dydxmigration[.]com

This domain, dydxmigration.com, was identified as a high-risk crypto scam impersonating the decentralized exchange dYdX. Registered on September 16, 2025, through Hello Internet Corp, the domain resolved to the IP address 78.40.143.9, hosted on AS45839 (Shinjiru Technology Sdn Bhd) in Bulgaria. Infrastructure analysis reveals the use of nameservers ns1.peruadelante.com and ns2.peruadelante.com, which have been associated with other malicious domains. The site was flagged for social engineering by Google Safe Browsing and appears on five security blocklists, including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura.

Gridinsoft assigned a trust score of 0/100, indicating confirmed malicious activity. At the time of analysis, the domain was offline, though its last known page title, 'dYdX v3 Governance & Staking,' suggests an attempt to deceive users into engaging with fraudulent staking or governance schemes. VirusTotal detections from 14 of 95 security vendors further corroborate its malicious classification, though the absence of an SSL certificate may have contributed to its identification as a scam. The domain’s registration details and hosting provider align with patterns observed in other crypto-related phishing campaigns, particularly those targeting decentralized finance (DeFi) platforms.

Defenders should treat this domain as compromised infrastructure and block it at the DNS and network levels. Organizations operating in the cryptocurrency or DeFi sectors are advised to monitor for similar impersonation attempts, particularly domains mimicking migration, staking, or governance processes. No further content analysis was conducted, so specific attack vectors or payloads remain unconfirmed.