sso-ca-ndax-io-com-auth.webflow.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of sso-ca-ndax-io-com-auth.webflow.io
This domain appears to host a Webflow-built page presenting itself as an NDAX login or promotional landing page for a Canadian cryptocurrency exchange. The page title and meta description reference account access, portfolio management, and crypto trading, while the screenshot shows NDAX branding, market tickers, and navigation elements commonly associated with a digital-asset trading platform.
Based on the domain structure, however, this is not the primary ndax.io domain but a subdomain under webflow.io that incorporates the NDAX name and login-related wording. That setup may indicate a third-party landing page, a temporary marketing page, or a page attempting to resemble the official NDAX service. The visible content suggests the site is aimed at users interested in cryptocurrency trading or account access rather than general informational content.
Safety Assessment for sso-ca-ndax-io-com-auth.webflow.io
Several security signals raise concern for this page at the time of this scan. The URL was flagged by 14 out of 91 security engines, with the detections broadly classifying it as phishing or malicious. In addition, the domain name closely resembles NDAX branding while being hosted on a webflow.io subdomain rather than the apparent official ndax.io domain, which may indicate a look-alike page intended to capture user trust.
At the same time, the malware scan did not identify flagged files, and major content-focused threat databases listed in the scan were clean at the time of review. One weaker secondary signal was also present: the domain's IP address was listed on one mail-reputation blocklist, which may reflect email or shared-host reputation rather than website content. Even so, the combination of multi-engine phishing detections, login-themed branding, and the mismatch between the displayed brand and the actual host domain materially increases risk.
Based on these findings, this website may pose potential risks to visitors, particularly if it requests credentials, wallet details, or other sensitive information.
Technical Description
The site uses a valid SSL certificate issued by Google Trust Services, with traffic routed through Cloudflare infrastructure and a Cloudflare-hosted IP address in Toronto, Canada. The nameservers also point to Cloudflare, and the page loads static assets from Webflow-related content delivery domains. SSL presence indicates encrypted transport, but it should not be treated as proof of legitimacy.
WHOIS data indicates the underlying webflow.io domain is longstanding, but that age does not necessarily validate this specific subpage or subdomain usage. DNSSEC appears to be unsigned. No malicious files were flagged in the page-level malware scan, but the hosting arrangement and brand-mimicking subdomain pattern remain notable concerns from a phishing-analysis perspective.
Share your experience with this website. Was it safe? Did you encounter any issues?