Is forms.gle legit?

68
/ 100
Mostly Safe
Industry: SaaS

This site appears mostly safe for general use, especially given its high global traffic ranking. However, critical gaps in legal documentation and transparency could be a concern if you are providing personal information. Exercise caution if detailed interaction is required.

SaaS average: 66/100 · based on 108 sites

Checked: April 29, 2026 at 8:27 AM UTC ·

Is forms.gle a scam? Here's what we found.

Security 90/100

The site boasts a strong security posture with a valid, modern SSL certificate (TLS 1.3) and a clean record with Google Web Risk, ensuring encrypted connections and protection from known threats.

Identity 70/100

While the site is globally prominent and likely well-established, the WHOIS information is unavailable for the '.gle' TLD, which obscures direct ownership details. The lack of a favicon also slightly diminishes its professional presentation.

Reputation 85/100

With an extremely high Tranco Rank and a clean run on DNS blacklists, the site has a strong reputation in terms of traffic and non-malicious history, indicating widespread use and trust.

Transparency 50/100

Transparency is a significant weakness, as the site lacks explicit contact information and social media presence, making it difficult for users to engage with or seek support from the service provider.

Compliance 40/100

A major and concerning oversight is the complete absence of privacy policy or terms of service, which raises serious questions about data handling practices and legal obligations, especially for a site that might collect user input.

Infrastructure 75/100

The infrastructure is generally robust with good DNS resolution and name server configuration, and very fast page load times. However, the current HTTP 400 status and lack of MX records indicate some functional or configuration issues for the current visit.

Signals Detected

[+]
Tranco Rank: Rank #145

This is one of the most visited websites globally

[?]
Structured Data: None found

No structured data markup found

[?]
Trustpilot: No Trustpilot profile

This business has no Trustpilot presence — not unusual for smaller or newer companies

[?]
Certificate Transparency: Unable to check

crt.sh returned status 429

[+]
SSL Certificate: Valid

Valid certificate, expires in 82 days

[?]
Certificate Issuer: Google Trust Services

Certificate issued by Google Trust Services

[+]
TLS Version: TLS 1.3

Connection uses TLS 1.3

[+]
DNS Resolution: 2 IP(s)

Resolves to: 2620:0:890::100, 199.36.158.100

[?]
Email (MX Records): None

No MX records found — domain may not handle email

[+]
Name Servers: 4 server(s)

DNS providers: ns4.googledomains.com., ns1.googledomains.com., ns2.googledomains.com., ns3.googledomains.com.

[~]
Branding: Missing

No favicon found — unusual for an established business

[+]
Content Security Policy: Present

Site has Content Security Policy configured

[+]
Google Web Risk: Clean

No threats detected by Google Web Risk

[?]
robots.txt: Not found

No robots.txt file — common for small sites

[?]
Sitemap: Not found

No sitemap found — common for smaller sites

[?]
whois: check failed

no WHOIS server found for TLD "gle"

[~]
Website Status: HTTP 400

Website returned status 400

[~]
Contact Info: Not found

No obvious contact information found on homepage

[-]
Legal Pages: Missing

No privacy policy or terms of service found

[~]
Social Media Presence: None found

No social media links found on homepage

[+]
DNS Blacklists: Clean

Not found on any DNS blacklists

[?]
Web Archive: Unable to check

Could not query Wayback Machine

[+]
Page Load Time: 80ms

Fast page load

Embed This Badge

Own this site? Show visitors your trust score.

Trust badge for forms.gle
<a href="https://verified.fyi/review/forms.gle"><img src="https://verified.fyi/badge/forms.gle?size=medium&style=full&theme=dark" alt="forms.gle trust score — verified.fyi" /></a>
[![forms.gle trust score](https://verified.fyi/badge/forms.gle?size=medium&style=full&theme=dark)](https://verified.fyi/review/forms.gle)

Stay Safe Online

Good habits to protect yourself, no matter the scan result.

Use a password manager

Never reuse passwords across sites.

Enable two-factor authentication

Add a second layer of security to your accounts.

Check before you buy

Always verify unfamiliar stores before entering payment info.

When evaluating the veracity of forms.gle, it's essential to understand its role as a core component of Google Forms, a widely used tool for creating surveys and quizzes. As a Software as a Service (SaaS) platform, particularly one offered by a tech giant, users typically expect a high degree of security and reliability, and for the most part, forms.gle delivers. The robust security settings, including modern TLS encryption and clear blacklist status, align with what one would expect from Google. However, our findings reveal some important considerations for anyone using or sharing forms from this domain. The most significant concern is the absence of easily accessible privacy policy or terms of service documentation directly on the forms.gle domain. For a service that collects user data, these legal pages are crucial for informing users how their information is handled and what rights they have. While Google undoubtedly has overarching privacy policies that cover all its services, the direct link from forms.gle itself is missing, which could be a point of confusion or even a compliance issue depending on specific data collection practices. This is a departure from best practices for most legitimate SaaS offerings. Furthermore, the lack of immediate contact information or visible social media presence directly on the forms.gle page is unusual for a service that aims to be user-friendly. While help and support are accessible through the broader Google ecosystem, straightforward channels on the specific domain provide an extra layer of user confidence. If you're creating or responding to a form hosted on forms.gle, understand that while Google's infrastructure keeps your data secure in transit, the legal and transparency aspects directly from the specific domain are not as robust as they could be.