Report - nw-protection-portal.com/Login.php/

Report Overview

Visited public
2025-04-28 21:21:46
Tags
URL
nw-protection-portal.com/Login.php/
Finishing URL
nw-protection-portal.com/Login.php/
IP / ASN
83.222.191.208
#212283 Roza Holidays Eood
Title
Log in to Online Banking

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
nw-protection-portal.com	unknown	unknown	No data	No data	5.4 kB	2.7 MB	83.222.191.208

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-04-28 21:21:12	medium	83.222.191.208	Client IP	ET DROP Spamhaus DROP Listed Traffic Inbound group 8
2025-04-28 21:21:12	medium	83.222.191.208	Client IP	ET DROP Dshield Block Listed Source group 1

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-04-28	medium	nw-protection-portal.com/	NatWest Personal Banking
2025-04-28	medium	nw-protection-portal.com/	NatWest Personal Banking
2025-04-28	medium	nw-protection-portal.com/	NatWest Personal Banking
2025-04-28	medium	nw-protection-portal.com/	NatWest Personal Banking
2025-04-28	medium	nw-protection-portal.com/	NatWest Personal Banking
2025-04-28	medium	nw-protection-portal.com/	NatWest Personal Banking
2025-04-28	medium	nw-protection-portal.com/	NatWest Personal Banking
2025-04-28	medium	nw-protection-portal.com/	NatWest Personal Banking
2025-04-28	medium	nw-protection-portal.com/	NatWest Personal Banking
2025-04-28	medium	nw-protection-portal.com/	NatWest Personal Banking
2025-04-28	medium	nw-protection-portal.com/	NatWest Personal Banking

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	nw-protection-portal.com/Login.php/	ScriptElement	5.8 kB	2023-03-08	2025-04-29
Pretty URL nw-protection-portal.com/Login.php/ IP 83.222.191.208 ASN #212283 Roza Holidays Eood Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 01:33 Last Seen2025-04-29 10:53 Times Seen45 Hash 3b309dca7b1a039c93d87274552b7e73 da255704c9960f139975c23a4b24a3e6a7a95169 39226b741db27afcad29bbdb1852ac321be34d090c46dd020e33249abd9d32fe Loading...

HTTP Transactions (11)

URL IP Response Size

nw-protection-portal.com/Login.php/files/css/npc.css

83.222.191.208

200 OK

248 kB

URL GET
nw-protection-portal.com/Login.php/files/css/npc.css
IP
83.222.191.208:443
ASN
#212283 Roza Holidays Eood

Requested by
https://nw-protection-portal.com/Login.php/
Certificate
IssuerLet's Encrypt
Subjectnw-protection-portal.com
Fingerprint22:D4:A0:CF:BB:E2:48:62:12:04:61:8D:EB:7D:A1:7E:A4:80:07:A3
ValidityMon, 28 Apr 2025 12:59:12 GMT - Sun, 27 Jul 2025 12:59:11 GMT

File type
HTML document, ASCII text, with very long lines (8164)
Size
248 kB (248077 bytes)
Hash
68fe77ab843b6beb562654ee1bb0c700
8327967d6b7e5f560745e0e2a1a823f19e9a19e2
2173713279bbd1584b642a53430d5af407b23d877e4592f6d79972a88e9c4841

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	NatWest Personal Banking

HTTP Headers

GET /Login.php/files/css/npc.css HTTP/1.1
Host: nw-protection-portal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nw-protection-portal.com/Login.php/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Apr 2025 21:21:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

nw-protection-portal.com/Login.php/files/css/overlayPrompt.css

83.222.191.208

200 OK

248 kB

URL GET
nw-protection-portal.com/Login.php/files/css/overlayPrompt.css
IP
83.222.191.208:443
ASN
#212283 Roza Holidays Eood

Requested by
https://nw-protection-portal.com/Login.php/
Certificate
IssuerLet's Encrypt
Subjectnw-protection-portal.com
Fingerprint22:D4:A0:CF:BB:E2:48:62:12:04:61:8D:EB:7D:A1:7E:A4:80:07:A3
ValidityMon, 28 Apr 2025 12:59:12 GMT - Sun, 27 Jul 2025 12:59:11 GMT

File type
HTML document, ASCII text, with very long lines (8164)
Size
248 kB (248077 bytes)
Hash
68fe77ab843b6beb562654ee1bb0c700
8327967d6b7e5f560745e0e2a1a823f19e9a19e2
2173713279bbd1584b642a53430d5af407b23d877e4592f6d79972a88e9c4841

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	NatWest Personal Banking

HTTP Headers

GET /Login.php/files/css/overlayPrompt.css HTTP/1.1
Host: nw-protection-portal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nw-protection-portal.com/Login.php/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Apr 2025 21:21:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

nw-protection-portal.com/Login.php/files/img/n-w-logo.svg

83.222.191.208

200 OK

248 kB

URL GET
nw-protection-portal.com/Login.php/files/img/n-w-logo.svg
IP
83.222.191.208:443
ASN
#212283 Roza Holidays Eood

Requested by
https://nw-protection-portal.com/Login.php/
Certificate
IssuerLet's Encrypt
Subjectnw-protection-portal.com
Fingerprint22:D4:A0:CF:BB:E2:48:62:12:04:61:8D:EB:7D:A1:7E:A4:80:07:A3
ValidityMon, 28 Apr 2025 12:59:12 GMT - Sun, 27 Jul 2025 12:59:11 GMT

File type
HTML document, ASCII text, with very long lines (8164)
Size
248 kB (248077 bytes)
Hash
68fe77ab843b6beb562654ee1bb0c700
8327967d6b7e5f560745e0e2a1a823f19e9a19e2
2173713279bbd1584b642a53430d5af407b23d877e4592f6d79972a88e9c4841

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	NatWest Personal Banking

HTTP Headers

GET /Login.php/files/img/n-w-logo.svg HTTP/1.1
Host: nw-protection-portal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nw-protection-portal.com/Login.php/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Apr 2025 21:21:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

nw-protection-portal.com/Login.php/files/img/error-marker.png

83.222.191.208

200 OK

248 kB

URL GET
nw-protection-portal.com/Login.php/files/img/error-marker.png
IP
83.222.191.208:443
ASN
#212283 Roza Holidays Eood

Requested by
https://nw-protection-portal.com/Login.php/
Certificate
IssuerLet's Encrypt
Subjectnw-protection-portal.com
Fingerprint22:D4:A0:CF:BB:E2:48:62:12:04:61:8D:EB:7D:A1:7E:A4:80:07:A3
ValidityMon, 28 Apr 2025 12:59:12 GMT - Sun, 27 Jul 2025 12:59:11 GMT

File type
HTML document, ASCII text, with very long lines (8164)
Size
248 kB (248077 bytes)
Hash
68fe77ab843b6beb562654ee1bb0c700
8327967d6b7e5f560745e0e2a1a823f19e9a19e2
2173713279bbd1584b642a53430d5af407b23d877e4592f6d79972a88e9c4841

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	NatWest Personal Banking

HTTP Headers

GET /Login.php/files/img/error-marker.png HTTP/1.1
Host: nw-protection-portal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nw-protection-portal.com/Login.php/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Apr 2025 21:21:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

nw-protection-portal.com/Login.php/files/img/FSCS_Protected_Logo.png

83.222.191.208

200 OK

248 kB

URL GET
nw-protection-portal.com/Login.php/files/img/FSCS_Protected_Logo.png
IP
83.222.191.208:443
ASN
#212283 Roza Holidays Eood

Requested by
https://nw-protection-portal.com/Login.php/
Certificate
IssuerLet's Encrypt
Subjectnw-protection-portal.com
Fingerprint22:D4:A0:CF:BB:E2:48:62:12:04:61:8D:EB:7D:A1:7E:A4:80:07:A3
ValidityMon, 28 Apr 2025 12:59:12 GMT - Sun, 27 Jul 2025 12:59:11 GMT

File type
HTML document, ASCII text, with very long lines (8164)
Size
248 kB (248077 bytes)
Hash
68fe77ab843b6beb562654ee1bb0c700
8327967d6b7e5f560745e0e2a1a823f19e9a19e2
2173713279bbd1584b642a53430d5af407b23d877e4592f6d79972a88e9c4841

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	NatWest Personal Banking

HTTP Headers

GET /Login.php/files/img/FSCS_Protected_Logo.png HTTP/1.1
Host: nw-protection-portal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nw-protection-portal.com/Login.php/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Apr 2025 21:21:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

nw-protection-portal.com/Login.php/files/img/favicon.ico

83.222.191.208

200 OK

248 kB

URL GET
nw-protection-portal.com/Login.php/files/img/favicon.ico
IP
83.222.191.208:443
ASN
#212283 Roza Holidays Eood

Requested by
https://nw-protection-portal.com/Login.php/
Certificate
IssuerLet's Encrypt
Subjectnw-protection-portal.com
Fingerprint22:D4:A0:CF:BB:E2:48:62:12:04:61:8D:EB:7D:A1:7E:A4:80:07:A3
ValidityMon, 28 Apr 2025 12:59:12 GMT - Sun, 27 Jul 2025 12:59:11 GMT

File type
HTML document, ASCII text, with very long lines (8164)
Size
248 kB (248046 bytes)
Hash
02822a4e107ab656c27e9a33109d52fc
4720cf096519fdf73078240fe61c102018be5918
256e45a504432b41635fd60f4e335d67160c9cb13f7186af652cce371bae80b0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	NatWest Personal Banking

HTTP Headers

GET /Login.php/files/img/favicon.ico HTTP/1.1
Host: nw-protection-portal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nw-protection-portal.com/Login.php/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Apr 2025 21:21:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

nw-protection-portal.com/Login.php/

83.222.191.208

200 OK

248 kB

URL User Request GET
nw-protection-portal.com/Login.php/
IP
83.222.191.208:443
ASN
#212283 Roza Holidays Eood

Certificate
IssuerLet's Encrypt
Subjectnw-protection-portal.com
Fingerprint22:D4:A0:CF:BB:E2:48:62:12:04:61:8D:EB:7D:A1:7E:A4:80:07:A3
ValidityMon, 28 Apr 2025 12:59:12 GMT - Sun, 27 Jul 2025 12:59:11 GMT

File type
HTML document, ASCII text, with very long lines (8164)
Size
248 kB (248097 bytes)
Hash
e2fef401025cfab7b9462a3dc3d9d2b3
4d8cdbd913f9abcc50254bacebdb76ebf9203d6d
08117f535d890ee2762a707338eea6ba3f1c82b5eefa59f8169477683d576a6b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	NatWest Personal Banking

HTTP Headers

GET /Login.php/ HTTP/1.1
Host: nw-protection-portal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Apr 2025 21:21:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

nw-protection-portal.com/Login.php/files/css/master.css

83.222.191.208

200 OK

248 kB

URL GET
nw-protection-portal.com/Login.php/files/css/master.css
IP
83.222.191.208:443
ASN
#212283 Roza Holidays Eood

Requested by
https://nw-protection-portal.com/Login.php/
Certificate
IssuerLet's Encrypt
Subjectnw-protection-portal.com
Fingerprint22:D4:A0:CF:BB:E2:48:62:12:04:61:8D:EB:7D:A1:7E:A4:80:07:A3
ValidityMon, 28 Apr 2025 12:59:12 GMT - Sun, 27 Jul 2025 12:59:11 GMT

File type
HTML document, ASCII text, with very long lines (8164)
Size
248 kB (248077 bytes)
Hash
68fe77ab843b6beb562654ee1bb0c700
8327967d6b7e5f560745e0e2a1a823f19e9a19e2
2173713279bbd1584b642a53430d5af407b23d877e4592f6d79972a88e9c4841

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	NatWest Personal Banking

HTTP Headers

GET /Login.php/files/css/master.css HTTP/1.1
Host: nw-protection-portal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nw-protection-portal.com/Login.php/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Apr 2025 21:21:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

nw-protection-portal.com/Login.php/files/css/overlayPromptMaster.css

83.222.191.208

200 OK

248 kB

URL GET
nw-protection-portal.com/Login.php/files/css/overlayPromptMaster.css
IP
83.222.191.208:443
ASN
#212283 Roza Holidays Eood

Requested by
https://nw-protection-portal.com/Login.php/
Certificate
IssuerLet's Encrypt
Subjectnw-protection-portal.com
Fingerprint22:D4:A0:CF:BB:E2:48:62:12:04:61:8D:EB:7D:A1:7E:A4:80:07:A3
ValidityMon, 28 Apr 2025 12:59:12 GMT - Sun, 27 Jul 2025 12:59:11 GMT

File type
HTML document, ASCII text, with very long lines (8164)
Size
248 kB (248077 bytes)
Hash
68fe77ab843b6beb562654ee1bb0c700
8327967d6b7e5f560745e0e2a1a823f19e9a19e2
2173713279bbd1584b642a53430d5af407b23d877e4592f6d79972a88e9c4841

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	NatWest Personal Banking

HTTP Headers

GET /Login.php/files/css/overlayPromptMaster.css HTTP/1.1
Host: nw-protection-portal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nw-protection-portal.com/Login.php/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Apr 2025 21:21:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

nw-protection-portal.com/Login.php/files/js/jquery.js

83.222.191.208

200 OK

248 kB

URL GET
nw-protection-portal.com/Login.php/files/js/jquery.js
IP
83.222.191.208:443
ASN
#212283 Roza Holidays Eood

Requested by
https://nw-protection-portal.com/Login.php/
Certificate
IssuerLet's Encrypt
Subjectnw-protection-portal.com
Fingerprint22:D4:A0:CF:BB:E2:48:62:12:04:61:8D:EB:7D:A1:7E:A4:80:07:A3
ValidityMon, 28 Apr 2025 12:59:12 GMT - Sun, 27 Jul 2025 12:59:11 GMT

File type
HTML document, ASCII text, with very long lines (8164)
Size
248 kB (248077 bytes)
Hash
68fe77ab843b6beb562654ee1bb0c700
8327967d6b7e5f560745e0e2a1a823f19e9a19e2
2173713279bbd1584b642a53430d5af407b23d877e4592f6d79972a88e9c4841

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	NatWest Personal Banking

HTTP Headers

GET /Login.php/files/js/jquery.js HTTP/1.1
Host: nw-protection-portal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nw-protection-portal.com/Login.php/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Apr 2025 21:21:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

nw-protection-portal.com/Login.php/files/img/nw-security-banner-vishing-194x443.gif

83.222.191.208

200 OK

248 kB

URL GET
nw-protection-portal.com/Login.php/files/img/nw-security-banner-vishing-194x443.gif
IP
83.222.191.208:443
ASN
#212283 Roza Holidays Eood

Requested by
https://nw-protection-portal.com/Login.php/
Certificate
IssuerLet's Encrypt
Subjectnw-protection-portal.com
Fingerprint22:D4:A0:CF:BB:E2:48:62:12:04:61:8D:EB:7D:A1:7E:A4:80:07:A3
ValidityMon, 28 Apr 2025 12:59:12 GMT - Sun, 27 Jul 2025 12:59:11 GMT

File type
HTML document, ASCII text, with very long lines (8164)
Size
248 kB (248077 bytes)
Hash
68fe77ab843b6beb562654ee1bb0c700
8327967d6b7e5f560745e0e2a1a823f19e9a19e2
2173713279bbd1584b642a53430d5af407b23d877e4592f6d79972a88e9c4841

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	NatWest Personal Banking

HTTP Headers

GET /Login.php/files/img/nw-security-banner-vishing-194x443.gif HTTP/1.1
Host: nw-protection-portal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nw-protection-portal.com/Login.php/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Apr 2025 21:21:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (11)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers