Throwaway - this happened to me. For anybody curious, my guess is somebody hacked the server or figured out some URI enumeration vulnerability and at minimum ge

Throwaway - this happened to me. For anybody curious, my guess is somebody hacked the server or figured out some URI enumeration vulnerability and at minimum gets your email when you submit the application. You then get an email from "Thailand Pass <support@consulatelteamthailand.com>" (hacker I guess) saying there was a problem with your application and requesting your name, DOB and last 4 of passport. When you reply you get another email with the bitly link the OP shared, which then eventually (in a roundabout way, involving having you download a copy of a mock version of the real site) gets you to download a zipped vb script file. IMO the sad part of this and what made it actually believable to me is that the Thai government is so disorganized generally, and does things in such an ad-hoc way that if you've been living here awhile it actually seems plausible that this is somehow real...