dydx[.]coupons

The domain dydx.coupons has been assessed as having an elevated risk level due to its specific threat type: brand impersonation. This domain is designed to mimic the legitimate dYdX brand, potentially leading to user confusion and unauthorized data collection.

Infrastructure analysis reveals that dydx.coupons is registered through Dynadot LLC and resolves to the IP address 54.215.31.113. The domain utilizes a Let's Encrypt SSL certificate, which is common among both legitimate and malicious sites. According to VirusTotal, 2 out of 95 security vendors flag this domain, indicating a low but notable level of suspicion. The domain has been taken offline, and its Gridinsoft trust score is 0/100, reflecting a complete lack of trust. Additionally, dydx.coupons appears on 3 security blocklists, including MetaMask, PhishDestroy, and SEAL. The page title, 'Crypto Exchange Referral Codes (June 2026) | CryptoCodes,' suggests an attempt to attract users looking for referral codes or promotional content related to dYdX. AlienVault OTX has found this domain in 2 threat intelligence pulses, further reinforcing its malicious nature.

To mitigate the risks associated with brand impersonation, users should verify the URL and domain name of any website they visit, especially when dealing with financial or sensitive information. It is recommended to access dYdX services through official channels or bookmarks to avoid falling victim to such impersonation attempts. Security teams should monitor for similar domain registrations and block any suspicious domains to protect their users from potential data breaches or financial losses.