Domain > forms.robinhood.org

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-08-10	52.204.147.178 (ClassC)
2025-09-24	100.28.20.206 (ClassC)

HTTP/1.1 200 OKDate: Wed, 24 Sep 2025 23:39:56 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveserver: nginxcontent-security-policy-report-only: default-src * https: data: blob:; script-src * unsafe-inline unsafe-eval data: blob:; style-src * unsafe-inline data: blob:; img-src * data: blob:; font-src * data: blob:; connect-src * http: https: ws: wss: data: blob:; frame-ancestors self; report-uri /api_v2/csp/reportp3p: CPNOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEMset-cookie: CAKEPHP9aedf9ccae215bb1c2763862b3f3a4e7; HttpOnly1; Path/; SameSiteNone; Securex-frame-options: SAMEORIGINcache-control: no-cache, no-store, must-revalidatepragma: no-cacheexpires: Thu, 01 Jan 1970 00:00:00 GMT, -1strict-transport-security: max-age31536000; includeSubDomains; preloadx-fa-app: 20-111set-cookie: FASRV4fd676ed43c14c21; path/; HttpOnly

!DOCTYPE html>html langen-US>head>    meta http-equivContent-Type contenttext/html; charsetutf-8/>    meta nameviewport idvp contentinitial-scale1.0,user-scalableno,maximum-scale1,widthdevice-width/>    meta name“insight-app-sec-validation” content“42a33bfc-84d4-4feb-b672-dea3e7d48d37>    title>FormAssembly: Team | The Robin Hood Foundation : Users/title>    link relicon typeimage/png href/images/FormAssembly_favicon_32x32.png>    link relstylesheet href/font/css/font-awesome.min.css>    script typetext/javascript>        var LANG  en-US;        var ROOT  /;        var PUBLIC_ROOT  ROOT;        var PATH  ROOT + users/login/;    /script>    script src/dist/jquery/jquery.0416573c648d279fd758.js typetext/javascript>/script>    /head>body>div classpublic-page public-page--fa >            div idheader-bar>/div>        div classpublic-container>                    div classpublic-branding>                div classfa-logo fa-logo--knockout public-branding__logo>                    img src/images/FormAssembly_lockup_knockout.png altFormAssembly>                /div>                div classfa-tag-line public-branding__tag-line>Secure data collection made simple./div>            /div>                        noscript>            div stylemargin: 20px; padding: 30px; font-size: 24px;>                Sorry, your browser does not support JavaScript. Please enable JavaScript on your browser to view the application.            /div>        /noscript>                div classcard card--public>        h1 classcard__title>Log In to Your Account/h1>                    form        action/users/login/        methodpost        idstandardAuth            >        div classform-element>            label forusername classform-element__label>Username or Email/label>            div classform-element__control>                input typetext namedataUserusername value idusername                       classform-input required autofocus maxlength255>            /div>                    /div>        div idpassword>/div>                input typehidden data-namecsrf namedgCr valuenRhHAHjA3lqzhCFD autocompleteoff>        button typesubmit classbtn btn--primary btn--block form-submit>Log In/button>    /form>                    div classpublic-card__extras>                    a idforgot-password classpublic-card__link href/users/forgot_password>Forgot username or password?/a>                            /div>/div>script>    document.addEventListener(DOMContentLoaded, function () {        const authElement  document.getElementById(standardAuth);        const forgotPasswordLink  document.getElementById(forgot-password);        const extrasContainer  document.querySelector(.public-card__extras);        if (authElement && forgotPasswordLink) {            if (window.getComputedStyle(authElement).display  none) {                forgotPasswordLink.style.display  none;                 extrasContainer.style.display  flex;                 extrasContainer.style.justifyContent  center;            }        }    });    $(function () {        PasswordInput(#password, {maxLength: 128});    });            function showAdminAuth() {            document.getElementById(standardAuth).style.display  block;            document.getElementById(showAdminAuth).style.display  none;            document.getElementById(forgot-password).style.display  block;        }    /script>    /div>            div classpublic-extra-content>            iframe idpublic-extra-content-frame srchttps://www.formassembly.com/iframes/ec-cc/iframe-ec-cc-20849.html scrollingno>/iframe>        /div>                footer classfooter public-page__footer>            div classfooter__brand>                © 2008 - 2025 a hrefhttps://www.formassembly.com target_blank>FormAssembly,                    Inc./a>            /div>            nav>                ul classfooter-nav>                    li classfooter-nav__item>                        a hrefhttps://www.formassembly.com/terms-of-service target_blank>Terms of Service/a>                    /li>                    li classfooter-nav__item>                        a hrefhttps://www.formassembly.com/privacy-policy target_blank>Privacy Policy/a>                    /li>                    li classfooter-nav__item>                        a hrefhttps://www.formassembly.com/security target_blank>Security Information/a>                    /li>                    li classfooter-nav__item>                        a hrefhttps://www.formassembly.com/abuse target_blank>Report Abuse/a>                    /li>                /ul>            /nav>        /footer>    /div>script src/dist/frontdoor.3ed8d2109856a1a5d042.js>/script>    !-- Pendo -->    script typetext/javascript> (function(apiKey){        (function(p,e,n,d,o){var v,w,x,y,z;opdpd||{};o._q;            vinitialize,identify,updateOptions,pageLoad;for(w0,xv.length;wx;++w)(function(m){                omom||function(){o._qmv0?unshift:push(m.concat(.slice.call(arguments,0)));};})(vw);            ye.createElement(n);y.async!0;y.srchttps://cdn.pendo.io/agent/static/+apiKey+/pendo.js;            ze.getElementsByTagName(n)0;z.parentNode.insertBefore(y,z);})(window,document,script,pendo);            pendo.initialize();        })(38ed73be-7827-42db-5df6-3451c47f688d);    /script>                script typetext/javascript srchttps://c.la2-c2-ia5.salesforceliveagent.com/content/g/js/50.0/deployment.js>/script>            script>    function setupLiveAgent(        buttonId,        deploymentId,        organizationId,        customDetailVars,        showWhenOnline,        showWhenOffline    ) {        liveagent.setChatWindowHeight(550);        liveagent.setChatWindowWidth(350);        liveagent.init(https://d.la2-c2-ia5.salesforceliveagent.com/chat, deploymentId, organizationId);        if (!window._laq) { window._laq  ; }        window._laq.push(function() {            var showHide  function (showWhenOnline, elementNames) {                elementNames.forEach(function (elementName) {                    var element  document.getElementById(elementName);                    if (element) {                        liveagentshowWhenOnline ? showWhenOnline : showWhenOffline(buttonId, element);                    }                });            };            showHide(true, showWhenOnline);            showHide(false, showWhenOffline);        });        Object.keys(customDetailVars).forEach(function (key) {            liveagent.addCustomDetail(key, customDetailVarskey || );        });    }/script>        script typetext/javascript>        /script>/body>/html>

Subdomains

Date	Domain	IP
2017.robinhood.org	2024-02-21	52.7.21.240
app-eb.robinhood.org	2024-11-24	34.192.101.91
give.robinhood.org	2025-08-01	104.18.124.73
forms.robinhood.org	2025-09-24	100.28.20.206
investors.robinhood.org	2025-09-21	34.213.106.51
www.robinhood.org	2024-02-16	52.44.21.19

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > forms.robinhood.org

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains