home-dydx-trade-en[.]daftpage[.]com

This domain, home-dydx-trade-en.daftpage.com, is currently flagged as an active brand impersonation threat targeting dYdX, a cryptocurrency trading platform. The page title explicitly claims association with dYdX, stating 'dYdX Trade: Fast, Secure, and Smarter Crypto Trading,' which aligns with the known brand impersonation pattern. As of July 12, 2026, the domain remains operational, resolving to IP address 216.150.1.129 and utilizing a Let's Encrypt SSL certificate for encrypted connections. Analysis of the domain's infrastructure reveals the use of modern web technologies, including Node.js, React, Next.js, and Vercel, which are consistent with legitimate web applications but are also commonly exploited in phishing campaigns. The domain was registered on October 24, 2021, through OVH, SAS, and has been active for nearly five years, which may contribute to its perceived legitimacy. However, detection data indicates that 13 out of 95 security vendors on VirusTotal have flagged this domain, and it appears on at least one security blocklist, reinforcing its classification as a high-risk threat. The exact nature of the phishing content hosted on this domain has not yet been fully analyzed, but the combination of brand impersonation, active status, and detection by security vendors suggests it is likely designed to deceive users into disclosing sensitive information or transferring cryptocurrency. Defenders should treat this domain as malicious and prioritize blocking or monitoring traffic to and from 216.150.1.129. Network-level protections, such as DNS filtering or IP-based blocking, are recommended to mitigate potential exposure. Additionally, security teams should investigate any historical connections to this domain within their environments, particularly those involving cryptocurrency-related activities or user credentials.