Report - base-ndax-login--auth.webflow.io/

Report Overview

Visitedpublic

2025-05-14 14:04:38

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
base-ndax-login--auth.webflow.io	unknown	unknown	No data	No data	489 B	3.2 kB	172.64.151.8
d3e54v103j8qbb.cloudfront.net	unknown	2008-04-25	2016-03-11	2025-05-08	533 B	90 kB	54.230.245.223
cdn.prod.website-files.com	unknown	2019-01-23	2023-11-01	2025-05-08	456 B	5.5 kB	104.18.161.117
assets-global.website-files.com	14027	2019-01-23	2020-11-01	2025-05-09	1.5 kB	595 kB	172.64.153.55

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-05-14	medium	base-ndax-login--auth.webflow.io/	Crypto/Wallet

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	base-ndax-login--auth.webflow.io/	ScriptElement	181 B	2023-03-07	2025-08-02
URL base-ndax-login--auth.webflow.io/ IP / ASN 172.64.151.8 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 21839 Size 181 B (181 bytes) MD5 0e9e3ad57abeefde87342864450cc232 SHA1 4dc8676bf3417d597053d5f253fce034007f63da SHA256 9a37601d1f5a5f2fba3b000694d4bf5e035c606d5485dd94e2997cbe2efe5c26 Format Code Loading...

	d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6650abd4042682afb3e2cc41	ScriptElement	90 kB	2023-03-07	2025-08-02
URL d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6650abd4042682afb3e2cc41 IP / ASN 54.230.245.223 #16509 AMAZON-02 Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 127526 Size 90 kB (89476 bytes) MD5 dc5e7f18c8d36ac1d3d4753a87c98d0a SHA1 c8e1c8b386dc5b7a9184c763c88d19a346eb3342 SHA256 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Format Code Loading...

	assets-global.website-files.com/6650abd4042682afb3e2cc41/js/webflow.4e8135d87.js	ScriptElement	37 kB	2024-02-23	2025-08-02
URL assets-global.website-files.com/6650abd4042682afb3e2cc41/js/webflow.4e8135d87.js IP / ASN 172.64.153.55 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded false Resource Info First Seen 2024-02-23 Last Seen 2025-08-02 Times Seen 6527 Size 37 kB (37354 bytes) MD5 4e8135d87e56ebf7d55500945d58c45a SHA1 c6ee3344d1a7d669e00e275878cdad970df4eb60 SHA256 18a0ed9cf15cb5ad3cb33184b71da4589141d9361580881ab2a1a4c16390240d Format Code Loading...

HTTP Transactions (6)

URL IP Response Size

GET cdn.prod.website-files.com/img/webclip.png

104.18.161.117

200 OK

4.8 kB

URL

cdn.prod.website-files.com/img/webclip.png

IP / ASN

104.18.161.117

#13335 CLOUDFLARENET

Requested byhttps://base-ndax-login--auth.webflow.io/

Resource Info

File typePNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced

First Seen2023-10-07

Last Seen2025-08-02

Times Seen18951

Size4.8 kB (4807 bytes)

MD54ff20fa6aa65e68a21f28fefb0a2c3e9

SHA18f20cc5b884b7c2642558d11d7cf79e416ea4a7f

SHA256c305e6b8ea9916705eec8eb8c281561d907fdaa0c84f3dbe7b65dac9e2ddf993

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

FingerprintDA:42:54:6E:EB:A9:B6:0C:20:4E:55:E1:97:B7:25:2D:3E:5A:9F:0E

ValidityWed, 16 Apr 2025 11:51:09 GMT - Tue, 15 Jul 2025 12:50:55 GMT

HTTP Headers

GET /img/webclip.png HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://base-ndax-login--auth.webflow.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 14 May 2025 14:04:17 GMT
content-type: image/png
content-length: 4807
x-amz-id-2: oiNQK6Xos0ARPeAnbQRS3Q+BoNH3kXYgi6bafrEEJWlzhjjlU5AoQCfmHLnOnqtE2y/WVuL06JFho4MjQLLi/w==
x-amz-request-id: NHBA7BG3487FYZ34
last-modified: Thu, 05 Oct 2023 18:14:58 GMT
etag: "4ff20fa6aa65e68a21f28fefb0a2c3e9"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
x-amz-version-id: rSDmpQNuQqoVbh9JRDEaL4vADBvuwdCz
cf-cache-status: HIT
age: 46187
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 93faf19e6aeb56c6-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET assets-global.website-files.com/6650abd4042682afb3e2cc41/6650abd4042682afb3e2cc47_ndax%20new.png

172.64.153.55

200 OK

518 kB

URL

assets-global.website-files.com/6650abd4042682afb3e2cc41/6650abd4042682afb3e2cc47_ndax%20new.png

IP / ASN

172.64.153.55

#13335 CLOUDFLARENET

Requested byhttps://base-ndax-login--auth.webflow.io/

Resource Info

File typePNG image data, 1600 x 8098, 8-bit colormap, non-interlaced

First Seen2025-01-17

Last Seen2025-07-29

Times Seen466

Size518 kB (518459 bytes)

MD5e0b1086562ccd9fd2aac6c8c2b77f73a

SHA11c93cff1347a6a205af92c459c64abe9a374cfc9

SHA256fd05722cda7d4789ec1a698b39102d25d59cd962d33bd2e91ccfea47ce7340a6

Certificate Info

IssuerGoogle Trust Services

Subjectwebsite-files.com

Fingerprint2F:48:4F:70:53:1B:3F:1E:F3:8A:96:96:06:7C:AC:A1:22:E0:02:27

ValidityTue, 06 May 2025 07:59:36 GMT - Mon, 04 Aug 2025 08:59:26 GMT

HTTP Headers

GET /6650abd4042682afb3e2cc41/6650abd4042682afb3e2cc47_ndax%20new.png HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://base-ndax-login--auth.webflow.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 14 May 2025 14:04:17 GMT
content-type: image/png
content-length: 518459
x-amz-id-2: UO0yekRRZmN/IYpRWWz3PLpBs2NGRRwj6ftdrnfuKmwvBzlyxlM2OQtwU3EwwZ60dSRyeJ7Btus=
x-amz-request-id: B330K8M9N7CKWDDZ
last-modified: Fri, 24 May 2024 15:01:41 GMT
etag: "e0b1086562ccd9fd2aac6c8c2b77f73a"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: Ak1Ll3mfavRkUB8DxZthMY9MAkrAZ6HL
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 93faf19e6f6556aa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET base-ndax-login--auth.webflow.io/

172.64.151.8

200 OK

2.4 kB

URL

base-ndax-login--auth.webflow.io/

IP / ASN

172.64.151.8

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text, with very long lines (2354), with no line terminators

First Seen2025-05-14

Last Seen2025-05-16

Times Seen3

Size2.4 kB (2359 bytes)

MD514c0082a54a265bbd77021b3836dcf0e

SHA1da89ab49541c29b4e4f7681af256c97e9725b97a

SHA256f7639be7b650b2f97004699d3597f31d55fec439f0b225a5e6ac61943e576b6a

Certificate Info

IssuerGoogle Trust Services

Subjectwebflow.io

FingerprintD7:06:C9:77:8D:71:FC:33:A5:BC:3D:33:B8:FB:A9:B2:15:2C:36:6D

ValidityTue, 08 Apr 2025 23:09:56 GMT - Tue, 08 Jul 2025 00:09:53 GMT

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET / HTTP/1.1
Host: base-ndax-login--auth.webflow.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 14 May 2025 14:04:16 GMT
content-type: text/html
cf-ray: 93faf19a4b26b500-OSL
cf-cache-status: HIT
content-encoding: gzip
last-modified: Wed, 14 May 2025 00:18:08 GMT
content-security-policy: frame-ancestors 'self' https://*.webflow.com http://*.webflow.com http://*.webflow.io http://webflow.com https://webflow.com
surrogate-control: max-age=2147483647
surrogate-key: base-ndax-login--auth.webflow.io 6650abd4042682afb3e2cc41 pageId:6650abd4042682afb3e2cc40
x-lambda-id: d65e4be1-f5eb-4dd5-91e4-decc08d92f75
vary: Accept-Encoding
set-cookie: _cfuvid=XfpPyr2F6sF10q211gvCktLlmiQqaExc55ovmMN48KM-1747231456499-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET assets-global.website-files.com/6650abd4042682afb3e2cc41/css/base-ndax-login--auth.webflow.643ab4644.css

172.64.153.55

200 OK

37 kB

URL

assets-global.website-files.com/6650abd4042682afb3e2cc41/css/base-ndax-login--auth.webflow.643ab4644.css

IP / ASN

172.64.153.55

#13335 CLOUDFLARENET

Requested byhttps://base-ndax-login--auth.webflow.io/

Resource Info

File typeUnicode text, UTF-8 text, with very long lines (2587)

First Seen2024-05-11

Last Seen2025-08-01

Times Seen2115

Size37 kB (37224 bytes)

MD5643ab4644f9601373bdf5006ad6343db

SHA120f163e7097ec69353a8a43e9d573d0d5e63e036

SHA256ec4cebc0b1bbee1c95157b4fdfea6eb1adf724840e37d6da6c0c6b692a000072

Certificate Info

IssuerGoogle Trust Services

Subjectwebsite-files.com

Fingerprint2F:48:4F:70:53:1B:3F:1E:F3:8A:96:96:06:7C:AC:A1:22:E0:02:27

ValidityTue, 06 May 2025 07:59:36 GMT - Mon, 04 Aug 2025 08:59:26 GMT

HTTP Headers

GET /6650abd4042682afb3e2cc41/css/base-ndax-login--auth.webflow.643ab4644.css HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://base-ndax-login--auth.webflow.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 14 May 2025 14:04:16 GMT
content-type: text/css
content-length: 8372
x-amz-id-2: QltqYgSa6pp6OHqf57BglQxmLGSBySSC58Q1svQEbcS/uDoG4n+lSXYRUbF31nDzd2bIygzGuVrujVRz/lYEtLQOONT2dYjR
x-amz-request-id: QN59NJV6W0ET7TSC
last-modified: Fri, 24 May 2024 15:02:15 GMT
etag: "28f1f15b510eca17a937061e9d0807bb"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
content-encoding: gzip
x-amz-version-id: SNd4nhwJSbBN8ucoF0Vf5mdlSe_VFFdi
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 93faf19cf9fe7131-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6650abd4042682afb3e2cc41

54.230.245.223

200 OK

90 kB

URL

d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6650abd4042682afb3e2cc41

IP / ASN

54.230.245.223

#16509 AMAZON-02

Requested byhttps://base-ndax-login--auth.webflow.io/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (65451)

First Seen2023-03-07

Last Seen2025-08-02

Times Seen127526

Size90 kB (89476 bytes)

MD5dc5e7f18c8d36ac1d3d4753a87c98d0a

SHA1c8e1c8b386dc5b7a9184c763c88d19a346eb3342

SHA256f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

Certificate Info

IssuerAmazon

Subject*.cloudfront.net

Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62

ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT

HTTP Headers

GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=6650abd4042682afb3e2cc41 HTTP/1.1
Host: d3e54v103j8qbb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://base-ndax-login--auth.webflow.io
DNT: 1
Connection: keep-alive
Referer: https://base-ndax-login--auth.webflow.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
date: Wed, 14 May 2025 05:03:33 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 20 Jul 2020 17:53:02 GMT
server: AmazonS3
cache-control: max-age=84600, must-revalidate
content-encoding: gzip
etag: W/"dc5e7f18c8d36ac1d3d4753a87c98d0a"
vary: accept-encoding
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
age: 32443
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: w9lMIl3tb8fkPDC3EBLxO2qMFVUzWSCSHZZL5BQeM9P-xldb0nEudw==
X-Firefox-Spdy: h2

GET assets-global.website-files.com/6650abd4042682afb3e2cc41/js/webflow.4e8135d87.js

172.64.153.55

200 OK

37 kB

URL

assets-global.website-files.com/6650abd4042682afb3e2cc41/js/webflow.4e8135d87.js

IP / ASN

172.64.153.55

#13335 CLOUDFLARENET

Requested byhttps://base-ndax-login--auth.webflow.io/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (21513)

First Seen2024-02-23

Last Seen2025-08-02

Times Seen6527

Size37 kB (37354 bytes)

MD54e8135d87e56ebf7d55500945d58c45a

SHA1c6ee3344d1a7d669e00e275878cdad970df4eb60

SHA25618a0ed9cf15cb5ad3cb33184b71da4589141d9361580881ab2a1a4c16390240d

Certificate Info

IssuerGoogle Trust Services

Subjectwebsite-files.com

Fingerprint2F:48:4F:70:53:1B:3F:1E:F3:8A:96:96:06:7C:AC:A1:22:E0:02:27

ValidityTue, 06 May 2025 07:59:36 GMT - Mon, 04 Aug 2025 08:59:26 GMT

HTTP Headers

GET /6650abd4042682afb3e2cc41/js/webflow.4e8135d87.js HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://base-ndax-login--auth.webflow.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 14 May 2025 14:04:16 GMT
content-type: text/javascript
content-length: 13715
x-amz-id-2: kwKKlXalg6Qt355OLyS95UHoxMKzLHJFgMveLK3zlSoab+nIqESx28OCtRXTwaG/mKKNBRoy0BU=
x-amz-request-id: QN54XBPRKY8E47FZ
last-modified: Fri, 24 May 2024 15:02:15 GMT
etag: "48bd2b847a93ac70ad46484a35db1786"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
content-encoding: gzip
x-amz-version-id: PjzPa2IiX4WdvgJmm1tb91PnE1sQFqt7
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 93faf19cf9f67131-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2