dydxz[.]at

The domain dydxz.at is identified as a brand impersonation threat targeting dYdX, a decentralized finance trading platform. Analysis indicates this domain is designed to deceive users into believing it is an official dYdX portal, specifically marketed as a 'Plataforma de Trading Inteligente 2026' in Spanish. The domain is currently offline, but prior activity classified it as an elevated-risk scam operation. Infrastructure analysis reveals multiple high-confidence threat indicators. The domain resolves to the IP address 188.114.96.3 and was registered on March 11, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu. It is flagged by 9 of 95 security vendors on VirusTotal, appears in 9 AlienVault OTX threat intelligence pulses, and holds a Gridinsoft trust score of 0/100. The domain is blocked by multiple security systems and appears on three independent security blocklists. The SSL certificate is issued by Google Trust Services, which, while legitimate, is commonly exploited in phishing infrastructure to lend false credibility. Current status shows the domain has been taken offline, likely due to enforcement actions or hosting suspension. However, the registration remains active, posing a residual risk of reactivation. Users and organizations are advised to block the domain and IP at the network level, monitor for similar impersonation patterns using the seed phrase 'Plataforma de Trading Inteligente 2026', and verify all trading platforms through official channels only. Financial institutions and crypto service providers should update detection rules to include this domain and associated indicators of compromise.