dydxk[.]com

This domain, dydxk.com, is actively flagged as a high-risk brand impersonation threat targeting dYdX, a decentralized cryptocurrency exchange. Registered on November 28, 2024, through OwnRegistrar, Inc., the domain resolves to the IP address 199.59.243.228 and has been detected on two security blocklists, including PhishDestroy and BLP-Malware. Analysis indicates the domain is still operational as of July 12, 2026, with a Gridinsoft trust score of 0 out of 100, reinforcing its classification as malicious infrastructure. Infrastructure analysis reveals the domain is associated with 23 threat intelligence pulses in AlienVault OTX, suggesting widespread recognition within the security community. VirusTotal reports that 13 out of 95 security vendors have flagged the domain, further corroborating its malicious nature. The page title, which matches the domain name itself (dydxk.com), does not provide additional context about the specific content or tactics employed, though the domain’s structure and naming convention strongly imply an intent to deceive users familiar with the legitimate dYdX platform. While the exact nature of the phishing content remains unconfirmed due to the absence of direct website analysis, the domain’s registration details, resolution data, and security vendor detections collectively indicate a deliberate attempt to impersonate dYdX. Defenders should prioritize blocking this domain at the DNS and network levels, particularly in environments where cryptocurrency-related services are accessed. Monitoring for related domains with similar naming patterns or registration characteristics may also help identify additional threats linked to this campaign. Given the domain’s persistence and detection across multiple security platforms, organizations should treat it as an active and credible threat to users.