of 92 engines. DNS8 reported "phishing"; VIPRE reported "phishing". Package revision: 119b4d7f565797f72b71fbb0c70577731606ea64e1aef2404095353b8182c384 Text generated (not scan time): 2026-11-02 03:26:33 Reviewed evidence snapshot: {"domain":"platform.formbot.com","screenshot_available":true,"page_title":"Forms","virustotal":{"detections":7,"engines":92,"malicious":7,"suspicious":0,"retrieved_date":"2026-11-02","analysis_date":"2026-11-01","flagging_vendors":["DNS8","VIPRE","Lionic","Webroot","SOCRadar","Gridinsoft","Chong Lua Dao"],"vendor_labels":{"DNS8":"phishing","VIPRE":"phishing","Lionic":"phishing","Webroot":"malicious","SOCRadar":"phishing","Gridinsoft":"malicious","Chong Lua Dao":"malicious"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-11-02T02:25:46Z","final_host":"platform.formbot.com","captured_on":"2026-11-02"},"plain_text_contract":1,"page_paragraph_target_words":95,"virustotal_public_summary":"The stored VirusTotal domain result reports 7 detections out of 92 engines. DNS8 reported \"phishing\"; VIPRE reported \"phishing\".","page_paragraph_target_characters":520} Source facts (timestamps as stored): {"record_id":1737535,"first_recorded_at":"2026-11-02 02:53:52","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":7,"denominator":92,"malicious":7,"suspicious":0,"vendors":{"DNS8":"phishing","VIPRE":"phishing","Lionic":"phishing","Webroot":"malicious","SOCRadar":"phishing","Gridinsoft":"malicious","Chong Lua Dao":"malicious"},"observed_at":"2026-11-01T07:00:28Z","checked_at":null,"fetched_at":"2026-11-02T02:25:33Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":7,"denominator":92,"malicious":null,"suspicious":null,"vendors":["Chong Lua Dao","DNS8","Gridinsoft","Lionic","SOCRadar","VIPRE","Webroot"],"observed_at":"2026-11-01 07:00:28","checked_at":"2026-11-02 03:25:38","fetched_at":"2026-11-02 02:25:38","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"DNS8":"phishing","VIPRE":"phishing","Lionic":"phishing","Webroot":"malicious","SOCRadar":"phishing","Gridinsoft":"malicious","Chong Lua Dao":"malicious"},"vendor_names":["DNS8","VIPRE","Lionic","Webroot","SOCRadar","Gridinsoft","Chong Lua Dao"],"stats":{"timeout":0,"harmless":54,"malicious":7,"suspicious":0,"undetected":31}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-04 18:01:50"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-02 04:30:18"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1737535,"scope":"checked_url","observed_at":"2026-11-05T02:58:18Z","http_status":200,"http_observed_at":"2026-11-05T02:58:18Z","stored_http_code":200,"stored_http_observed_at":"2026-11-05T02:58:18Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"served_at_root","content_classification_at":"2026-11-05T02:58:18Z","registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - Stored capture: https://i.ibb.co/W4YWPzKd/029daef4ee01.png - URLScan · 2026-11-02: https://screenshots.phishdestroy.io/01a199f6-2921-761b-9a60-c7ec6bcca930.png Captured: 2026-11-02 01:53:35 UTC Source report: https://urlscan.io/result/01a199f6-2921-761b-9a60-c7ec6bcca930/ - URLScan capture: https://urlscan.io/screenshots/01a0af88-057a-77d2-9fde-b8e2b65090df.png Source report: https://urlscan.io/result/01a0af88-057a-77d2-9fde-b8e2b65090df/ - URLScan · 2025-11-04: https://screenshots.phishdestroy.io/us/019a5032-d3c6-71ca-8ee1-1b5dc8749efb.png Captured: 2025-11-04 18:48:27 UTC Source report: https://urlscan.io/result/019a5032-d3c6-71ca-8ee1-1b5dc8749efb/ SHA-256: 6b3efb001391c38de0ea663ba0d133c406d9acca6c32c08fe29b0abadfc06a12 - URLScan · 2025-11-13: https://screenshots.phishdestroy.io/us/019a7c28-8f11-74cb-aab4-9c46e54e97b7.png Captured: 2025-11-13 07:40:35 UTC Source report: https://urlscan.io/result/019a7c28-8f11-74cb-aab4-9c46e54e97b7/ SHA-256: 828ad68a91a0af6b1a4252b5d011c1deff8cc27d8338b00091932157506d2e75 - URLScan · 2025-11-21: https://screenshots.phishdestroy.io/us/019aa775-8a6f-731c-abe7-789cb8e2d00d.png Captured: 2025-11-21 17:28:16 UTC Source report: https://urlscan.io/result/019aa775-8a6f-731c-abe7-789cb8e2d00d/ SHA-256: bff3db46612a76c2ae6d27fa5c7d8e1eb2c3db62255d4e128a5aa1a91c3b4e32 - URLScan · 2025-12-08: https://screenshots.phishdestroy.io/us/019afe0a-dd08-77bd-8ee0-7e41c0d835e5.png Captured: 2025-12-08 12:58:44 UTC Source report: https://urlscan.io/result/019afe0a-dd08-77bd-8ee0-7e41c0d835e5/ SHA-256: c15973a9b0ce00993f82c8954d9c3489d35e84fff97ebb360dc091558ed2d196 - URLScan · 2026-11-02: https://screenshots.phishdestroy.io/us/01a199e6-757b-703d-ae32-0b170781d451.png Captured: 2026-11-02 01:36:30 UTC Source report: https://urlscan.io/result/01a199e6-757b-703d-ae32-0b170781d451/ SHA-256: 7a03d3f3555a5f63c9f451301f72ec69bf3f8b3817bd1193c9e5b648a7301faa - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/8671dcbc-8296-4bae-b1e8-86ec400d6183.png Captured: 2026-11-02 02:25:46 UTC Source report: https://radar.cloudflare.com/scan/8671dcbc-8296-4bae-b1e8-86ec400d6183 SHA-256: dc43a1fcbd629609de28ab9e0bccca5fb2b5078390c575b28280b4a0dc8b2936 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-02T01:56:12Z", "uuid": "01a199f6-2921-761b-9a60-c7ec6bcca930", "scanned_at": "2026-11-02T01:53:35Z", "final_url": "https://platform.formbot.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://platform.formbot.com/", "from": "http://platform.formbot.com/", "status": 307 } ], "ip": "157.151.132.94", "domains": [ "js.stripe.com", "m.stripe.network", "m.stripe.com", "cdnjs.cloudflare.com" ], "ips": [ "35.82.70.222", "3.171.61.46", "13.226.238.86", "13.226.238.54", "104.17.24.14", "157.151.132.94" ], "asns": [ "16509", "13335", "31898" ], "countries": [ "US" ], "doc_hash": "4dc45536c6bd36f68b07b91e24e40357965e912368b943740b95977dc95e810d", "script_hashes": [ "fbbbcd7693eba9bf2e6cc6e6d3d0a943c198a4434b284c09eff479f50e2f5378", "84dac4f7606d5e7a571e7c8ac2b7e8d9dd49e5c15d0ca004b59a726abb696317", "295ec4b3f17e818b406891c5de454e13f1b050df3f52fad3e908b1a93553b865", "5f418f85e5ee40f85ae8363fcc25945c00d56020ea94477564f670502d3c9dcf", "5de86ccd5d3276381cf1239cdc9b3138fe2e57d9674bf369701bc10fab82497a", "4df9c2e559d89fcc7cb7f2ed6bcd180cd98fee77b0a64552a9dac091f0ec8dbb", "541e1aa636736d6ae0956b7ee93a97c261f1f3785a4c7392c3cbe706d6290e83", "dbcce90cf26b7d71a1888667dacbe62bd06b2a178e69324ba7b35266c00d0073", "6b0eb7ace8fc9b86926f9f0c6dc7b6b9df304d748042a66a9e2419a47d9157d0", "2239f20504b2183cc497322498f9309388a99f5f920855136c436c7672741a68" ], "globals": [ "APP", "STRIPE_KEY", "zapier_integration_url", "i18n", "webpackChunk", "__VUE_INSTANCE_SETTERS__", "__VUE_SSR_SETTERS__", "_", "loadVuexyPdfExport", "jQuery", "$", "toastr", "SignaturePad", "Dropzone", "Ladda", "PNotifySuccess", "PNotifyError", "Swal", "IMask", "C2S", "QRCode", "Swiper", "flatpickr", "Backbone", "SVGPathSeg", "SVGPathSegClosePath", "SVGPathSegMovetoAbs", "SVGPathSegMovetoRel", "SVGPathSegLinetoAbs", "SVGPathSegLinetoRel", "SVGPathSegCurvetoCubicAbs", "SVGPathSegCurvetoCubicRel", "SVGPathSegCurvetoQuadraticAbs", "SVGPathSegCurvetoQuadraticRel", "SVGPathSegArcAbs", "SVGPathSegArcRel", "SVGPathSegLinetoHorizontalAbs", "SVGPathSegLinetoHorizontalRel", "SVGPathSegLinetoVerticalAbs", "SVGPathSegLinetoVerticalRel" ], "cookies": [ "XSRF-TOKEN", "formbot_session", "m", "__stripe_mid", "__stripe_sid" ], "tls": { "san": [ "platform.formbot.com" ], "cipher": "AES_128_GCM", "issuer": "YR1", "subject": "platform.formbot.com", "protocol": "TLS 1.3", "valid_to": "2026-12-31T15:30:39Z", "valid_from": "2026-10-02T15:30:40Z" }, "domain_age_days": 1284, "apex_age_days": 1797, "tls_age_days": 30, "tls_valid_days": 89, "requests": 45, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": -66, "malicious": false }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx/1.22.1", "content-type": "text/html; charset=UTF-8" } }, "cf": { "v": 1, "fetched_at": "2026-11-02T02:26:08Z", "uuid": "8671dcbc-8296-4bae-b1e8-86ec400d6183", "scanned_at": "2026-11-02T02:25:46Z", "final_url": "https://platform.formbot.com/", "status": 200, "history": [ { "url": "https://platform.formbot.com/", "status": 200 } ], "dom_hash": "3ca110c7a7d9332d1c77e9d2d879deaaf55838a9cd9954a70b56c3108f55de8f", "doc_hash": "5b32b5d2a2800692d3996cabe076b21f11e543c5b7785b1efd29ea5e0eb9010d", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "platform.formbot.com", "type": "A", "value": "157.151.132.94" } ], "dnssec_valid": false, "ip": "127.0.1.2", "whois": { "registrar": "Gandi SAS", "created": "2004-08-30T11:01:48Z", "updated": "2026-08-14T05:59:14Z", "expires": "2027-08-30T11:01:48Z", "nameservers": [ "ns1.nurd.com", "ns2.nurd.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-02T02:25:33Z", "analysis_at": "2026-11-01T07:00:28Z", "stats": { "timeout": 0, "harmless": 54, "malicious": 7, "suspicious": 0, "undetected": 31 }, "detections": { "DNS8": "phishing", "VIPRE": "phishing", "Lionic": "phishing", "Webroot": "malicious", "SOCRadar": "phishing", "Gridinsoft": "malicious", "Chong Lua Dao": "malicious" }, "reputation": 0, "registrar": "GANDI SAS", "created": "2004-08-30T11:01:48Z", "expires": "2027-08-30T11:01:48Z", "updated": "2026-09-22T15:28:21Z", "first_seen": "2023-09-30T09:55:52Z", "dns": [ { "ttl": 60, "type": "A", "value": "157.151.132.94" } ], "dns_at": "2026-11-01T15:13:02Z", "jarm": "3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb", "cert": { "san": [ "platform.formbot.com" ], "issuer": "Let's Encrypt / YR1", "serial": "56fda2c1ec8c38071743d4ce25d0995ea5d", "sha256": "58bbe9e7489e0916e2188bd7e954168daee3f9cba91d9ccb70c52effd155d595", "subject": "platform.formbot.com", "valid_to": "2026-12-31T15:30:39Z", "valid_from": "2026-10-02T15:30:40Z" }, "whois": { "registrar": "GANDI SAS", "registrar_iana_id": "81", "registrar_url": "http://www.gandi.net", "created": "2004-08-30T09:01:48Z", "updated": "2026-08-14T05:59:14Z", "expires": "2027-08-30T11:01:48Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.nurd.com", "ns2.nurd.com" ], "dnssec": "Unsigned" } }, "webcheck": { "v": 1, "fetched_at": "2026-11-02T01:54:44Z", "caa_records": { "domain": "platform.formbot.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-07-12T17:57:52Z", "first": "2023-06-09T21:12:17Z", "changes": 28, "days_archived": 31, "scans_per_day": 0.03, "avg_page_bytes": 8741 }, "robots_txt": { "agents": [ "*" ], "present": true }, "social_tags": { "title": "Forms" }, "trackers": { "requests": 22, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 180, "tls": 128, "wait": 186, "connect": 143, "download": 0 }, "response_ms": 637 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 9205, "co2_grams": 0.0003, "cleaner_than": 74 }, "dns_server": { "ns": [ { "ip": "199.167.64.4", "host": "ns1.nurd.com" }, { "ip": "104.37.177.4", "host": "ns2.nurd.com" } ], "zone": "formbot.com" }, "cookies": { "cookies": [ { "name": "XSRF-TOKEN", "secure": true, "same_site": "None" }, { "name": "formbot_session", "secure": true, "http_only": true, "same_site": "None" } ] }, "location": { "ip": "157.151.132.94", "asn": "31898", "org": "Oracle Corporation", "city": "Ashburn", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "platform.formbot.com" }, "dns": { "A": [ "157.151.132.94" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "157.151.132.94", "family": 4 }, "redirects": { "chain": [ "https://platform.formbot.com" ] }, "whois": { "registrar": "Gandi SAS", "created": "2004-08-30T11:01:48Z", "updated": "2026-08-14T05:59:14Z", "expires": "2027-08-30T11:01:48Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.nurd.com", "ns2.nurd.com" ] }, "headers": { "headers": { "server": "nginx/1.22.1", "content-type": "text/html; charset=UTF-8" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/cf/8671dcbc-8296-4bae-b1e8-86ec400d6183.png","source":"Cloudflare Radar","report_url":"https://radar.cloudflare.com/scan/8671dcbc-8296-4bae-b1e8-86ec400d6183","captured_at":"2026-11-02T02:25:46Z","sha256":"dc43a1fcbd629609de28ab9e0bccca5fb2b5078390c575b28280b4a0dc8b2936","model_image_sha256":"229789e5749d52df7ebf2aa06725139cf165f2892c388e6561b46730001083df","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/platform.formbot.com/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/platform.formbot.com/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/platform.formbot.com/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/platform.formbot.com/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/platform.formbot.com/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/platform.formbot.com/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/platform.formbot.com/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/platform.formbot.com/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "current_http_probe", "record_id": 1737535, "scope": "checked_url", "observed_at": "2026-11-05T02:58:18Z", "http_status": 200, "http_observed_at": "2026-11-05T02:58:18Z", "stored_http_code": 200, "stored_http_observed_at": "2026-11-05T02:58:18Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "served_at_root", "content_classification_at": "2026-11-05T02:58:18Z", "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```