homepage-dydx-io[.]wixstudio[.]com

Analysis indicates that the domain homepage-dydx-io.wixstudio.com is actively engaged in a phishing campaign targeting users of the dYdX cryptocurrency exchange platform. The domain was registered on June 8, 2026, through Wix Studio, a legitimate website builder service frequently exploited for hosting phishing content due to its ease of deployment and subdomain flexibility. As of July 29, 2026, the domain appears on a single security blocklist, specifically PhishDestroy, which categorizes it as a phishing threat. VirusTotal scans reveal that 12 out of 91 security vendors flag this domain as malicious, providing further evidence of its involvement in fraudulent activity.

Infrastructure analysis reveals that the domain is hosted on Wix's infrastructure, which obscures traditional indicators such as autonomous system numbers (ASNs) or direct IP attribution. The use of a subdomain under wixstudio.com suggests an attempt to leverage the reputation of a trusted platform to evade initial detection. No SSL certificate anomalies or HTTP status irregularities have been reported, though this is not uncommon for phishing domains hosted on legitimate services. The exact content of the phishing page remains unanalyzed, but the domain name strongly implies an intent to impersonate dYdX, a decentralized trading platform, likely to harvest user credentials or cryptocurrency wallet details.

Defenders should prioritize blocking this domain at the DNS and web gateway levels, particularly in environments where cryptocurrency-related services are accessed. Given the elevated risk level and active status, organizations should also monitor for related subdomains under wixstudio.com or other Wix-managed properties that may emerge as part of this campaign. Security teams are advised to correlate this domain with existing threat intelligence feeds to identify potential overlaps with other phishing operations targeting cryptocurrency platforms.