SafeMode - Analysis: nddax-us.webflow.io

Captura Visual

Informações de Detecção

https://nddax-us.webflow.io/

Detected Brand

Ndax

Country

International

Confiança

100%

HTTP Status

200

Report ID

e328a44b-f61…

Analyzed

2026-01-30 04:41

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T131E1D70BD62826280B9105F6BD21D7CD9246804DB693DFEC3EF8C07C73F56598675AC9
CONTENT ssdeep	192:uTPFwToWtWeyVBSAt9OA78+9iuEBWGCdvSEON1r:u7FwToWtWeyVb78YiuEBbCdvir

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	a9863b3c248fd8f2
VISUAL aHash	03036b03030b0303
VISUAL dHash	2fcbabd79793530b
VISUAL wHash	070f7b73434b8b83
VISUAL colorHash	31000400030
VISUAL cropResistant	74f474f474747473,e4f0b1b4c968b0e0,c4a2942b2bada2c2,32e594e98b896816

Análise de Código

Risk Score 73/100

Nível de Ameaça ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Ameaça: Phishing
• Alvo: Usuários da Ndax
• Método: Impersonação por meio de hospedagem gratuita.
• Exfil: Provavelmente roubo de credenciais ou roubo relacionado a criptomoedas.
• Indicadores: Hospedagem gratuita com o logotipo da marca.
• Risco: Alto

🔒 Obfuscation Detected

fromCharCode

📊 Detalhamento da Pontuação de Risco

Total Risk Score

90/100

Contributing Factors

Free Hosting with Brand

The use of free hosting (Webflow) and the presence of the Ndax logo strongly suggests a phishing attempt.

Obfuscation Detected

Obfuscation can be used to hide malicious code.

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Banking Credential Harvester

Alvo

Ndax users (International)

Método de Ataque

Brand impersonation + credential harvesting forms + obfuscated JavaScript

Canal de Exfiltração

Form submission (backend endpoint not detected - likely JavaScript-based)

Avaliação de Risco

HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
4 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand

Ndax

Official Website

https://ndax.io/

Fake Service

Ndax website

⚔️ Metodologia de Ataque

Primary Method: Credential Harvesting

The attacker likely aims to steal user credentials. The phishing site mimics the appearance of the official Ndax site to trick users into entering their login details. These credentials are then used to access the victim's account.