# roleenvoy.com: Applicant Application Form with WhatsApp Follow-Up | PhishDestroy
Content language: English
Canonical HTML report: https://phishdestroy.io/domain/roleenvoy.com/
Machine-readable companion: https://phishdestroy.io/domain/roleenvoy.com/llm.txt
## Summary
PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.
## Stored observations
- Listed by PhishDestroy: yes
- Availability at last stored check: Last known active
- First observed by PhishDestroy: 2026-11-12 15:25:42 UTC
- Selected availability observation: 2026-11-12T15:27:17Z
- Stored record updated: 2026-11-12 16:03:23 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean
## Stored infrastructure
- Observed IP address: 188.114.97.1
- Registrar in stored WHOIS data: NameCheap, Inc.
- Last stored HTTP status: 200 (observed: 2026-11-12T15:27:17Z)
- Registration date in stored WHOIS data: 2026-09-16 03:05:33 UTC
## Evidence links
- URLScan report: https://urlscan.io/result/01a1d054-e468-74f5-ab62-43a889b98b92/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/roleenvoy.com
- Certificate Transparency search: https://crt.sh/?q=%25.roleenvoy.com
- Web Archive lookup: https://web.archive.org/web/*/https://roleenvoy.com/
## Corrections
- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq
## Public report package
PhishDestroy records roleenvoy.com showing an applicant application form requesting name, WhatsApp number, gender, age, and email for follow-up contact.
On 2026-11-12, roleenvoy.com displayed an applicant-facing page headed "Start your application" with an "APPLICANTS" label. The page instructs visitors to fill in a short form and states that after submitting they will be connected with the team on WhatsApp, asking them to send a WhatsApp message to complete the application. The visible form is titled "Application Form" and includes fields for name, registered WhatsApp number, gender, age, and email, plus a "Submit Your Application" button. A notice asks applicants to provide a correct WhatsApp number so the team can reach out within the next 24 hours.
The stored VirusTotal domain result reports 1 detections out of 92 engines. Bfore.Ai PreCrime reported "malicious".
Package revision: 37f0a8f4773a67dd8c5dc40c1864a2d9a67d726e975fdfb9dfcfb994d25c919e
Text generated (not scan time): 2026-11-12 17:02:56
Reviewed evidence snapshot: {"domain":"roleenvoy.com","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"www.roleenvoy.com","final_host":"www.roleenvoy.com","redirects":[],"captured_at":"2026-11-12T15:16:35.970000Z","uuid":"01a1d054-e468-74f5-ab62-43a889b98b92","report_url":"https://urlscan.io/result/01a1d054-e468-74f5-ab62-43a889b98b92/","sha256":"d127f44ea7438dbb6478351c69f1a967cd41b902100dc5fdb72c3fb6f367d33b","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","initial_ai_description":"The website appears to be a legitimate business offering remote job opportunities. There is no evidence of impersonation, fake store characteristics, or other malicious behavior.","initial_ai_description_kind":"unverified previous AI opinion","virustotal":{"scope":"domain","detections":1,"engines":92,"malicious":1,"suspicious":0,"analysis_date":"2026-10-30","retrieved_date":"2026-11-12","vendor_labels":{"Bfore.Ai PreCrime":"malicious"},"flagging_vendors":["Bfore.Ai PreCrime"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 1 detections out of 92 engines. Bfore.Ai PreCrime reported \"malicious\".","page_paragraph_target_characters":563}
Source facts (timestamps as stored): {"record_id":1943352,"first_recorded_at":"2026-11-12 16:25:42","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":1,"denominator":92,"malicious":1,"suspicious":0,"vendors":{"Bfore.Ai PreCrime":"malicious"},"observed_at":"2026-10-30T05:27:05Z","checked_at":null,"fetched_at":"2026-11-12T15:27:56Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":1,"denominator":92,"malicious":null,"suspicious":null,"vendors":["Bfore.Ai PreCrime"],"observed_at":"2026-10-30 05:27:05","checked_at":"2026-11-12 16:27:56","fetched_at":"2026-11-12 15:27:57","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"Bfore.Ai PreCrime":"malicious"},"vendor_names":["Bfore.Ai PreCrime"],"stats":{"timeout":0,"harmless":56,"malicious":1,"suspicious":0,"undetected":35}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-12 17:01:04"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-12 16:46:58"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1943352,"scope":"checked_url","observed_at":"2026-11-12T15:27:17Z","http_status":200,"http_observed_at":"2026-11-12T15:27:17Z","stored_http_code":200,"stored_http_observed_at":"2026-11-12T15:27:17Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}}
## Stored page captures
- URLScan ยท 2026-11-12: https://screenshots.phishdestroy.io/us/01a1d054-e468-74f5-ab62-43a889b98b92.png
Captured: 2026-11-12 15:16:35 UTC
Source report: https://urlscan.io/result/01a1d054-e468-74f5-ab62-43a889b98b92/
SHA-256: d127f44ea7438dbb6478351c69f1a967cd41b902100dc5fdb72c3fb6f367d33b
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/85084fea-a0bd-4c78-91eb-69d47d49fc7c.png
Captured: 2026-11-12 15:28:46 UTC
Source report: https://radar.cloudflare.com/scan/85084fea-a0bd-4c78-91eb-69d47d49fc7c
SHA-256: fbb3f780b46f1285e4df31b91a974c57e317f7b84eb04f8f6533690287641eeb
## Collected source observations
Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
"urlscan": {
"v": 1,
"fetched_at": "2026-11-12T15:30:39Z",
"uuid": "01a1d054-e468-74f5-ab62-43a889b98b92",
"scanned_at": "2026-11-12T15:16:35Z",
"final_url": "https://www.roleenvoy.com/apply-now/",
"status": 200,
"ip": "104.21.85.40",
"domains": [
"fonts.gstatic.com",
"fonts.googleapis.com",
"static.cloudflareinsights.com"
],
"ips": [
"142.251.163.94",
"104.16.79.73",
"142.251.163.95",
"104.21.85.40"
],
"asns": [
"15169",
"13335"
],
"countries": [
"US"
],
"doc_hash": "8d0fdac146c52d183c4291d0b9415e690b1dbebda718842f5eddf91be4d37abd",
"script_hashes": [
"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf",
"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89",
"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1",
"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9",
"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca",
"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0",
"a81bcb14202d3a3874277d5010e94b8ca2ed4b705a47b20501084db201698528",
"37d0f8b07b5358d209cf39ca8bd3c7be679a610afa59c5b5ea4f164131204f38",
"b374e10bcffae8cceceba134d3e33a9fc0d92a18d4cb5285ffa8242bebb96aae",
"c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474"
],
"globals": [
"elementskit",
"jQuery",
"wp",
"swv",
"wpcf7",
"nbcpf",
"webpackChunkelementorFrontend",
"elementorModules",
"elementorFrontendConfig",
"elementorFrontend",
"jkit_ajax_url",
"jkit_nonce",
"ekit_config",
"ElementsKit_Helper",
"_wpemojiSettings",
"__cfBeacon",
"twemoji"
],
"storage_keys": [
"wpEmojiSettingsSupports"
],
"tls": {
"san": [
"*.roleenvoy.com",
"roleenvoy.com"
],
"cipher": "AES_128_GCM",
"issuer": "YE1",
"subject": "roleenvoy.com",
"protocol": "QUIC",
"valid_to": "2026-12-15T04:46:38Z",
"valid_from": "2026-09-16T04:46:39Z"
},
"domain_age_days": 57,
"apex_age_days": 57,
"tls_age_days": 57,
"tls_valid_days": 89,
"requests": 57,
"verdicts": {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-2aab354"
],
"score": 79,
"malicious": true
},
"overall": {
"score": 10,
"malicious": true,
"categories": [
"scam",
"phishing"
]
},
"community": {
"score": 10,
"malicious": true,
"categories": [
"scam",
"phishing"
],
"votes_total": 1,
"votes_malicious": 1
}
},
"headers": {
"server": "cloudflare",
"content-type": "text/html; charset=UTF-8",
"x-powered-by": "PHP/8.1.34",
"priority": "u=0,i",
"link": "; rel=\"https://api.w.org/\"\n; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\"\n200000"
},
"dns": [
{
"name": "roleenvoy.com",
"type": "A",
"value": "188.114.96.0"
},
{
"name": "roleenvoy.com",
"type": "A",
"value": "188.114.97.0"
},
{
"name": "roleenvoy.com",
"type": "AAAA",
"value": "2a06:98c1:3120::"
},
{
"name": "roleenvoy.com",
"type": "AAAA",
"value": "2a06:98c1:3121::"
}
],
"dnssec_valid": false,
"ip": "188.114.96.0",
"whois": {
"registrar": "NameCheap, Inc.",
"created": "2026-09-16T05:05:33Z",
"updated": "2026-09-16T05:43:27Z",
"expires": "2027-09-16T05:05:33Z",
"nameservers": [
"chloe.ns.cloudflare.com",
"todd.ns.cloudflare.com"
]
}
},
"vt": {
"v": 1,
"fetched_at": "2026-11-12T15:27:56Z",
"analysis_at": "2026-10-30T05:27:05Z",
"stats": {
"timeout": 0,
"harmless": 56,
"malicious": 1,
"suspicious": 0,
"undetected": 35
},
"detections": {
"Bfore.Ai PreCrime": "malicious"
},
"reputation": 0,
"registrar": "NAMECHEAP INC",
"created": "2026-09-16T05:05:33Z",
"expires": "2027-09-16T05:05:33Z",
"updated": "2026-09-16T05:43:27Z",
"first_seen": "2026-09-16T06:57:17Z",
"dns": [
{
"ttl": 300,
"type": "MX",
"value": "eforward5.registrar-servers.com",
"priority": 20
},
{
"ttl": 21600,
"type": "NS",
"value": "todd.ns.cloudflare.com"
},
{
"ttl": 1800,
"type": "SOA",
"rname": "dns.cloudflare.com",
"value": "chloe.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "A",
"value": "172.67.202.15"
},
{
"ttl": 300,
"type": "MX",
"value": "eforward4.registrar-servers.com",
"priority": 15
},
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:3031::ac43:ca0f"
},
{
"ttl": 300,
"type": "A",
"value": "104.21.85.40"
},
{
"ttl": 300,
"type": "MX",
"value": "eforward3.registrar-servers.com",
"priority": 10
},
{
"ttl": 300,
"type": "MX",
"value": "eforward1.registrar-servers.com",
"priority": 10
},
{
"ttl": 21600,
"type": "NS",
"value": "chloe.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:3033::6815:5528"
},
{
"ttl": 300,
"type": "TXT",
"value": "v=spf1 include:spf.efwd.registrar-servers.com ~all"
},
{
"ttl": 300,
"type": "MX",
"value": "eforward2.registrar-servers.com",
"priority": 10
}
],
"dns_at": "2026-10-30T05:32:56Z",
"jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
"cert": {
"san": [
"*.roleenvoy.com",
"roleenvoy.com"
],
"issuer": "Let's Encrypt / YE1",
"serial": "5518219d3dae477a87d59b1a0699470440e",
"sha256": "10ab62c3f47791b23514ff2082ff528371832b53000be8b42884cb183c8226f3",
"subject": "roleenvoy.com",
"valid_to": "2026-12-15T04:46:38Z",
"valid_from": "2026-09-16T04:46:39Z",
"observed_at": "2026-10-30T05:32:56Z"
},
"whois": {
"registrar": "NAMECHEAP INC",
"registrar_iana_id": "1068",
"registrar_url": "http://www.namecheap.com",
"created": "2026-09-16T05:05:33Z",
"updated": "1-01-01T00:00:00Z",
"expires": "2027-09-16T05:05:33Z",
"status": [
"clientTransferProhibited"
],
"nameservers": [
"chloe.ns.cloudflare.com",
"todd.ns.cloudflare.com"
],
"dnssec": "unsigned"
},
"rdap": {
"status": [
"client transfer prohibited"
],
"events": {
"registration": "2026-09-16T05:05:33Z",
"registrar expiration": "2027-09-16T05:05:33Z",
"last update of RDAP database": "2026-10-30T05:32:56Z"
}
}
},
"webcheck": {
"v": 1,
"fetched_at": "2026-11-12T16:00:57Z",
"mail_config": {
"mx": [
"eforward2.registrar-servers.com",
"eforward3.registrar-servers.com",
"eforward4.registrar-servers.com",
"eforward5.registrar-servers.com",
"eforward1.registrar-servers.com"
],
"spf": "v=spf1 include:spf.efwd.registrar-servers.com ~all",
"spf_lookups": 1
},
"block_lists": {
"resolvers": 12,
"blocked_count": 0
},
"archives": {
"last": "2026-11-12T15:26:22Z",
"first": "2026-09-16T10:33:18Z",
"changes": 1,
"days_archived": 2,
"scans_per_day": 0.02,
"avg_page_bytes": 1025
},
"robots_txt": {
"agents": [
"*"
],
"present": true,
"sitemaps": [
"https://www.roleenvoy.com/wp-sitemap.xml"
]
},
"sitemap": {
"present": true,
"url_count": 5
},
"social_tags": {
"title": "Roleenvoy",
"robots": "max-image-preview:large",
"generator": "WordPress 7.1.4",
"canonicalUrl": "https://www.roleenvoy.com/"
},
"trackers": {
"requests": 54,
"trackers": [
{
"name": "Google Fonts",
"company": "Google",
"country": "US",
"category": "Hosting",
"requests": 3
}
]
},
"mixed_content": {
"third_party_scripts": 0
},
"status": {
"up": true,
"code": 301,
"timings": {
"dns": 12,
"tls": 49,
"wait": 746,
"connect": 11,
"download": 0
},
"response_ms": 818
},
"tls_connection": {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1",
"TLSv1.1",
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
},
"ports": {
"open": [
80,
443,
8080
]
},
"carbon": {
"bytes": 151999,
"co2_grams": 0.0056,
"cleaner_than": 13
},
"dns_server": {
"ns": [
{
"ip": "108.162.192.85",
"host": "chloe.ns.cloudflare.com"
},
{
"ip": "172.64.33.146",
"host": "todd.ns.cloudflare.com"
}
],
"zone": "roleenvoy.com"
},
"location": {
"ip": "2a06:98c1:3121::3",
"asn": "13335",
"org": "CloudFLARENET-EU",
"city": "London",
"country": "GB"
},
"ssl": {
"issuer": "Let's Encrypt / YE1",
"subject": "roleenvoy.com"
},
"dns": {
"A": [
"188.114.97.3",
"188.114.96.3"
],
"MX": [
"{\"exchange\": \"eforward2.registrar-servers.com\", \"priority\": 10}",
"{\"exchange\": \"eforward5.registrar-servers.com\", \"priority\": 20}",
"{\"exchange\": \"eforward1.registrar-servers.com\", \"priority\": 10}",
"{\"exchange\": \"eforward4.registrar-servers.com\", \"priority\": 15}",
"{\"exchange\": \"eforward3.registrar-servers.com\", \"priority\": 10}"
],
"NS": [
"todd.ns.cloudflare.com",
"chloe.ns.cloudflare.com"
],
"SOA": "{\"nsname\": \"chloe.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415217567, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
"TXT": [
"v=spf1 include:spf.efwd.registrar-servers.com ~all"
],
"AAAA": [
"2a06:98c1:3121::3",
"2a06:98c1:3120::3"
]
},
"dnssec": {
"ds": false,
"rrsig": false,
"dnskey": false
},
"hsts": {
"message": "Site does not serve any HSTS headers."
},
"http_security": {
"xFrameOptions": false,
"referrerPolicy": false,
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": false,
"contentSecurityPolicy": false,
"strictTransportPolicy": false,
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
},
"firewall": {
"waf": "Cloudflare",
"has_waf": true
},
"get_ip": {
"ip": "2a06:98c1:3121::3",
"family": 6
},
"redirects": {
"chain": [
"https://roleenvoy.com",
"https://www.roleenvoy.com/"
],
"count": 1
},
"subdomains": {
"count": 1,
"subdomains": [
"www.roleenvoy.com"
]
},
"tech_stack": {
"technologies": [
"WordPress",
"MySQL",
"PHP",
"Hello Elementor",
"ElementsKit",
"Elementor",
"Contact Form 7",
"Twitter Emoji (Twemoji)",
"jQuery UI",
"jQuery Migrate",
"jQuery",
"core-js",
"Priority Hints",
"Google Font API",
"Cloudflare",
"Webpack",
"RSS",
"Module Federation",
"HTTP/3"
]
},
"linked_pages": {
"external": [
"https://www.roleenvoy.com/apply-now/",
"https://www.roleenvoy.com/"
],
"external_count": 2,
"internal_count": 8
},
"whois": {
"registrar": "NameCheap, Inc.",
"created": "2026-09-16T05:05:33Z",
"updated": "2026-09-16T05:43:27Z",
"expires": "2027-09-16T05:05:33Z",
"status": [
"clientTransferProhibited https://icann.org/epp"
],
"nameservers": [
"chloe.ns.cloudflare.com",
"todd.ns.cloudflare.com"
]
},
"headers": {
"headers": {
"server": "cloudflare",
"content-type": "text/html; charset=UTF-8",
"x-powered-by": "PHP/8.1.34",
"link": "; rel=\"https://api.w.org/\", ; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", ; rel=shortlink"
}
}
}
}
```
Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/us/01a1d054-e468-74f5-ab62-43a889b98b92.png","source":"URLScan","report_url":"https://urlscan.io/result/01a1d054-e468-74f5-ab62-43a889b98b92/","captured_at":"2026-11-12T15:16:35Z","sha256":"d127f44ea7438dbb6478351c69f1a967cd41b902100dc5fdb72c3fb6f367d33b","model_image_sha256":"a438a20b3c23b9566e15e81833c9e3387dbf299ac515aa44e8dc2668f819b1fc","available":true,"content_status":null}
## Complete dated records
Availability observations: https://phishdestroy.io/domain/roleenvoy.com/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/roleenvoy.com/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/roleenvoy.com/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/roleenvoy.com/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/roleenvoy.com/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/roleenvoy.com/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/roleenvoy.com/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/roleenvoy.com/records.json?source=content&format=json
## Dated availability observation
Latest stored reachability observation
```json
{
"state": "alive",
"label_key": "availability.active",
"detail_key": "detail.latest_reachability",
"params": [],
"source": "current_http_probe",
"record_id": 1943352,
"scope": "checked_url",
"observed_at": "2026-11-12T15:27:17Z",
"http_status": 200,
"http_observed_at": "2026-11-12T15:27:17Z",
"stored_http_code": 200,
"stored_http_observed_at": "2026-11-12T15:27:17Z",
"legacy_site_status": "alive",
"supports_outcome_badge": false,
"content_classification": "unknown",
"content_classification_at": null,
"registration_state": "unknown",
"policy": "20261102-dated-availability-v2"
}
```