dydx-exchnge-docs[.]typedream[.]app

PhishDestroy has identified dydx-exchnge-docs.typedream.app as an active brand impersonation threat, specifically targeting users of the dYdX cryptocurrency platform. This domain is designed to deceive victims into believing they are accessing legitimate dYdX documentation or trading interfaces, potentially aiming to steal login credentials, API keys, or seed phrases. The threat is classified as high risk, and no specific drainer kit has been publicly associated with this domain at this time.

Technical indicators paint a clear picture of malicious intent. VirusTotal flags this domain with a score of 13 out of 95 security vendors, indicating broad consensus on its malicious nature. The domain was registered through Cloudflare, Inc. and resolves to IP address 188.114.96.3, which is within Cloudflare's infrastructure. Google Safe Browsing has specifically flagged the domain for phishing, and it appears on at least one security blocklist. The SSL certificate is issued by Google Trust Services (WE1), which is standard for many legitimate sites but does not indicate trustworthiness when combined with other red flags.

As of this report, the phishing domain remains active and operational. PhishDestroy recommends immediate blocking at the network and email gateway levels. Users who have interacted with this domain should change any credentials entered and enable two-factor authentication on their dYdX accounts. While the hosting provider and registrar have been notified, the domain's continued operation highlights the importance of user vigilance against typosquatting and lookalike domains. Always verify URLs carefully before entering sensitive information.