Report - ndax-login-portal.webflow.io/

Report Overview

Visitedpublic

2025-06-10 11:31:33

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.prod.website-files.com	unknown	2019-01-23	2023-11-01	2025-06-05	1.9 kB	601 kB	104.18.161.117
ndax-login-portal.webflow.io	unknown	2013-05-08	2025-06-10	2025-06-10	485 B	3.1 kB	172.64.151.8
d3e54v103j8qbb.cloudfront.net	unknown	2008-04-25	2016-03-11	2025-06-05	525 B	90 kB	54.230.245.192

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-06-09	medium	ndax-login-portal.webflow.io/	Crypto/Wallet

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	ndax-login-portal.webflow.io/	ScriptElement	181 B	2023-03-07	2025-08-02
URL ndax-login-portal.webflow.io/ IP / ASN 172.64.151.8 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 21874 Size 181 B (181 bytes) MD5 0e9e3ad57abeefde87342864450cc232 SHA1 4dc8676bf3417d597053d5f253fce034007f63da SHA256 9a37601d1f5a5f2fba3b000694d4bf5e035c606d5485dd94e2997cbe2efe5c26 Format Code Loading...

	cdn.prod.website-files.com/66634ddb91038cce2fc6269d/js/webflow.4e8135d87.js	ScriptElement	37 kB	2024-02-23	2025-08-02
URL cdn.prod.website-files.com/66634ddb91038cce2fc6269d/js/webflow.4e8135d87.js IP / ASN 104.18.161.117 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded false Resource Info First Seen 2024-02-23 Last Seen 2025-08-02 Times Seen 6535 Size 37 kB (37354 bytes) MD5 4e8135d87e56ebf7d55500945d58c45a SHA1 c6ee3344d1a7d669e00e275878cdad970df4eb60 SHA256 18a0ed9cf15cb5ad3cb33184b71da4589141d9361580881ab2a1a4c16390240d Format Code Loading...

	d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=66634ddb91038cce2fc6269d	ScriptElement	90 kB	2023-03-07	2025-08-03
URL d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=66634ddb91038cce2fc6269d IP / ASN 54.230.245.192 #16509 AMAZON-02 Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-03 Times Seen 127666 Size 90 kB (89476 bytes) MD5 dc5e7f18c8d36ac1d3d4753a87c98d0a SHA1 c8e1c8b386dc5b7a9184c763c88d19a346eb3342 SHA256 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Format Code Loading...

HTTP Transactions (6)

URL IP Response Size

GET cdn.prod.website-files.com/66634ddb91038cce2fc6269d/js/webflow.4e8135d87.js

104.18.161.117

200 OK

37 kB

URL

cdn.prod.website-files.com/66634ddb91038cce2fc6269d/js/webflow.4e8135d87.js

IP / ASN

104.18.161.117

#13335 CLOUDFLARENET

Requested byhttps://ndax-login-portal.webflow.io/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (21513)

First Seen2024-02-23

Last Seen2025-08-02

Times Seen6535

Size37 kB (37354 bytes)

MD54e8135d87e56ebf7d55500945d58c45a

SHA1c6ee3344d1a7d669e00e275878cdad970df4eb60

SHA25618a0ed9cf15cb5ad3cb33184b71da4589141d9361580881ab2a1a4c16390240d

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

FingerprintDA:42:54:6E:EB:A9:B6:0C:20:4E:55:E1:97:B7:25:2D:3E:5A:9F:0E

ValidityWed, 16 Apr 2025 11:51:09 GMT - Tue, 15 Jul 2025 12:50:55 GMT

HTTP Headers

GET /66634ddb91038cce2fc6269d/js/webflow.4e8135d87.js HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndax-login-portal.webflow.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:31:12 GMT
content-type: text/javascript
content-length: 13715
x-amz-id-2: ALfqR6UGDa2EjTgGFwC4CfMl7ko7CqxIIb+uwN/pWd2ij5tuGj+u0757c007PgyTB2clHkqGJAS3mAjiUKZbOnSnDdqCPI6B
x-amz-request-id: 50CEQT5BRWGRGX2A
last-modified: Fri, 07 Jun 2024 18:18:17 GMT
etag: "48bd2b847a93ac70ad46484a35db1786"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
content-encoding: gzip
x-amz-version-id: UMQTCDxiCNE22fuQaxAgRQ7Ou_cZQ.Qm
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 94d88a84091056b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET cdn.prod.website-files.com/66634ddb91038cce2fc6269d/66634dfe7cef6d79acda0137_ndax%20new.png

104.18.161.117

200 OK

518 kB

URL

cdn.prod.website-files.com/66634ddb91038cce2fc6269d/66634dfe7cef6d79acda0137_ndax%20new.png

IP / ASN

104.18.161.117

#13335 CLOUDFLARENET

Requested byhttps://ndax-login-portal.webflow.io/

Resource Info

File typePNG image data, 1600 x 8098, 8-bit colormap, non-interlaced

First Seen2025-01-17

Last Seen2025-07-29

Times Seen466

Size518 kB (518459 bytes)

MD5e0b1086562ccd9fd2aac6c8c2b77f73a

SHA11c93cff1347a6a205af92c459c64abe9a374cfc9

SHA256fd05722cda7d4789ec1a698b39102d25d59cd962d33bd2e91ccfea47ce7340a6

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

FingerprintDA:42:54:6E:EB:A9:B6:0C:20:4E:55:E1:97:B7:25:2D:3E:5A:9F:0E

ValidityWed, 16 Apr 2025 11:51:09 GMT - Tue, 15 Jul 2025 12:50:55 GMT

HTTP Headers

GET /66634ddb91038cce2fc6269d/66634dfe7cef6d79acda0137_ndax%20new.png HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndax-login-portal.webflow.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 10 Jun 2025 11:31:12 GMT
content-type: image/png
content-length: 518459
x-amz-id-2: S9DBYRfV/H8Neor+h9fzPbqmE+YflxQthpO1339lvV9w1/eJAfCcDOj1QaHmyAk8wG18NVX8Jts=
x-amz-request-id: MSXRWWQS076PEPRZ
last-modified: Fri, 07 Jun 2024 18:14:24 GMT
etag: "e0b1086562ccd9fd2aac6c8c2b77f73a"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: 8BpRH_zzZpmaE0EXJ.NCxNauAvVv5lHH
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 94d88a85da89712a-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET cdn.prod.website-files.com/img/webclip.png

104.18.161.117

200 OK

4.8 kB

URL

cdn.prod.website-files.com/img/webclip.png

IP / ASN

104.18.161.117

#13335 CLOUDFLARENET

Requested byhttps://ndax-login-portal.webflow.io/

Resource Info

File typePNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced

First Seen2023-10-07

Last Seen2025-08-02

Times Seen18971

Size4.8 kB (4807 bytes)

MD54ff20fa6aa65e68a21f28fefb0a2c3e9

SHA18f20cc5b884b7c2642558d11d7cf79e416ea4a7f

SHA256c305e6b8ea9916705eec8eb8c281561d907fdaa0c84f3dbe7b65dac9e2ddf993

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

FingerprintDA:42:54:6E:EB:A9:B6:0C:20:4E:55:E1:97:B7:25:2D:3E:5A:9F:0E

ValidityWed, 16 Apr 2025 11:51:09 GMT - Tue, 15 Jul 2025 12:50:55 GMT

HTTP Headers

GET /img/webclip.png HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndax-login-portal.webflow.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 10 Jun 2025 11:31:13 GMT
content-type: image/png
content-length: 4807
x-amz-id-2: oiNQK6Xos0ARPeAnbQRS3Q+BoNH3kXYgi6bafrEEJWlzhjjlU5AoQCfmHLnOnqtE2y/WVuL06JFho4MjQLLi/w==
x-amz-request-id: NHBA7BG3487FYZ34
last-modified: Thu, 05 Oct 2023 18:14:58 GMT
etag: "4ff20fa6aa65e68a21f28fefb0a2c3e9"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
x-amz-version-id: rSDmpQNuQqoVbh9JRDEaL4vADBvuwdCz
cf-cache-status: HIT
age: 34790
accept-ranges: bytes
priority: u=6,i=?0
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 94d88a86ebe0712a-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET ndax-login-portal.webflow.io/

172.64.151.8

200 OK

2.3 kB

URL

ndax-login-portal.webflow.io/

IP / ASN

172.64.151.8

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text, with very long lines (2310), with no line terminators

First Seen2025-05-10

Last Seen2025-06-10

Times Seen2

Size2.3 kB (2315 bytes)

MD53f5891f523dcfbdc3d9dcd8533ff6d36

SHA1c937a06993ad4c61d521f45d07fc48404909dbf9

SHA256d7f107b2c69c304ce4bf7329e1cacf5e3aa9d1bd1e179285b501a4150d01aabd

Certificate Info

IssuerGoogle Trust Services

Subjectwebflow.io

FingerprintC7:C4:42:3C:3F:0E:EA:71:D7:EE:EB:5C:36:A3:07:27:22:62:E2:3F

ValidityFri, 06 Jun 2025 23:45:24 GMT - Fri, 05 Sep 2025 00:45:17 GMT

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET / HTTP/1.1
Host: ndax-login-portal.webflow.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:31:12 GMT
content-type: text/html
cf-ray: 94d88a80fb3a0b59-OSL
cf-cache-status: HIT
content-encoding: gzip
last-modified: Thu, 29 May 2025 16:51:53 GMT
content-security-policy: frame-ancestors 'self' https://*.webflow.com http://*.webflow.com http://*.webflow.io http://webflow.com https://webflow.com
surrogate-control: max-age=2147483647
surrogate-key: ndax-login-portal.webflow.io 66634ddb91038cce2fc6269d pageId:66634ddb91038cce2fc626a6
x-lambda-id: 199a5a31-ac60-428d-8619-7a615c3b271a
vary: Accept-Encoding
set-cookie: _cfuvid=WaEuW00S2fWmDEA66WLRBIxUxWl7UXoTOd8I._fGp.w-1749555072295-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=66634ddb91038cce2fc6269d

54.230.245.192

200 OK

90 kB

URL

d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=66634ddb91038cce2fc6269d

IP / ASN

54.230.245.192

#16509 AMAZON-02

Requested byhttps://ndax-login-portal.webflow.io/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (65451)

First Seen2023-03-07

Last Seen2025-08-03

Times Seen127666

Size90 kB (89476 bytes)

MD5dc5e7f18c8d36ac1d3d4753a87c98d0a

SHA1c8e1c8b386dc5b7a9184c763c88d19a346eb3342

SHA256f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

Certificate Info

IssuerAmazon

Subject*.cloudfront.net

Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72

ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT

HTTP Headers

GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=66634ddb91038cce2fc6269d HTTP/1.1
Host: d3e54v103j8qbb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ndax-login-portal.webflow.io
DNT: 1
Connection: keep-alive
Referer: https://ndax-login-portal.webflow.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
date: Tue, 10 Jun 2025 02:22:14 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 20 Jul 2020 17:53:02 GMT
server: AmazonS3
cache-control: max-age=84600, must-revalidate
content-encoding: br
etag: W/"dc5e7f18c8d36ac1d3d4753a87c98d0a"
vary: accept-encoding
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
age: 32939
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ttpLmFbWy4XuCMxCiPx_IQrnRbdhUZ-Bl-ur3fxMiNkJd6lOg6ftMQ==
X-Firefox-Spdy: h2

GET cdn.prod.website-files.com/66634ddb91038cce2fc6269d/css/ndax-login-portal.webflow.5b880d6d8.css

104.18.161.117

200 OK

37 kB

URL

cdn.prod.website-files.com/66634ddb91038cce2fc6269d/css/ndax-login-portal.webflow.5b880d6d8.css

IP / ASN

104.18.161.117

#13335 CLOUDFLARENET

Requested byhttps://ndax-login-portal.webflow.io/

Resource Info

File typeUnicode text, UTF-8 text, with very long lines (2587)

First Seen2024-06-01

Last Seen2025-07-31

Times Seen282

Size37 kB (37271 bytes)

MD55b880d6d84a14fc467790faa92f5e4df

SHA13c998e4c7394ab64042d3e2ac87bd4eb7cfa1910

SHA2560cee371da6a0b01bf9e7afefda90952864a5f3431023a92cda393fb201b5b87b

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

FingerprintDA:42:54:6E:EB:A9:B6:0C:20:4E:55:E1:97:B7:25:2D:3E:5A:9F:0E

ValidityWed, 16 Apr 2025 11:51:09 GMT - Tue, 15 Jul 2025 12:50:55 GMT

HTTP Headers

GET /66634ddb91038cce2fc6269d/css/ndax-login-portal.webflow.5b880d6d8.css HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndax-login-portal.webflow.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:31:12 GMT
content-type: text/css
content-length: 8397
x-amz-id-2: EIQKe3X9iBuigIJxQXyLOtCJ+QrHDkAMBAi4mCOGA2HbcYzznBmq+8Kxkp6yLx6QjX8C8bBtwY3KwBK4+pBLVk6uyLmU1Ib5
x-amz-request-id: 50C7Y27N5Q1DE9H4
last-modified: Fri, 07 Jun 2024 18:18:17 GMT
etag: "9993dfd90906c5470e060083f7c109c0"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
content-encoding: gzip
x-amz-version-id: .Rr8ka8t6fx3yhm_hNMiWDNkWdAPe27H
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 94d88a83e8f756b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2