app-en-ndaxe[.]pages[.]dev

This domain, app-en-ndaxe.pages.dev, is flagged as an active phishing site targeting users of a cryptocurrency exchange. Registered on June 13, 2026, through Cloudflare Pages, it resolves to IP 172.66.44.158, hosted on Cloudflare infrastructure in Canada. The page title, 'Ndax Login® | Secure Crypto Wallet & Digital Asset Exchange,' explicitly mimics a legitimate exchange, aligning with the classified scam type of a fake exchange. Analysis indicates the domain is currently active, returning an HTTP 200 status, and employs HSTS and HTTP/3 technologies, likely to appear legitimate to users and automated security tools. Security vendor data shows the domain is listed on one blocklist and flagged by 2 of 91 vendors on VirusTotal, though the specific detection rules are not disclosed. The domain's trust score is 0/100, reinforcing its high-risk classification. No known phishing kit or additional infrastructure details are available at this time. Defenders should treat this domain as malicious and prioritize blocking it at the DNS or network layer. Given its recent registration and active status, monitoring for related domains or IP reuse is recommended. The SSL certificate, issued by Google Trust Services, does not provide additional indicators of compromise beyond standard Cloudflare deployment practices.