dydx-v2[.]ink

The domain dydx-v2.ink is flagged as an offline crypto‑scam site that impersonates the dYdX brand. Registration records show the domain was created on February 23, 2026 and is currently resolved to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The authoritative name servers are salvador.ns.cloudflare.com and nicole.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. An SSL certificate with an E7 rating secures the site, but the low grade indicates weak cryptographic practices.

The page title returned by the server is "Portfolio · dYdX," directly referencing the target brand and reinforcing the impersonation claim. Independent security services have listed the domain on three blocklists, and it is actively blocked by PhishDestroy, MetaMask, and SEAL, suggesting that multiple anti‑phishing tools have identified it as malicious. VirusTotal scans report three of ninety‑three security vendors flagging the domain, providing additional corroboration of its malicious nature. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the high risk assessment.

While the site is offline, the existing infrastructure—Cloudflare hosting, low‑trust SSL, brand‑specific page title, and inclusion on multiple blocklists—demonstrates a deliberate attempt to lure dYdX users. Defenders should continue to block the domain at network and endpoint layers, monitor DNS queries for the associated Cloudflare name servers, and incorporate the domain’s indicators into threat‑intel feeds. Ongoing vigilance is advised to detect any re‑hosting or resurrection attempts, especially given the low trust score and the brand‑targeted page title that could be repurposed in future campaigns.