Report - sso--ndax--opp---authd.webflow.io/

Report Overview

Visitedpublic

2025-07-22 15:13:56

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
app-assets.website-files.com	unknown	2019-01-23	2025-05-20	2025-07-16	2.1 kB	72 kB	172.64.153.55
sso--ndax--opp---authd.webflow.io	unknown	2013-05-08	2025-06-17	2025-07-21	896 B	3.2 kB	104.18.36.248

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-07-21	medium	sso--ndax--opp---authd.webflow.io/	Crypto/Wallet

PhishTank

Scan Date	Severity	Indicator	Alert
2025-07-21	medium	sso--ndax--opp---authd.webflow.io/	Other

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

URL IP Response Size

GET app-assets.website-files.com/fonts/Graphik-Regular-Web.5a0c1a002e.woff2

172.64.153.55

200 OK

31 kB

URL

app-assets.website-files.com/fonts/Graphik-Regular-Web.5a0c1a002e.woff2

IP / ASN

172.64.153.55

#13335 CLOUDFLARENET

Requested byhttp://sso--ndax--opp---authd.webflow.io/

Resource Info

File typeWeb Open Font Format (Version 2), TrueType, length 30885, version 1.0

First Seen2023-04-05

Last Seen2025-08-01

Times Seen2963

Size31 kB (30885 bytes)

MD55a0c1a002e8a14bedb37e60ee72642ac

SHA1b5df1451ce0d9aace0d7337abb26d10cd7999333

SHA256ccde0cf7ce5d0767eba8aabd07f8537f24e5097cfb5e1f08e1685926efcfbe84

Certificate Info

IssuerGoogle Trust Services

Subjectwebsite-files.com

Fingerprint4B:CF:1A:EC:BD:6C:37:7C:3A:AE:D3:D3:66:04:AE:34:06:D9:28:75

ValidityFri, 04 Jul 2025 11:08:41 GMT - Thu, 02 Oct 2025 12:08:36 GMT

HTTP Headers

GET /fonts/Graphik-Regular-Web.5a0c1a002e.woff2 HTTP/1.1
Host: app-assets.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://sso--ndax--opp---authd.webflow.io
DNT: 1
Connection: keep-alive
Referer: https://app-assets.website-files.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 22 Jul 2025 15:13:36 GMT
content-type: application/octet-stream
content-length: 30885
x-amz-id-2: UT5j4M9xqnAmtqnkug0eBSSWqUYt0TN+5EnGtEVoDhMYlpGR89gmAfP59qQxduSh72AKwarLg9A=
x-amz-request-id: 1SRWPZPB267E8BPP
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 05 Jun 2019 19:45:00 GMT
etag: "5a0c1a002e8a14bedb37e60ee72642ac"
cache-control: max-age=84600, must-revalidate
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
access-control-allow-origin: *
server: cloudflare
cf-ray: 9633e20cb925b4f7-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET sso--ndax--opp---authd.webflow.io/

104.18.36.248

404 Not Found

906 B

URL

sso--ndax--opp---authd.webflow.io/

IP / ASN

104.18.36.248

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text

First Seen2025-05-21

Last Seen2025-08-01

Times Seen422

Size906 B (906 bytes)

MD5e200b4189637c2d90bbfcefdd0442c39

SHA1c06949f59481eae7bdd42a73910fabfd7a6a02b9

SHA25690c032f35272ba1a7aa93027ab635e6610d4f24cf9e53c0624d00f065d7c7e7d

Certificate Info

IssuerGoogle Trust Services

Subjectwebflow.io

FingerprintC7:C4:42:3C:3F:0E:EA:71:D7:EE:EB:5C:36:A3:07:27:22:62:E2:3F

ValidityFri, 06 Jun 2025 23:45:24 GMT - Fri, 05 Sep 2025 00:45:17 GMT

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet
PhishTank	phishing	Other

HTTP Headers

GET / HTTP/1.1
Host: sso--ndax--opp---authd.webflow.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Tue, 22 Jul 2025 15:13:35 GMT
content-type: text/html
cf-ray: 9633e204bd165697-OSL
cf-cache-status: MISS
cache-control: public, max-age=432000
content-encoding: gzip
etag: W/"687e7554-38a"
content-security-policy: frame-ancestors 'self' https://*.webflow.com http://*.webflow.com http://*.webflow.io http://webflow.com https://webflow.com
surrogate-key: sso--ndax--opp---authd.webflow.io 404req
vary: Accept-Encoding
set-cookie: _cfuvid=lYDjRPe0v97vx77p5EuOOhBQzTsqgsj6HNqt6cjcpN4-1753197215785-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET sso--ndax--opp---authd.webflow.io/

104.18.36.248

404 Not Found

906 B

URL

sso--ndax--opp---authd.webflow.io/

IP / ASN

104.18.36.248

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text

First Seen2025-05-21

Last Seen2025-08-01

Times Seen422

Size906 B (906 bytes)

MD5e200b4189637c2d90bbfcefdd0442c39

SHA1c06949f59481eae7bdd42a73910fabfd7a6a02b9

SHA25690c032f35272ba1a7aa93027ab635e6610d4f24cf9e53c0624d00f065d7c7e7d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet
PhishTank	phishing	Other

HTTP Headers

GET / HTTP/1.1
Host: sso--ndax--opp---authd.webflow.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Tue, 22 Jul 2025 15:13:36 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
CF-Ray: 9633e2078b2156bf-OSL
CF-Cache-Status: HIT
Cache-Control: public, max-age=432000
Content-Encoding: gzip
ETag: W/"687e7554-38a"
content-security-policy: frame-ancestors 'self' https://*.webflow.com http://*.webflow.com http://*.webflow.io http://webflow.com https://webflow.com
surrogate-key: sso--ndax--opp---authd.webflow.io 404req
vary: Accept-Encoding
Set-Cookie: _cfuvid=SoWsMycupFg6v.mKEwTn4pt2dGKVBOUkiP9e97_g_u4-1753197216272-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly
alt-svc: h3=":443"; ma=86400

GET app-assets.website-files.com/css/webflow-https-errors.webflow.css

172.64.153.55

200 OK

4.2 kB

URL

app-assets.website-files.com/css/webflow-https-errors.webflow.css

IP / ASN

172.64.153.55

#13335 CLOUDFLARENET

Requested byhttp://sso--ndax--opp---authd.webflow.io/

Resource Info

File typeassembler source, ASCII text

First Seen2023-05-13

Last Seen2025-08-01

Times Seen1781

Size4.2 kB (4176 bytes)

MD5c2bf6463065522e597390eedb7a3f2f7

SHA1cfff83e977bea349743935e1b17bb753aca11825

SHA256a2693a37cde8116fd113092e8f1d9794f1d2ebd336958c9385255b4b65bedbbf

Certificate Info

IssuerGoogle Trust Services

Subjectwebsite-files.com

Fingerprint4B:CF:1A:EC:BD:6C:37:7C:3A:AE:D3:D3:66:04:AE:34:06:D9:28:75

ValidityFri, 04 Jul 2025 11:08:41 GMT - Thu, 02 Oct 2025 12:08:36 GMT

HTTP Headers

GET /css/webflow-https-errors.webflow.css HTTP/1.1
Host: app-assets.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://sso--ndax--opp---authd.webflow.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 22 Jul 2025 15:13:36 GMT
content-type: text/css
x-amz-id-2: QYrttiAAD52LR6Qfcj6epdUBIZc1KM+ELTVBd647r4bU297czGXzL8+TaoIsxO2rPiUebZ0M6AfWPKd4YDzqjY6nNFimyhljby47To2kg/k=
x-amz-request-id: 4BSYD1EFQF0ZKPMH
last-modified: Mon, 05 Jul 2021 14:41:25 GMT
etag: W/"c2bf6463065522e597390eedb7a3f2f7"
x-amz-server-side-encryption: AES256
cache-control: max-age=14400
cf-cache-status: HIT
age: 2706
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 9633e20b2bb9568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET app-assets.website-files.com/static/favicon_designer.88fce7c7f8.png

172.64.153.55

200 OK

688 B

URL

app-assets.website-files.com/static/favicon_designer.88fce7c7f8.png

IP / ASN

172.64.153.55

#13335 CLOUDFLARENET

Requested byhttp://sso--ndax--opp---authd.webflow.io/

Resource Info

File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced

First Seen2024-05-13

Last Seen2025-08-01

Times Seen2673

Size688 B (688 bytes)

MD588fce7c7f8d3a7e53fda27ceadac4d12

SHA1a8b310f9a40e2d0cceb5ee20e37a3657eeaeabf2

SHA256e3e8d727e818ce2b05175ae721a17651ab71696bc10969319f87b6798d73e87a

Certificate Info

IssuerGoogle Trust Services

Subjectwebsite-files.com

Fingerprint4B:CF:1A:EC:BD:6C:37:7C:3A:AE:D3:D3:66:04:AE:34:06:D9:28:75

ValidityFri, 04 Jul 2025 11:08:41 GMT - Thu, 02 Oct 2025 12:08:36 GMT

HTTP Headers

GET /static/favicon_designer.88fce7c7f8.png HTTP/1.1
Host: app-assets.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://sso--ndax--opp---authd.webflow.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 22 Jul 2025 15:13:36 GMT
content-type: image/png
content-length: 688
x-amz-id-2: 7mhDVC0DJlO98fLIUDT6+9gffZJ7LcK+uRXUUsMHxxwo6v/aOy62D9vAJSY01MJ+5mdTqiu3WPQ=
x-amz-request-id: WPQJKEDWPA5F0PK0
last-modified: Mon, 18 Sep 2023 19:52:28 GMT
etag: "88fce7c7f8d3a7e53fda27ceadac4d12"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
cf-cache-status: HIT
age: 67812
accept-ranges: bytes
priority: u=6,i=?0
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 9633e20c4866b4f7-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET app-assets.website-files.com/fonts/Graphik-Medium-Web.abf6e1188f.woff2

172.64.153.55

200 OK

34 kB

URL

app-assets.website-files.com/fonts/Graphik-Medium-Web.abf6e1188f.woff2

IP / ASN

172.64.153.55

#13335 CLOUDFLARENET

Requested byhttp://sso--ndax--opp---authd.webflow.io/

Resource Info

File typeWeb Open Font Format (Version 2), TrueType, length 34041, version 1.0

First Seen2023-04-05

Last Seen2025-08-01

Times Seen2962

Size34 kB (34041 bytes)

MD5abf6e1188f57f609d6987ca7aa1f54b7

SHA1b226e5b656caf3ce6ed5d9ad277850ea7ca27d05

SHA25640bb52d988186022d07c0248e9b6af63a1dde146b157797463ba7b5dada4ac53

Certificate Info

IssuerGoogle Trust Services

Subjectwebsite-files.com

Fingerprint4B:CF:1A:EC:BD:6C:37:7C:3A:AE:D3:D3:66:04:AE:34:06:D9:28:75

ValidityFri, 04 Jul 2025 11:08:41 GMT - Thu, 02 Oct 2025 12:08:36 GMT

HTTP Headers

GET /fonts/Graphik-Medium-Web.abf6e1188f.woff2 HTTP/1.1
Host: app-assets.website-files.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://sso--ndax--opp---authd.webflow.io
DNT: 1
Connection: keep-alive
Referer: https://app-assets.website-files.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 22 Jul 2025 15:13:36 GMT
content-type: application/octet-stream
content-length: 34041
x-amz-id-2: 5NhSPMnHTCqYo9k1UOovWz5m6MOmtKD+OS2uZ26EH/VKxxmyNRbCWe1SGbiq4zVNUmm2Qz2h9QI=
x-amz-request-id: 1SRXGV3TMYG5C4NB
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 05 Jun 2019 19:43:00 GMT
etag: "abf6e1188f57f609d6987ca7aa1f54b7"
cache-control: max-age=84600, must-revalidate
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
access-control-allow-origin: *
server: cloudflare
cf-ray: 9633e20cb919b4f7-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri