dydx[.]airdropalerts[.]bond

The domain dydx.airdropalerts.bond has been identified as a high-risk phishing site engaging in brand impersonation. Specifically, this domain attempts to impersonate the cryptocurrency trading platform dYdX. The threat classification indicates a concerted effort to deceive users by utilizing a domain name closely resembling the legitimate brand with an objective to steal sensitive information or credentials.

On a technical level, several indicators highlight the malicious nature of this domain. The VirusTotal analysis reports that 11 out of 95 security vendors have flagged this domain as suspicious. The domain is registered through Dynadot LLC and resolves to the IP address 192.178.155.99, which is located in the United States under AS15169 associated with a large tech company's infrastructure. The domain was created on October 14, 2025, which may suggest an intent for fraudulent activities immediately following its registration. Furthermore, Google Safe Browsing has flagged this domain for phishing, and it appears on one security blocklist, further confirming the malicious intent.

Currently, dydx.airdropalerts.bond is offline, following actions taken by cybersecurity entities, including a block by PhishDestroy. Despite the domain being taken offline, the initial setup and indicators of phishing activity suggest a potential for similar fraudulent activities in different guises. Users are advised to remain vigilant against similar domain structures and verify any communication or request that appears to originate from the dYdX brand. Continuous monitoring of domain registrations can help preemptively identify emerging threats associated with brand impersonation campaigns.