nndaxlogi-canada[.]webflow[.]io

This domain is a phishing site designed to impersonate the legitimate NDAX cryptocurrency exchange login page. Analysis indicates it presents a fraudulent interface mimicking the official NDAX platform, specifically targeting Canadian users with the page title 'NDAX® | Login: Canada’s Most Secure Crypto Exchange.' The site aims to harvest login credentials, enabling attackers to gain unauthorized access to victims' crypto wallets and financial accounts. The threat is particularly dangerous for users who may mistake it for the authentic NDAX platform due to its convincing visual design and targeted branding. Infrastructure analysis reveals the domain was registered through Webflow and resolves to the IP address 104.18.36.248, associated with Cloudflare, Inc. in Canada. The SSL certificate is issued by Google Trust Services (WE1), a common tactic to appear legitimate. As of the latest scan, 18 out of 95 security vendors on VirusTotal have flagged this domain as malicious, confirming its phishing nature. The domain appears on one security blocklist and has been taken offline, though similar threats may re-emerge under different addresses. If you visited nndaxlogi-canada.webflow.io or entered credentials on the site, immediate action is required. First, revoke access to any connected crypto wallets or exchange accounts and change passwords using a secure device. Enable multi-factor authentication (MFA) on all financial and crypto-related accounts to prevent unauthorized access. Monitor accounts for suspicious transactions and report any unauthorized activity to the legitimate platform. Users should also scan their devices for malware, as phishing sites may deploy additional payloads. Avoid clicking on links from unsolicited emails or messages, and verify domain authenticity before entering sensitive information.