ndaxlogn[.]webflow[.]io
“NDAX Login | Buy Bitcoin in Canada - Canadian Crypto Exchange”
证据摘要
Analysis of ndaxlogn.webflow.io indicates active brand impersonation targeting Bitcoin users. The site resolves to IP 172.64.151.8, a Cloudflare‑hosted address located in Canada, and is served over HTTPS with a certificate issued by Google Trust Services under the WE1 designation. Infrastructure details show the domain is built on Webflow, protected by Cloudflare, and supports HTTP/3. Nameservers journey.ns.cloudflare.com and lamar.ns.cloudflare.com confirm the use of Cloudflare DNS. Registration records list MarkMonitor, Inc. as the registrar, with a creation date of May 08, 2013. VirusTotal scans have flagged the domain by 18 of 91 security vendors, and it is listed on at least one public blocklist. The page title "NDAX Login | Buy Bitcoin in Canada - Canadian Crypto Exchange" suggests the site is attempting to masquerade as a legitimate cryptocurrency exchange, aligning with the reported scam type of a fake exchange. Gridinsoft assigns a trust score of 0/100, reinforcing the malicious assessment. While the exact page content has not been examined, the convergence of high‑risk classification, multiple vendor detections, and blocklist presence warrants a defensive posture. Organizations should block the domain at the network perimeter, add it to URL filtering policies, and monitor for related indicators such as the associated IP address and Cloudflare nameservers. Continuous threat‑intel updates are recommended to capture any changes in the domain's infrastructure or detection status.
Data Coverage
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | ndaxlogn.webflow.io |
malicious | Sinkholed |
| OpenDNS | ndaxlogn.webflow.io |
phishing | Phishing Block |
| DNS4EU | ndaxlogn.webflow.io |
malicious | Sinkholed |
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月12日
技术
识别出 3 项高置信度技术
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of ndaxlogn.webflow.io · checked Jun 28, 2026
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控