Fix today

A form on your site sends data to another website

This is the exact wording EverThread uses when it finds this on a customer's site, written for someone who runs a business, not a server. The example site here is yourbakery.com.

What we saw

A form submits to https://forms-collect.example/submit, and it includes a password field.

Why it matters

Sometimes this is a legitimate service you chose. When it is not, it is exactly how card and password skimmers work.

How to fix it

If you recognize that address as a service you use, acknowledge this in your dashboard and we will stay quiet about it. If you do not, tell your developer today.

For your developer

Form action https://forms-collect.example/submit targets a host outside the allowlist. Verify it is intentional; otherwise remove and investigate.

Does your site have this?

Check it free, right now. We look at your home page the way a browser does and tell you in plain English. No account.

Or sign up free and we check it every day and email you when something changes.

Related