form.wtf was registered with whois.nic.wtf on 18 Jun 2018 and is hosted on AS61207 Hostek AB in Sweden. We couldn't read an SSL certificate for it when we last analysed it.
What security vendors and the WOT community say about this domain.
What loads and tracks visitors when the homepage opens.
Running a full browser scan of the homepage… This takes about a minute.
We couldn't read an SSL certificate on port 443 when we last analysed form.wtf. Refresh the analysis to check again.
545 similar domains registered in the last 90 days — possible typosquatting or phishing.
| Domain | Why it’s similar | Registered | Status | Report |
|---|---|---|---|---|
| f0rm.xyz | Look-alike characters | 4 Oct 2026 | Checking… | Report → |
| from.news | Typo | 12 Nov 2026 | Checking… | Report → |
| form.clinic | Other extension | 11 Nov 2026 | Checking… | Report → |
| form.pp.ua | Other extension | 11 Nov 2026 | Checking… | Report → |
| form.tube | Other extension | 11 Nov 2026 | Checking… | Report → |
From CubDomain's daily newly registered domains. Similar doesn't mean malicious.
Is form.wtf’s name taken on other extensions?
Every IP address form.wtf resolves to, and where it's hosted.
Other domains served from 212.16.185.46. Normal for shared hosting and CDNs.
No reviews yet. Used form.wtf? Be the first to say how it went.
Reviews are from CubDomain users and are separate from the security verdicts above.
Common questions, answered from this report's data.
form.wtf has no community safety rating yet. We couldn't read an SSL certificate on it when we last analysed it. See Security →
form.wtf is registered through whois.nic.wtf. The owner's details are hidden by a privacy service in the public WHOIS record. See WHOIS →
The registration expired on 18 Jun 2023. See Overview →
form.wtf was registered on 18 Jun 2018, making it 8 years old. See Overview →
form.wtf is served from 1 IP address, mainly on AS61207 Hostek AB in Sweden. See Hosting →
Raw registry data for form.wtf. May be redacted by privacy services.
{
"rdapConformance": [
"rdap_level_0",
"icann_rdap_response_profile_0",
"icann_rdap_technical_implementation_guide_0"
],
"notices": [
{
"title": "Terms of Service",
"description": [
"Identity Digital Inc. provides this RDAP service for informational purposes only, and to assist persons in obtaining information about or related to a domain name registration record. Identity Digital does not guarantee its accuracy. Users accessing the Identity Digital RDAP service agree to use the data only for lawful purposes, and under no circumstances may this data be used to: a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the registrar's own existing customers and b) enable high volume, automated, electronic processes that send queries or data to the systems of Identity Digital or any ICANN-accredited registrar, except as reasonably necessary to register domain names or modify existing registrations. When using the Identity Digital RDAP service, please consider the following: the RDAP service is not a replacement for standard EPP commands to the SRS service. RDAP is not considered authoritative for registered domain objects. The RDAP service may be scheduled for downtime during production or OT&E maintenance periods. Queries to the RDAP services are throttled. If too many queries are received from a single IP address within a specified time, the service will begin to reject further queries for a period of time to prevent disruption of RDAP service access. Abuse of the RDAP system through data mining is mitigated by detecting and limiting bulk query access from single sources. Where applicable, the presence of a [Non-Public Data] tag indicates that such data is not made publicly available due to applicable data privacy laws or requirements. Should you wish to contact the registrant, please refer to the RDAP records available through the registrar URL listed above. Access to non-public data may be provided, upon request, where it can be reasonably confirmed that the requester holds a specific legitimate interest and a proper legal basis for accessing the withheld data. Access to this data can be requested by submitting a request via the form found at https://www.identity.digital/about/policies/RDAP-layered-access/ Identity Digital Inc. reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy."
],
"links": [
{
"value": "https://rdap.donuts.co/rdap/domain/form.wtf",
"rel": "alternate",
"href": "https://www.identity.digital/about/policies/rdap-access-policy/",
"type": "text/html"
}
]
},
{
"title": "Status Codes",
"description": [
"For more information on domain status codes, please visit https://icann.org/epp"
],
"links": [
{
"value": "https://icann.org/epp",
"rel": "self",
"href": "https://icann.org/epp",
"type": "application/rdap+json"
}
]
},
{
"title": "RDDS Inaccuracy Complaint Form",
"description": [
"URL of the ICANN RDDS Inaccuracy Complaint Form: https://www.icann.org/wicf"
],
"links": [
{
"value": "https://www.icann.org/wicf",
"rel": "self",
"href": "https://www.icann.org/wicf",
"type": "application/rdap+json"
}
]
}
],
"ldhName": "form.wtf",
"unicodeName": "form.wtf",
"nameservers": [
{
"ldhName": "ns1.stablehost.com",
"unicodeName": "ns1.stablehost.com",
"objectClassName": "nameserver",
"handle": "9b45e092c7aa4b3b97d26885bd773476-DONUTS",
"status": [
"associated"
]
},
{
"ldhName": "ns2.stablehost.com",
"unicodeName": "ns2.stablehost.com",
"objectClassName": "nameserver",
"handle": "4738638067ec4675ab4cea516ec14270-DONUTS",
"status": [
"associated"
]
}
],
"publicIds": [
{
"type": "IANA Registrar ID",
"identifier": "1068"
}
],
"objectClassName": "domain",
"handle": "18b46f0f728544e1b06c7f744dcd5082-DONUTS",
"status": [
"client transfer prohibited"
],
"events": [
{
"eventAction": "expiration",
"eventDate": "2023-06-18T23:48:38.12Z"
},
{
"eventAction": "registration",
"eventDate": "2018-06-18T23:48:38.12Z"
},
{
"eventAction": "last changed",
"eventDate": "2022-05-18T10:21:16.175Z"
},
{
"eventAction": "last update of RDAP database",
"eventDate": "2023-05-16T20:40:14.253Z"
}
],
"entities": [
{
"vcardArray": [
"vcard",
[
[
"version",
{},
"text",
"4.0"
],
[
"org",
{
"type": "work"
},
"text",
"Privacy service provided by Withheld for Privacy ehf"
],
[
"adr",
{},
"text",
[
"",
"",
"",
"",
"Capital Region",
"",
"IS"
]
]
]
],
"roles": [
"registrant"
],
"objectClassName": "entity",
"remarks": [
{
"title": "REDACTED FOR PRIVACY",
"type": "object redacted due to authorization",
"description": [
"Some of the data in this object has been removed."
]
},
{
"title": "EMAIL REDACTED FOR PRIVACY",
"type": "object redacted due to authorization",
"description": [
"Please query the RDDS service of the Registrar of Record identified in this output for information on how to contact the Registrant of the queried domain name."
]
}
],
"events": [
{
"eventAction": "last update of RDAP database",
"eventDate": "2023-05-16T20:40:14.253Z"
}
]
},
{
"vcardArray": [
"vcard",
[
[
"version",
{},
"text",
"4.0"
]
]
],
"roles": [
"administrative"
],
"objectClassName": "entity",
"remarks": [
{
"title": "REDACTED FOR PRIVACY",
"type": "object redacted due to authorization",
"description": [
"Some of the data in this object has been removed."
]
},
{
"title": "EMAIL REDACTED FOR PRIVACY",
"type": "object redacted due to authorization",
"description": [
"Please query the RDDS service of the Registrar of Record identified in this output for information on how to contact the Registrant of the queried domain name."
]
}
],
"events": [
{
"eventAction": "last update of RDAP database",
"eventDate": "2023-05-16T20:40:14.253Z"
}
]
},
{
"vcardArray": [
"vcard",
[
[
"version",
{},
"text",
"4.0"
]
]
],
"roles": [
"technical"
],
"objectClassName": "entity",
"remarks": [
{
"title": "REDACTED FOR PRIVACY",
"type": "object redacted due to authorization",
"description": [
"Some of the data in this object has been removed."
]
},
{
"title": "EMAIL REDACTED FOR PRIVACY",
"type": "object redacted due to authorization",
"description": [
"Please query the RDDS service of the Registrar of Record identified in this output for information on how to contact the Registrant of the queried domain name."
]
}
],
"events": [
{
"eventAction": "last update of RDAP database",
"eventDate": "2023-05-16T20:40:14.253Z"
}
]
},
{
"vcardArray": [
"vcard",
[
[
"version",
{},
"text",
"4.0"
],
[
"fn",
{},
"text",
"NameCheap, Inc."
]
]
],
"roles": [
"registrar"
],
"publicIds": [
{
"type": "IANA Registrar ID",
"identifier": "1068"
}
],
"objectClassName": "entity",
"handle": "1068",
"entities": [
{
"vcardArray": [
"vcard",
[
[
"version",
{},
"text",
"4.0"
],
[
"tel",
{
"type": "voice"
},
"uri",
"tel:+1.9854014545"
],
[
"email",
{},
"text",
"abuse@namecheap.com"
]
]
],
"roles": [
"abuse"
],
"objectClassName": "entity",
"handle": "10af0f41201e4614a3b8939baba4bdf2-DONUTS"
}
],
"links": [
{
"value": "https://rdap.donuts.co/rdap/entity/1068",
"rel": "self",
"href": "https://rdap.donuts.co/rdap/entity/1068",
"type": "application/rdap+json"
}
]
}
],
"links": [
{
"value": "https://rdap.namecheap.com/domain/form.wtf",
"rel": "related",
"href": "https://rdap.namecheap.com/domain/form.wtf",
"type": "application/rdap+json"
},
{
"value": "https://rdap.donuts.co/rdap/domain/form.wtf",
"rel": "self",
"href": "https://rdap.donuts.co/rdap/domain/form.wtf",
"type": "application/rdap+json"
}
]
}The first response from http://www.form.wtf, before any redirect: caching, server and policy headers.
Four timed TCP connections to port 443 from CubDomain's servers.
CubDomain is not affiliated with form.wtf. Data is collected independently from public sources and some figures are estimates, provided for information only.
Spam and malware blocklists for the site's IP and mail servers.
When the site first appeared, and what has changed since.
We record what changes from the next time this report is refreshed.
Found in public certificate transparency logs.
Searching the certificate transparency logs… This can take up to a minute.