Security Review

Is landbot.site legit or a scam?

Our verdict:Suspicious· 53/100

A legitimate chatbot hosting service frequently exploited by attackers to host Tycoon 2FA phishing kits and fake login pages.

landbot.siteScanned 1h ago
0
Trust score
SUSPICIOUS
Heuristics 67·MT 45
Category tags
phishing#phishing85% MT confidence
Technical red flags (1)

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
1/92
Engines flagged this URL
Domain Age
Registration date unknown
MT Intelligence
Suspicious
Moderate likelihood · 85% confidence
SUSPICIOUS

Warning signs detected

A legitimate chatbot hosting service frequently exploited by attackers to host Tycoon 2FA phishing kits and fake login pages. Several risk indicators suggest caution. This site might be legitimate — but treat it as unverified until you can independently confirm.

Website Preview

Screenshot of landbot.site
LIVE RENDER
landbot.site

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Moderate scam likelihoodengineMT · Guardiantrust45/100
MT AgentLive web researchVisual inspection
0%
Confidence
The domain belongs to a legitimate SaaS company that provides no-code chatbot tools. However, because users can publish their own content on this platform, it has become a high-traffic target for malicious actors. Our analysis identified specific instances where this domain was used to host the Tycoon 2FA phishing kit and fake Microsoft login pages. While the platform operator is legitimate, the content at this specific URL path is highly likely to be a credential-harvesting attempt. One of our antivirus partners, Rising, has already flagged the site as malicious.
Full dossier
Analysis complete

Page Content

The page serves as a hosting endpoint for conversational interfaces. The metadata correctly identifies the parent company as a tool for creating chatbots without coding. However, the specific URL path is associated with user-generated content which can be easily weaponized.

Infrastructure

The site is hosted on a reputable IP address with no history of abuse reports. It uses a valid SSL certificate issued by Google Trust Services. The infrastructure itself is professional and managed by a legitimate Spanish technology firm.

Domain History

The domain has been active for several years and is well-established in the chatbot industry. It is not a 'throwaway' domain, but its open-publishing nature makes it a recurring host for ephemeral phishing pages.

Web Reputation

Reputation is split between the legitimate business and the malicious content it occasionally hosts. While trust aggregators give the root domain a high safety score, specialized threat intelligence platforms have documented active phishing campaigns originating from these specific sub-paths.
Risk Factors
4
  • Specific URL paths flagged for hosting Tycoon 2FA phishing kits
  • Rising antivirus engine identifies the page as malicious
  • Documented history of hosting fake Microsoft login pages
  • Platform allows anonymous users to publish content that can harvest credentials
Positive Signals
4
  • Owned by a legitimate, registered Spanish SaaS company
  • Valid SSL certificate with 79 days remaining
  • Domain has several years of established history
  • No history of IP-level abuse reports
AI Recommendation
Do not enter any login credentials, passwords, or two-factor authentication codes on this page. If you were redirected here from an email or text message, it is likely a phishing attempt.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for landbot.site, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
2 scam reports · 2 positive
Key findings
6 headline facts from open-web research
  • landbot.site is an official subdomain/hostname used by Landbot.io, the no-code chatbot builder platform for websites, WhatsApp, and Messenger.
  • The homepage presents as "Start the conversation" with description matching Landbot's core offering: "Landbot.io is a tool to create conversational interfaces in substitution of forms. No coding required!"
  • Multiple malware analysis platforms (ANY.RUN, Hybrid-Analysis) have flagged specific paths on landbot.site (e.g. /v3/H-XXXX/index.html) as hosting Tycoon 2FA phishing kits and Microsoft fake login pages.
  • Scamadviser rates landbot.site as "Very Likely Safe" with a positive trust score, citing valid SSL and several years of age; Gridinsoft also marks it generally safe with ~4 years domain age.
  • No direct user complaints, Reddit scam discussions, or Trustpilot/ScamDoc entries found specifically for landbot.site; legitimate Landbot.io has mixed reviews (Trustpilot ~3.7/5) focused on billing and features.
  • Landbot.io is a legitimate, reviewed SaaS product with SOC2, GDPR, and other compliance certifications; landbot.site serves as a publishing endpoint for user-created conversational bots.
Scam reports (2)
Direct quotes from public scam databases, forums, and news.
  • ANY.RUN Malware Sandboxopen

    "Online sandbox report for https://landbot.site/v3/H-3347997-... tagged as phishing, tycoon, phishing-ml, storm1747, verdict: Malicious activity"

  • Hybrid-Analysisopen

    "Domain: "landbot.site" possible high risk indicator. Domain uses TLD that is commonly abused for malicious purposes."

Positive reviews (2)
Quotes indicating the site is legitimate.
  • Scamadviseropen

    "In summary, we think landbot.site is legit and safe for consumers to access."

  • Gridinsoftopen

    "Based on current analysis, landbot.site appears to be generally safe. No major malware or phishing threats were detected, and a domain age of 4 ..."

Research summary
Narrative write-up from our AI analyst, grounded on the facts above
Our research found that while independent review sites generally consider the domain safe due to its corporate ownership, technical sandbox reports have identified malicious activity. Specifically, security researchers have documented the site hosting 'Tycoon' phishing kits and storm1747-related malicious activity. The parent company is a legitimate Barcelona-based business, but this specific hosting endpoint is being exploited.

Antivirus Engines

Detection matrix · live
1 engine flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

1Malicious0Suspicious59Harmless92Engines
0
of 92
Rising
Malicious· malicious

1 antivirus engine flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.

Domain & Encryption

Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WR3
ExpiresSep 10, 2026 (79d)
Self-signedNo
Hosting & Technology
HostingGoogle LLC
Server locationUS
Web serverUploadServer

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPGoogle LLC
Usage typeContent Delivery Network

Proceed with caution

Our automated review flagged enough risk that you should treat this site as unverified.

  • Treat landbot.site as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  • Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  • Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review marked landbot.site as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
  • landbot.site currently scores 53/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
  • Yes. landbot.site presents a valid TLSv1.3 certificate issued by Google Trust Services · WR3, expiring in 79 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • 1 out of 92 antivirus engines in our malware network flagged landbot.site as malicious or suspicious (1 outright malicious). Even one detection is a meaningful signal.
  • No. landbot.site is not currently listed on the major browser blocklist feeds that modern browsers use.
  • landbot.site resolves to an IP operated by Google LLC in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 23, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around landbot.site have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·landbot.site
SUSPICIOUS

This is a legitimate chatbot hosting platform that is currently being abused to host phishing attacks. While the service itself is real, this specific link has been flagged for hosting credential-harvesting kits.

Do not enter any login credentials, passwords, or two-factor authentication codes on this page. If you were redirected here from an email or text message, it is likely a phishing attempt.

AV engines
92
MT passes
2
Net signals
1
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.