Report - ndax-ca-authh.webflow.io/

Report Overview

Visitedpublic

2025-07-26 16:58:39

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
assets-global.website-files.com	14027	2019-01-23	2020-11-01	2025-07-21	1.5 kB	1.0 MB	104.18.34.201
cdn.prod.website-files.com	unknown	2019-01-23	2023-11-01	2025-07-24	469 B	5.5 kB	104.18.160.117
ndax-ca-authh.webflow.io	unknown	2013-05-08	2025-07-12	2025-07-12	502 B	5.4 kB	172.64.151.8
d3e54v103j8qbb.cloudfront.net	unknown	2008-04-25	2016-03-11	2025-07-24	538 B	90 kB	54.230.245.223

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-07-26	medium	ndax-ca-authh.webflow.io/	Crypto/Wallet

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	ndax-ca-authh.webflow.io/	ScriptElement	181 B	2023-03-07	2025-08-02
URL ndax-ca-authh.webflow.io/ IP / ASN 172.64.151.8 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 21839 Size 181 B (181 bytes) MD5 0e9e3ad57abeefde87342864450cc232 SHA1 4dc8676bf3417d597053d5f253fce034007f63da SHA256 9a37601d1f5a5f2fba3b000694d4bf5e035c606d5485dd94e2997cbe2efe5c26 Format Code Loading...

	d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6630a0b5d486f9e29219fc04	ScriptElement	90 kB	2023-03-07	2025-08-02
URL d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6630a0b5d486f9e29219fc04 IP / ASN 54.230.245.223 #16509 AMAZON-02 Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 127527 Size 90 kB (89476 bytes) MD5 dc5e7f18c8d36ac1d3d4753a87c98d0a SHA1 c8e1c8b386dc5b7a9184c763c88d19a346eb3342 SHA256 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Format Code Loading...

	assets-global.website-files.com/6630a0b5d486f9e29219fc04/js/webflow.4e8135d87.js	ScriptElement	37 kB	2024-02-23	2025-08-02
URL assets-global.website-files.com/6630a0b5d486f9e29219fc04/js/webflow.4e8135d87.js IP / ASN 104.18.34.201 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded false Resource Info First Seen 2024-02-23 Last Seen 2025-08-02 Times Seen 6527 Size 37 kB (37354 bytes) MD5 4e8135d87e56ebf7d55500945d58c45a SHA1 c6ee3344d1a7d669e00e275878cdad970df4eb60 SHA256 18a0ed9cf15cb5ad3cb33184b71da4589141d9361580881ab2a1a4c16390240d Format Code Loading...

HTTP Transactions (6)

URL IP Response Size

GET assets-global.website-files.com/6630a0b5d486f9e29219fc04/js/webflow.4e8135d87.js

104.18.34.201

200 OK

37 kB

URL

assets-global.website-files.com/6630a0b5d486f9e29219fc04/js/webflow.4e8135d87.js

IP / ASN

104.18.34.201

#13335 CLOUDFLARENET

Requested byhttps://ndax-ca-authh.webflow.io/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (21513)

First Seen2024-02-23

Last Seen2025-08-02

Times Seen6527

Size37 kB (37354 bytes)

MD54e8135d87e56ebf7d55500945d58c45a

SHA1c6ee3344d1a7d669e00e275878cdad970df4eb60

SHA25618a0ed9cf15cb5ad3cb33184b71da4589141d9361580881ab2a1a4c16390240d

Certificate Info

IssuerGoogle Trust Services

Subjectwebsite-files.com

Fingerprint4B:CF:1A:EC:BD:6C:37:7C:3A:AE:D3:D3:66:04:AE:34:06:D9:28:75

ValidityFri, 04 Jul 2025 11:08:41 GMT - Thu, 02 Oct 2025 12:08:36 GMT

HTTP Headers

GET /6630a0b5d486f9e29219fc04/js/webflow.4e8135d87.js HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndax-ca-authh.webflow.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 26 Jul 2025 16:58:01 GMT
content-type: text/javascript
content-length: 13715
x-amz-id-2: sEOS6AqXXsSUWbls3tgi+LZr2XK4qWbr3tUIz0Aqk2RQ9TNDK68w9RJQtXcTzzIu67fn+IwOFXI=
x-amz-request-id: S4JCZ3TR767STFBA
last-modified: Tue, 30 Apr 2024 07:46:13 GMT
etag: "48bd2b847a93ac70ad46484a35db1786"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
content-encoding: gzip
x-amz-version-id: 5zZTA.3IQD7uOqvxknvnW9UYHTTPEcQq
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 9655707c8bdf0b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET assets-global.website-files.com/6630a0b5d486f9e29219fc04/6630a0e03fced26e1ad0d398_pic.gif-p-1600.png

104.18.34.201

200 OK

952 kB

URL

assets-global.website-files.com/6630a0b5d486f9e29219fc04/6630a0e03fced26e1ad0d398_pic.gif-p-1600.png

IP / ASN

104.18.34.201

#13335 CLOUDFLARENET

Requested byhttps://ndax-ca-authh.webflow.io/

Resource Info

File typePNG image data, 1600 x 6330, 8-bit colormap, non-interlaced

First Seen2025-01-04

Last Seen2025-07-26

Times Seen64

Size952 kB (952260 bytes)

MD5bc05957850f1b26ecfe4189613af89ac

SHA1dd47e3c83518519f0cde7ccab6bbf98b0976e968

SHA256d8ada3b12747c14da0f13352ed34ed4720b5e4df52315e8b589fe56622eaac26

Certificate Info

IssuerGoogle Trust Services

Subjectwebsite-files.com

Fingerprint4B:CF:1A:EC:BD:6C:37:7C:3A:AE:D3:D3:66:04:AE:34:06:D9:28:75

ValidityFri, 04 Jul 2025 11:08:41 GMT - Thu, 02 Oct 2025 12:08:36 GMT

HTTP Headers

GET /6630a0b5d486f9e29219fc04/6630a0e03fced26e1ad0d398_pic.gif-p-1600.png HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndax-ca-authh.webflow.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 26 Jul 2025 16:58:01 GMT
content-type: image/png
content-length: 952260
x-amz-id-2: T7k1xogT1uLWS/SkXHTvA+FPkC6lsHmDJKBE9zbAHUt7nnpHYC8aaTAGmNIqsYZIlB3zIQkX3o4=
x-amz-request-id: 4TAF9Z79KC3SS18R
last-modified: Tue, 30 Apr 2024 07:42:41 GMT
etag: "bc05957850f1b26ecfe4189613af89ac"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: uId0SiOXdHEqe5c4GkvqdiNcu6uKvsDW
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 9655707df9c85695-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET cdn.prod.website-files.com/img/webclip.png

104.18.160.117

200 OK

4.8 kB

URL

cdn.prod.website-files.com/img/webclip.png

IP / ASN

104.18.160.117

#13335 CLOUDFLARENET

Requested byhttps://ndax-ca-authh.webflow.io/

Resource Info

File typePNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced

First Seen2023-10-07

Last Seen2025-08-02

Times Seen18951

Size4.8 kB (4807 bytes)

MD54ff20fa6aa65e68a21f28fefb0a2c3e9

SHA18f20cc5b884b7c2642558d11d7cf79e416ea4a7f

SHA256c305e6b8ea9916705eec8eb8c281561d907fdaa0c84f3dbe7b65dac9e2ddf993

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

Fingerprint79:7F:BF:28:0B:E4:0E:85:78:AA:FC:38:8C:A2:54:E0:4C:6F:03:97

ValiditySat, 14 Jun 2025 14:31:51 GMT - Fri, 12 Sep 2025 15:31:45 GMT

HTTP Headers

GET /img/webclip.png HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndax-ca-authh.webflow.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 26 Jul 2025 16:58:01 GMT
content-type: image/png
content-length: 4807
x-amz-id-2: NRV2zTnf+IAfsUZPxv3+HfKEHTtfQid0jpKILy8gvQkviHsb8HNg6C9vUolVTx69ZL5ignPUw8M=
x-amz-request-id: F57E7RA1SRTDFH4A
last-modified: Thu, 05 Oct 2023 18:14:58 GMT
etag: "4ff20fa6aa65e68a21f28fefb0a2c3e9"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
x-amz-version-id: rSDmpQNuQqoVbh9JRDEaL4vADBvuwdCz
cf-cache-status: HIT
age: 1921
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 9655707f4aaa5689-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET ndax-ca-authh.webflow.io/

172.64.151.8

200 OK

4.6 kB

URL

ndax-ca-authh.webflow.io/

IP / ASN

172.64.151.8

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text, with very long lines (4639), with no line terminators

First Seen2025-07-12

Last Seen2025-07-26

Times Seen2

Size4.6 kB (4645 bytes)

MD513926a92703531cc614448577ead9814

SHA1125f2576d9a70c778e46a6fe798c79cc7d9d9a8f

SHA256745aa91ac964470ea5bdb56231a72dad5f314ab0a490348862916a98239a8319

Certificate Info

IssuerGoogle Trust Services

Subjectwebflow.io

FingerprintC7:C4:42:3C:3F:0E:EA:71:D7:EE:EB:5C:36:A3:07:27:22:62:E2:3F

ValidityFri, 06 Jun 2025 23:45:24 GMT - Fri, 05 Sep 2025 00:45:17 GMT

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET / HTTP/1.1
Host: ndax-ca-authh.webflow.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 26 Jul 2025 16:58:00 GMT
content-type: text/html
cf-ray: 965570797d7c712e-OSL
cf-cache-status: HIT
content-encoding: gzip
last-modified: Mon, 21 Jul 2025 19:31:25 GMT
content-security-policy: frame-ancestors 'self' https://*.webflow.com http://*.webflow.com http://*.webflow.io http://webflow.com https://webflow.com
surrogate-control: max-age=2147483647
surrogate-key: ndax-ca-authh.webflow.io 6630a0b5d486f9e29219fc04 pageId:6630a0b6d486f9e29219fceb
x-lambda-id: a0c43b00-1504-4db7-a47e-b014c927b8ce
vary: Accept-Encoding
set-cookie: _cfuvid=UlB9YtSanpxpgx4MO.VQWX2ZDysImxgOXfFHzpiyivA-1753549080724-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6630a0b5d486f9e29219fc04

54.230.245.223

200 OK

90 kB

URL

d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6630a0b5d486f9e29219fc04

IP / ASN

54.230.245.223

#16509 AMAZON-02

Requested byhttps://ndax-ca-authh.webflow.io/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (65451)

First Seen2023-03-07

Last Seen2025-08-02

Times Seen127527

Size90 kB (89476 bytes)

MD5dc5e7f18c8d36ac1d3d4753a87c98d0a

SHA1c8e1c8b386dc5b7a9184c763c88d19a346eb3342

SHA256f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

Certificate Info

IssuerAmazon

Subject*.cloudfront.net

Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72

ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT

HTTP Headers

GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=6630a0b5d486f9e29219fc04 HTTP/1.1
Host: d3e54v103j8qbb.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ndax-ca-authh.webflow.io
DNT: 1
Connection: keep-alive
Referer: https://ndax-ca-authh.webflow.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 20 Jul 2020 17:53:02 GMT
content-encoding: gzip
server: AmazonS3
date: Sat, 26 Jul 2025 01:17:30 GMT
cache-control: max-age=84600, must-revalidate
etag: W/"dc5e7f18c8d36ac1d3d4753a87c98d0a"
vary: accept-encoding
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
age: 83028
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Y7Xxsz7ISAhBFNDEiCva2T34zT-PmQm8VI22nSnXIJBolUX5lIHpjA==
X-Firefox-Spdy: h2

GET assets-global.website-files.com/6630a0b5d486f9e29219fc04/css/ndax-ca-authh.webflow.3df55f1a5.css

104.18.34.201

200 OK

37 kB

URL

assets-global.website-files.com/6630a0b5d486f9e29219fc04/css/ndax-ca-authh.webflow.3df55f1a5.css

IP / ASN

104.18.34.201

#13335 CLOUDFLARENET

Requested byhttps://ndax-ca-authh.webflow.io/

Resource Info

File typeUnicode text, UTF-8 text, with very long lines (2587)

First Seen2024-03-30

Last Seen2025-07-31

Times Seen216

Size37 kB (37123 bytes)

MD53df55f1a567c03bb075d3ddaf58bfee7

SHA16017672837bf39334e7e88aac9facb71e8f29a19

SHA256258b152aabd2f365b6cf355360b2a3ba0776636dfaed40e619feb14c2601cce0

Certificate Info

IssuerGoogle Trust Services

Subjectwebsite-files.com

Fingerprint4B:CF:1A:EC:BD:6C:37:7C:3A:AE:D3:D3:66:04:AE:34:06:D9:28:75

ValidityFri, 04 Jul 2025 11:08:41 GMT - Thu, 02 Oct 2025 12:08:36 GMT

HTTP Headers

GET /6630a0b5d486f9e29219fc04/css/ndax-ca-authh.webflow.3df55f1a5.css HTTP/1.1
Host: assets-global.website-files.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndax-ca-authh.webflow.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 26 Jul 2025 16:58:01 GMT
content-type: text/css
content-length: 8354
x-amz-id-2: Nr38Nl0cLFoM2PhhYObuo9Ysm3rDOIDbF4XLOBB2pzNseIh2vv5jzgo4gPayBxE3/k6w6/AoD/k=
x-amz-request-id: G7WG2DSJS4V8DTZV
last-modified: Tue, 30 Apr 2024 07:46:13 GMT
etag: "b6681714ddba6f167e4ca9cc99bc547b"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
content-encoding: gzip
x-amz-version-id: uiIETv.2L2VabELqYzTB2u6fi0SQc3Ga
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 9655707c7bdb0b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2