trade-ndaxcdn[.]wixstudio[.]com

Analysis of trade-ndaxcdn.wixstudio.com as of July 29, 2026, confirms its classification as an active cryptocurrency phishing domain. The domain, registered through Wix Studio on December 17, 2016, is hosted on infrastructure associated with the Wix platform, a common vector for phishing campaigns due to its accessibility and ease of deployment. Thirteen of ninety-one security vendors on VirusTotal have flagged this domain, indicating a consensus among multiple detection engines regarding its malicious nature. Additionally, the domain appears on at least one security blocklist, further corroborating its status as a threat.

Infrastructure analysis reveals no anomalous registration patterns, as the domain age aligns with typical long-term phishing operations. However, the use of Wix Studio for hosting is notable, as threat actors frequently exploit legitimate website builders to lend credibility to phishing pages. The exact content of the site remains unconfirmed, though the presence of 'ndax' in the subdomain suggests a likely targeting of users associated with cryptocurrency platforms, potentially mimicking login portals or wallet services. Defenders are advised to block this domain at the network level, particularly in environments where cryptocurrency-related activity occurs.

Security teams should monitor for connections to trade-ndaxcdn.wixstudio.com and investigate any associated endpoints for signs of compromise. Given the domain's active status and detection by multiple vendors, organizations are encouraged to treat this as a high-priority threat and update their blocklists accordingly. No additional brand-specific indicators or phishing kit details are currently available, limiting further attribution beyond its generic classification as a cryptocurrency phishing site.