Security Scan Report: natwesthelpchat.com

Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Oct 13, 2026, 6:09:54 PMCompleted: Oct 13, 2026, 6:10:35 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

natwesthelpchat.com impersonates UK bank NatWest on a 75-day-old, unranked domain, with HIGH IDS alerts for obfuscated JavaScript; real content is hidden behind a bot wall. Treat as bank phishing.

Risk Factors (5)
Domain name impersonates NatWest bank on a non-official domain
Domain age 75 days (NEW) with no reputation/ranking
Two HIGH IDS alerts for obfuscated JavaScript (Potentially Bad Traffic)
Real page content unavailable behind bot-protection challenge — credential-harvesting presence unknown
Title-domain mismatch
Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Domain Name Analysis

The domain name 'natwesthelpchat.com' uses the commercial generic top-level domain (.com). The core label 'natwesthelpchat' covers 15 characters containing four vowels alongside eleven consonants. Breaking it apart gives four words: nat, west, help, chat. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://natwesthelpchat.com/

Page Load Overview

2.51s
Total Load Time
1022 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:392 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
77%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.21.38.55Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.219.135Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
104--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E3D2E872EB08225F55278AEF7AC0FB84113162A05616737AFCE636649FC905939733C7

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:UxdFoWGzWe5P1i2ene4qrWZaTRAaZHINSFEa8pBfeqGdEtNduCSWRga:GmRDqjyWZatAaZHINSFQT2qGd+MCjga

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28711:OMGGuGCWYgzEEtKUAaykpAHaAAAsAxGSoCHhQGCESEhxABcQTgGOEmhuBFjwgViD+IhAA4gmqHmgLVnALI2IqCF3CANYyRBA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc3c3ffffffffe7
Perceptual Hash:b13132cec6cccecc
Difference Hash:189e16100000000c
Wavelet Hash:fcc0c0f03c3c3c00
Color Hash:#c387c5

Other Hashes

Crop Resistant:189e16100000000c

Scan History

Scan history not available

Unable to load historical scan data