dydx-io-us[.]wixstudio[.]com

This domain, dydx-io-us.wixstudio.com, was engineered to impersonate dYdX, a decentralized cryptocurrency exchange platform. The site likely functioned as a credential harvester, tricking visitors into entering sensitive account information under the false pretense of accessing legitimate dYdX services. Such brand-impersonation schemes typically employ cloned interfaces, urgent messaging, or fake login portals to deceive users into disclosing credentials, private keys, or other authentication details, which are then exploited for unauthorized access or financial theft. Analysis indicates this domain was registered through GoDaddy.com, LLC on June 12, 2026, a future date that itself raises suspicion, suggesting potential registration data manipulation. It resolved to IP address 34.144.206.118 and was flagged by 7 out of 95 security vendors on VirusTotal. The domain appears on three security blocklists—PhishDestroy, PhishingArmy, and OISD—and was assigned a trust score of 0/100 by Gridinsoft. Infrastructure analysis reveals the use of Wix hosting, React framework, and Google Cloud CDN, with a Let's Encrypt SSL certificate providing HTTPS encryption, a common tactic to appear legitimate. If you visited dydx-io-us.wixstudio.com or entered any information on the site, immediate action is required. Disconnect the device from the network to prevent potential data exfiltration. Change all passwords for dYdX and any other accounts where the same credentials were used, prioritizing accounts with financial or sensitive access. Enable multi-factor authentication (MFA) on all critical accounts if not already active. Monitor financial transactions and account activity for unauthorized access or transfers. Consider revoking and reissuing any API keys or session tokens that may have been exposed. If cryptocurrency wallets or private keys were entered, treat the associated assets as compromised and transfer them to a new, secure wallet immediately. Report the incident to dYdX security teams and relevant cybersecurity authorities for further mitigation.