Report - sso-ndax-io--ca.webflow.io/

Report Overview

Visitedpublic

2025-02-12 13:00:00

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
d3e54v103j8qbb.cloudfront.net	unknown	2008-04-25	2016-03-11	2025-02-06	533 B	90 kB	143.204.42.208
sso-ndax-io--ca.webflow.io	unknown	2013-05-08	2025-02-12	2025-02-12	495 B	4.6 kB	172.64.151.8
cdn.prod.website-files.com	unknown	2019-01-23	2023-11-01	2025-02-05	2.5 kB	995 kB	104.18.161.117

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-02-11	medium	sso-ndax-io--ca.webflow.io/	Crypto/Wallet

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	sso-ndax-io--ca.webflow.io/	ScriptElement	0 B	0001-01-01	2025-08-02
URL sso-ndax-io--ca.webflow.io/ IP / ASN 172.64.151.8 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 0001-01-01 Last Seen 2025-08-02 Times Seen 5607121 Size 0 B (0 bytes) MD5 d41d8cd98f00b204e9800998ecf8427e SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Format Code Loading...

	d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6686a40e08f97f944e31bb53	ScriptElement	90 kB	2023-03-07	2025-08-02
URL d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6686a40e08f97f944e31bb53 IP / ASN 143.204.42.208 #16509 AMAZON-02 Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 127525 Size 90 kB (89476 bytes) MD5 dc5e7f18c8d36ac1d3d4753a87c98d0a SHA1 c8e1c8b386dc5b7a9184c763c88d19a346eb3342 SHA256 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Format Code Loading...

	cdn.prod.website-files.com/6686a40e08f97f944e31bb53/js/webflow.4e8135d87.js	ScriptElement	37 kB	2024-02-23	2025-08-02
URL cdn.prod.website-files.com/6686a40e08f97f944e31bb53/js/webflow.4e8135d87.js IP / ASN 104.18.161.117 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded false Resource Info First Seen 2024-02-23 Last Seen 2025-08-02 Times Seen 6527 Size 37 kB (37354 bytes) MD5 4e8135d87e56ebf7d55500945d58c45a SHA1 c6ee3344d1a7d669e00e275878cdad970df4eb60 SHA256 18a0ed9cf15cb5ad3cb33184b71da4589141d9361580881ab2a1a4c16390240d Format Code Loading...

HTTP Transactions (7)

URL IP Response Size

GET cdn.prod.website-files.com/6686a40e08f97f944e31bb53/css/sso-ndax-io--ca.webflow.5b880d6d8.css

104.18.161.117

200 OK

8.4 kB

URL

cdn.prod.website-files.com/6686a40e08f97f944e31bb53/css/sso-ndax-io--ca.webflow.5b880d6d8.css

IP / ASN

104.18.161.117

#13335 CLOUDFLARENET

Requested byhttps://sso-ndax-io--ca.webflow.io/

Resource Info

File typeUnicode text, UTF-8 text, with very long lines (2587)

First Seen2024-06-01

Last Seen2025-07-31

Times Seen282

Size8.4 kB (8397 bytes)

MD55b880d6d84a14fc467790faa92f5e4df

SHA13c998e4c7394ab64042d3e2ac87bd4eb7cfa1910

SHA2560cee371da6a0b01bf9e7afefda90952864a5f3431023a92cda393fb201b5b87b

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

Fingerprint4E:26:E7:2F:B8:42:E1:56:09:EC:86:19:87:15:80:CC:34:35:77:28

ValidityThu, 19 Dec 2024 06:35:49 GMT - Wed, 19 Mar 2025 07:35:38 GMT

HTTP Headers

GET /6686a40e08f97f944e31bb53/css/sso-ndax-io--ca.webflow.5b880d6d8.css HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sso-ndax-io--ca.webflow.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 12 Feb 2025 12:59:29 GMT
content-type: text/css
content-length: 8397
x-amz-id-2: UfovXZoV5IFpSQDXuX6w/JJP0Qr7l7KOGMhlJyJzgzvCS7+NGJqiX1pe9GNLzhWQEk+gj+OZ2b0=
x-amz-request-id: W9T1P8VQY809MBYA
last-modified: Thu, 04 Jul 2024 13:35:26 GMT
etag: "9993dfd90906c5470e060083f7c109c0"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
x-amz-version-id: 55W3vdvriMBA2QTH.xMkNthpEAm7gnLu
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 910cc1962abf56ae-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET cdn.prod.website-files.com/6686a40e08f97f944e31bb53/js/webflow.4e8135d87.js

104.18.161.117

200 OK

14 kB

URL

cdn.prod.website-files.com/6686a40e08f97f944e31bb53/js/webflow.4e8135d87.js

IP / ASN

104.18.161.117

#13335 CLOUDFLARENET

Requested byhttps://sso-ndax-io--ca.webflow.io/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (21513)

First Seen2024-02-23

Last Seen2025-08-02

Times Seen6527

Size14 kB (13715 bytes)

MD54e8135d87e56ebf7d55500945d58c45a

SHA1c6ee3344d1a7d669e00e275878cdad970df4eb60

SHA25618a0ed9cf15cb5ad3cb33184b71da4589141d9361580881ab2a1a4c16390240d

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

Fingerprint4E:26:E7:2F:B8:42:E1:56:09:EC:86:19:87:15:80:CC:34:35:77:28

ValidityThu, 19 Dec 2024 06:35:49 GMT - Wed, 19 Mar 2025 07:35:38 GMT

HTTP Headers

GET /6686a40e08f97f944e31bb53/js/webflow.4e8135d87.js HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sso-ndax-io--ca.webflow.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 12 Feb 2025 12:59:29 GMT
content-type: text/javascript
content-length: 13715
x-amz-id-2: Kwesped3yf+BoEIzsVyIBWhB9dR+GjHclbw+uK9y7FDwCXkzmi9kyRiuQcXm1pbcfGfeziBA/fI=
x-amz-request-id: FM90GD5PQDYXWB0A
last-modified: Thu, 04 Jul 2024 13:35:26 GMT
etag: "48bd2b847a93ac70ad46484a35db1786"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
x-amz-version-id: eWfcEGJPU1aHJTfjleShpV0NVEh30Gux
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 910cc1963ad656ae-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET cdn.prod.website-files.com/6686a40e08f97f944e31bb53/6686a4c41f039dca2ca79a06_pic.gif-p-1600.png

104.18.161.117

200 OK

952 kB

URL

cdn.prod.website-files.com/6686a40e08f97f944e31bb53/6686a4c41f039dca2ca79a06_pic.gif-p-1600.png

IP / ASN

104.18.161.117

#13335 CLOUDFLARENET

Requested byhttps://sso-ndax-io--ca.webflow.io/

Resource Info

File typePNG image data, 1600 x 6330, 8-bit colormap, non-interlaced

First Seen2025-01-04

Last Seen2025-07-26

Times Seen64

Size952 kB (952260 bytes)

MD5bc05957850f1b26ecfe4189613af89ac

SHA1dd47e3c83518519f0cde7ccab6bbf98b0976e968

SHA256d8ada3b12747c14da0f13352ed34ed4720b5e4df52315e8b589fe56622eaac26

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

Fingerprint4E:26:E7:2F:B8:42:E1:56:09:EC:86:19:87:15:80:CC:34:35:77:28

ValidityThu, 19 Dec 2024 06:35:49 GMT - Wed, 19 Mar 2025 07:35:38 GMT

HTTP Headers

GET /6686a40e08f97f944e31bb53/6686a4c41f039dca2ca79a06_pic.gif-p-1600.png HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sso-ndax-io--ca.webflow.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 12 Feb 2025 12:59:29 GMT
content-type: image/png
content-length: 952260
x-amz-id-2: ErL25sSCicVsXwLvBbbqRCDku9c2zUTOGg2ui1eIJlFNjN+pDoGTTMInMfGMkXP1Ni151bLWqCeJUps5+KxOHJNXNahwDCstKt9I471yLdk=
x-amz-request-id: X5MT4RCVWF7JJB43
last-modified: Thu, 04 Jul 2024 13:34:29 GMT
etag: "bc05957850f1b26ecfe4189613af89ac"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: FzimoRZ5V2Y7M5a8RdyNsqZxHzkw6d2r
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 910cc1974bdc56b7-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET cdn.prod.website-files.com/img/webclip.png

104.18.161.117

200 OK

4.8 kB

URL

cdn.prod.website-files.com/img/webclip.png

IP / ASN

104.18.161.117

#13335 CLOUDFLARENET

Requested byhttps://sso-ndax-io--ca.webflow.io/

Resource Info

File typePNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced

First Seen2023-10-07

Last Seen2025-08-02

Times Seen18951

Size4.8 kB (4807 bytes)

MD54ff20fa6aa65e68a21f28fefb0a2c3e9

SHA18f20cc5b884b7c2642558d11d7cf79e416ea4a7f

SHA256c305e6b8ea9916705eec8eb8c281561d907fdaa0c84f3dbe7b65dac9e2ddf993

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

Fingerprint4E:26:E7:2F:B8:42:E1:56:09:EC:86:19:87:15:80:CC:34:35:77:28

ValidityThu, 19 Dec 2024 06:35:49 GMT - Wed, 19 Mar 2025 07:35:38 GMT

HTTP Headers

GET /img/webclip.png HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sso-ndax-io--ca.webflow.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 12 Feb 2025 12:59:29 GMT
content-type: image/png
content-length: 4807
x-amz-id-2: UauECrsu/Fwm4nD4r3ZKXWqmm1J4/c7h6btEK6rkEwAfG1p2UvSLgdP73veAbBN9rBn9zeJ3HkE=
x-amz-request-id: ZMYAR45QQFKPAWR8
last-modified: Thu, 05 Oct 2023 18:14:58 GMT
etag: "4ff20fa6aa65e68a21f28fefb0a2c3e9"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
x-amz-version-id: rSDmpQNuQqoVbh9JRDEaL4vADBvuwdCz
cf-cache-status: HIT
age: 37092
accept-ranges: bytes
priority: u=6,i=?0
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 910cc1981ca356b7-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET cdn.prod.website-files.com/img/favicon.ico

104.18.161.117

200 OK

12 kB

URL

cdn.prod.website-files.com/img/favicon.ico

IP / ASN

104.18.161.117

#13335 CLOUDFLARENET

Requested byhttps://sso-ndax-io--ca.webflow.io/

Resource Info

File typeMS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel

First Seen2023-10-06

Last Seen2025-07-15

Times Seen2146

Size12 kB (12528 bytes)

MD51f894f487d068a2ced95d5cd4f88598c

SHA1743a2c39f538650d53664d19ab5079cfc9ba55d2

SHA2564239819d399860eb27d8a73417f9bd108d45d11676f68b5edaae328ec197d55e

Certificate Info

IssuerGoogle Trust Services

Subjectprod.website-files.com

Fingerprint4E:26:E7:2F:B8:42:E1:56:09:EC:86:19:87:15:80:CC:34:35:77:28

ValidityThu, 19 Dec 2024 06:35:49 GMT - Wed, 19 Mar 2025 07:35:38 GMT

HTTP Headers

GET /img/favicon.ico HTTP/1.1
Host: cdn.prod.website-files.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sso-ndax-io--ca.webflow.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 12 Feb 2025 12:59:29 GMT
content-type: image/x-icon
x-amz-id-2: QRs3q+dhKhAMTlvzYZ9HsOXkYLhQn66tiVr3vbhVW/V2FbAxceQ9QjMXwPqcyzjtLgD1BjyzKEE=
x-amz-request-id: BSTN61CAHM9SMTMC
last-modified: Thu, 05 Oct 2023 23:38:20 GMT
etag: W/"1f894f487d068a2ced95d5cd4f88598c"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
x-amz-version-id: C5TuT6ObkzP1GjuEGkIHJatwDHqj5J6N
cf-cache-status: HIT
age: 56631
priority: u=6,i=?0
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 910cc1981ca456b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6686a40e08f97f944e31bb53

143.204.42.208

200 OK

90 kB

URL

d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6686a40e08f97f944e31bb53

IP / ASN

143.204.42.208

#16509 AMAZON-02

Requested byhttps://sso-ndax-io--ca.webflow.io/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (65451)

First Seen2023-03-07

Last Seen2025-08-02

Times Seen127525

Size90 kB (89476 bytes)

MD5dc5e7f18c8d36ac1d3d4753a87c98d0a

SHA1c8e1c8b386dc5b7a9184c763c88d19a346eb3342

SHA256f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

Certificate Info

IssuerAmazon

Subject*.cloudfront.net

Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62

ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT

HTTP Headers

GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=6686a40e08f97f944e31bb53 HTTP/1.1
Host: d3e54v103j8qbb.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sso-ndax-io--ca.webflow.io
DNT: 1
Connection: keep-alive
Referer: https://sso-ndax-io--ca.webflow.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 20 Jul 2020 17:53:02 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 12 Feb 2025 06:37:00 GMT
cache-control: max-age=84600, must-revalidate
etag: W/"dc5e7f18c8d36ac1d3d4753a87c98d0a"
vary: accept-encoding
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
age: 22950
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Z8WG-LX8jQ9yrHj5Yyt59C2Wa_c18gJikI7WcOTDKZuriJvXHucI0A==
X-Firefox-Spdy: h2

GET sso-ndax-io--ca.webflow.io/

172.64.151.8

200 OK

3.8 kB

URL

sso-ndax-io--ca.webflow.io/

IP / ASN

172.64.151.8

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text, with very long lines (3846), with no line terminators

First Seen2025-02-12

Last Seen2025-02-12

Times Seen1

Size3.8 kB (3786 bytes)

MD50cac138cf81ee6a8557a00e6e40c2f89

SHA176d914dadacca11b98c734d8114419f7be822033

SHA256087e0a843ec98ec60b67a4dae7fbeb596745d91fd31699895a58e00393e07df0

Certificate Info

IssuerGoogle Trust Services

Subjectwebflow.io

Fingerprint86:06:E4:18:95:FF:C1:8E:A5:0A:27:92:EF:4A:9E:6E:BA:A5:C5:EB

ValiditySat, 08 Feb 2025 22:25:54 GMT - Fri, 09 May 2025 23:25:51 GMT

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET / HTTP/1.1
Host: sso-ndax-io--ca.webflow.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 12 Feb 2025 12:59:29 GMT
content-type: text/html
cf-ray: 910cc192ce2a5694-OSL
cf-cache-status: HIT
age: 16485
content-encoding: gzip
last-modified: Mon, 10 Feb 2025 07:38:07 GMT
content-security-policy: frame-ancestors 'self' https://*.webflow.com http://*.webflow.com http://*.webflow.io http://webflow.com https://webflow.com
surrogate-control: max-age=2147483647
surrogate-key: sso-ndax-io--ca.webflow.io 6686a40e08f97f944e31bb53 pageId:6686a40e08f97f944e31bb59
x-lambda-id: be5380b8-0acb-4a66-b8ca-a695049e2894
vary: Accept-Encoding
set-cookie: _cfuvid=j3OLeiaY5p4K_HRjyVpqd_ooB5SoLPB9GqW9vfFYde4-1739365169207-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2