Domain > login.nopaperforms.io

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-02-27	13.234.103.111 (ClassC)
2025-05-28	43.204.179.252 (ClassC)
2025-06-01	13.127.22.19 (ClassC)
2025-06-10	3.6.107.30 (ClassC)
2025-08-23	3.7.16.129 (ClassC)
2025-12-26	13.203.236.19 (ClassC)
2025-12-29	13.202.25.158 (ClassC)
2026-02-12	15.206.199.63 (ClassC)

HTTP/1.1 200 OKDate: Thu, 27 Feb 2025 12:32:42 GMTContent-Type: text/html; charsetutf-8Content-Length: 19180Connection: keep-aliveServer: nginx/1.24.0X-Frame-Options: ALLOWALLX-Content-Type-Options: n

!DOCTYPE html>html langen>head>    meta http-equivContent-Type contenttext/html; charsetutf-8>    meta http-equivX-UA-Compatible contentIEedge>    meta nameviewport contentwidthdevice-width, initial-scale1>    title>College Login | Meritto/title>    link hrefhttps://logincdn.npfs.co/static/v1/images/favicon.ico?1703751286 typeimage/x-icon relicon>    meta namerobots contentnoindex,nofollow>    link relpreconnect hrefhttps://fonts.googleapis.com>    link relpreconnect hrefhttps://fonts.gstatic.com crossorigin>    link relpreload asimage hrefhttps://logincdn.npfs.co/static/v1/images/echo_1.png?1717001828>    link relstylesheet typetext/css hrefhttps://fonts.googleapis.com/css?familyRoboto:300,400,500,700&displayswap>    link relstylesheet typetext/css hrefhttps://fonts.googleapis.com/css?familyMaterial+Icons&displayswap>    link relstylesheet typetext/css hrefhttps://logincdn.npfs.co/static/v1/css/owl.carousel.min.css?1717001828 >link relstylesheet typetext/css hrefhttps://logincdn.npfs.co/static/v1/css/login.css?1727110632 >        /head>body>        div classloginWrapper>        div classloginform>            div classloginbox>                div classlogo-holder text-center>                    img srchttps://logincdn.npfs.co/static/v1/images/meritto-formerly-nopaperforms.png?1703751286 width180 altMeritto Logo>                                    /div>                div classpanel panel-custom loginVaiOTP styledisplay:none  idloginVaiOTP>                    p classmt-0 text-danger mb-0 alertMsg>/p>                    p classmb-0 registeredEmail>Enter the code we emailed to /p>                    p classtext-muted mutedMsg>We ask for a code when you log in from an unrecognized device - regardless of your settings./p>                    div classform-group w-50 mb-0>                        input typetext classform-control idemailCode>                        label foremailCode classformLabel>Enter Code/label>                    /div>                    small idotp_message2 classd-inline-block mt-2 text-success styl

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > login.nopaperforms.io

Is this malicious?

DNS Resolutions

Port 80

Port 443