ww25[.]dydxv[.]com

The domain ww25.dydxv.com was registered on February 21, 2026 and is currently taken offline. Infrastructure analysis shows it resolves to the IP address 199.59.243.228, which is hosted by Amazon.com, Inc. in the United States under ASN 16509. The SSL certificate presented for the host is identified as R13, indicating a legacy or potentially self‑signed certificate. The page title returned from the site is "dydxv.com," which does not match the legitimate dYdX brand but reinforces the likelihood of brand impersonation.

VirusTotal reports five detections out of ninety‑three scanned vendors, confirming that multiple security products have identified malicious characteristics. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service. Gridinsoft assigns a trust score of zero out of one hundred, reflecting an extremely low reputation. The known scam type is a crypto scam, and the domain is documented as impersonating the dYdX cryptocurrency exchange platform.

No additional content analysis is available, so the exact phishing payload or credential‑stealing mechanisms remain unconfirmed. Defenders should add ww25.dydxv.com to URL filtering and firewall deny lists, monitor the associated IP 199.59.243.228 for any future activity, and correlate any inbound traffic with the observed SSL fingerprint. Continuous observation of Amazon‑hosted ranges for similar registration patterns is advised, as threat actors often reuse cloud infrastructure. Organizations using dYdX services should educate users about the offline status of this domain and reinforce verification of official dYdX URLs.