dydxtrade--vissit[.]typedream[.]app

Analysis of the domain dydxtrade--vissit.typedream.app confirms its classification as a crypto scam impersonating the decentralized exchange dYdX. As of July 24, 2026, the domain resolves to the IP address 188.114.96.3, hosted on Cloudflare's infrastructure (AS13335) in the United States. The domain was registered through Typedream, a platform that provides website hosting services, and is currently offline with an HTTP 404 status, indicating the page could not be found. Despite its offline status, the domain remains flagged by 11 of 95 security vendors on VirusTotal, reflecting elevated detection rates consistent with phishing or scam activity. Additionally, the domain appears on one security blocklist, further corroborating its malicious classification.

Infrastructure analysis reveals the use of modern web technologies, including Node.js, React, Next.js, and Webpack, alongside Google Cloud services such as Google Cloud Trace and Google Cloud CDN. The SSL certificate is issued by Google Trust Services (WE1), a common certificate authority for both legitimate and malicious sites. The absence of nameserver details and the domain's reliance on Cloudflare suggest efforts to obfuscate hosting details, a tactic frequently observed in phishing campaigns. The page title, '404: This page could not be found,' provides no direct evidence of the site's content but aligns with the domain's current offline status. Defenders should treat this domain as a confirmed threat targeting users of the dYdX platform.

The combination of brand impersonation, detection by multiple security vendors, and its presence on a security blocklist justifies its elevated risk classification. Network-level blocking of the domain and its associated IP (188.114.96.3) is recommended to mitigate potential exposure. Organizations should also monitor for related domains registered through Typedream or leveraging similar infrastructure, as these may indicate ongoing or evolving campaigns.