Security Scan: Visme Forms Player

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1b9b7915-8344-4f97-94da-c5a6389ed69a Domain and IP registration (RDAP)/api/v1/rdap/1b9b7915-8344-4f97-94da-c5a6389ed69aHow often this domain was scanned/api/v1/domain/stats/forms.visme.co Scan history for this domain/api/v1/domain/history/forms.visme.co?limit=15

This website contacted 6 IPs in 1 country across 8 domains to perform 27 HTTP transactions. The main domain is visme.co and was registered 12 years ago.

Submitted URL: https://forms.visme.co/formsPlayer/p9nzz994-sample-custom-form

The Cisco Umbrella rank of the primary domain is #127,188 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 82%

Risk Score

Phishing form hosted on trusted Visme platform impersonates the Outlook login, harvesting username/password via a disguised type='text' password field and obfuscated 'Passw0rd' label. Classic credential phishing.

Risk Factors (4)

Brand impersonation of Microsoft Outlook on a non-Microsoft domain

Credential-harvesting form capturing username, password and email

Disguised password field (type='text' with password placeholder) to evade scanners

Obfuscated 'Passw0rd' label to defeat password-keyword detection

Safety Factors (4)

Hosting domain visme.co is well-established (registered 2014) and ranked in the Cisco Umbrella top 1M

No Indicators of Compromise, YARA, IDS or Safe Browsing hits against the page

No cross-origin credential exfiltration detected (submissions likely delivered to the platform's own form backend)

Established domain (4648 days old) with no strong malicious indicators — risk clamped from 9 to 5

Domain age information unavailable

Details

Page Title

Visme Forms Player

Scan Type

public

Favicon Hash

MMH3: -241892080

MD5: e98b4d08a0213ae5a32bb0513b1ce580

Domain Name Analysis

The domain name 'forms.visme.co' uses the Colombian country-code top-level domain (.co), featuring subdomain 'forms'. The core label 'visme' covers 5 characters holding two vowels versus three consonants. Breaking it apart gives two words: vis, me. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.95s

Total Load Time

880 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:72%

Script:Latin

Direction:ltr

Detection Details

Text Length:49 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism49% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism

49%

documentation technical

39%

technology software

39%

government public service

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	172.67.74.210Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.16.80.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.26.15.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.110.95Google · CDN	United States	AS15169Google LLC
4	104.26.14.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.14.94Google · CDN	United States	AS15169Google LLC
27	6	-	-