en-dydx[.]wixstudio[.]com

This domain represents a high-risk brand impersonation threat targeting users of the dYdX decentralized exchange platform. Analysis indicates the infrastructure was designed to mimic legitimate dYdX interfaces, likely to harvest credentials, private keys, or facilitate fraudulent transactions. The domain specifically exploits the dYdX brand identity to deceive users into interacting with malicious content under the false pretense of official platform access or support. Infrastructure analysis reveals concrete evidence of malicious intent. The domain en-dydx.wixstudio.com was registered through GoDaddy.com, LLC on April 27, 2026, and has since been flagged by 14 out of 95 security vendors on VirusTotal. It appears on five distinct security blocklists and is actively blocked by multiple threat intelligence feeds, including MetaMask and PhishDestroy. The domain resolves to IP address 34.144.206.118 and utilizes technologies such as Wix, React, Google Cloud, and Google Cloud CDN, which are consistent with modern phishing infrastructure. The SSL certificate is issued by Let’s Encrypt, providing a false sense of security while the domain maintains a Gridinsoft trust score of 0 out of 100. Users who have visited or interacted with en-dydx.wixstudio.com should take immediate action to mitigate potential compromise. Disconnect all active sessions, revoke any permissions granted to the domain via wallet or application interfaces, and conduct a thorough review of account activity for unauthorized transactions. If credentials or private keys were entered, consider migrating assets to new wallets and rotating all associated passwords. Monitor connected devices for unusual activity and report the domain to relevant security teams for further investigation. Given the domain’s current offline status, users should remain vigilant for similar impersonation attempts targeting dYdX or other decentralized platforms.