dpmfxdx[.]info

This domain operates as a fraudulent cryptocurrency reward portal specifically targeting holders of $XDX tokens. The site presents itself as an official 'XDX Reward Allocation' platform, using social engineering tactics to deceive visitors into connecting cryptocurrency wallets or disclosing private keys under the pretense of claiming non-existent token rewards. The scheme exploits current trends in decentralized finance by mimicking legitimate airdrop distribution pages, complete with fabricated transaction histories and countdown timers to create false urgency. Analysis of the domain infrastructure reveals multiple indicators of malicious intent. The domain dpmfxdx.info was registered on April 29, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED, an offshore registrar frequently associated with high-risk domains. Security vendors have flagged the domain in 8 of 95 VirusTotal scans, while it appears on one active security blocklist. The site resolves to IP address 104.21.4.185 and employs Cloudflare protection, including HSTS and HTTP/3 protocols, to obscure backend infrastructure. The SSL certificate is issued by Let's Encrypt, providing superficial legitimacy while the Gridinsoft trust score remains at 0/100. Users who have visited dpmfxdx.info should immediately consider any connected cryptocurrency wallets compromised. The first action should be to revoke all smart contract approvals and token allowances associated with the site using a blockchain explorer or wallet interface. Any credentials entered should be considered exposed, requiring password changes across all platforms where similar credentials were used. Affected parties should monitor connected wallet addresses for unauthorized transactions and report the incident to relevant blockchain security teams. The domain's future activity should be monitored as similar infrastructure often reappears under different names following takedowns.