homepage-ndaxcdn[.]wixstudio[.]com

This domain, homepage-ndaxcdn.wixstudio.com, is flagged as an active phishing site targeting NDAX infrastructure. Registered on June 8, 2026, through Wix Studio, it remains operational as of July 29, 2026. Analysis indicates the domain appears on one security blocklist, and 12 of 91 security vendors on VirusTotal have detected it as malicious. The specific phishing kit or payload delivery mechanism is not yet confirmed, but the domain structure suggests an attempt to mimic legitimate NDAX CDN endpoints, potentially for credential harvesting or malware distribution.

Defenders should note that the domain is hosted on Wix Studio infrastructure, which may complicate takedown efforts due to shared hosting environments. No additional details regarding SSL certificates, HTTP response codes, or autonomous system numbers (ASNs) are available at this time. The page title and exact content have not been analyzed, so the precise lure or deception method remains uncertain.

Given the elevated risk level and active status, immediate blocking at the DNS or proxy level is recommended. Security teams should monitor for connections to this domain in network logs and investigate any associated endpoints for signs of compromise. If internal users have interacted with this domain, credentials or session tokens should be invalidated and rotated as a precaution.