dex-dydxx-en-us[.]pages[.]dev

The domain dex-dydxx-en-us.pages.dev is a confirmed phishing site engaged in brand impersonation targeting dYdX, a cryptocurrency exchange. This scam site was designed to deceive users into believing they were interacting with the legitimate dYdX platform, posing a high risk of credential theft or financial fraud. As of the latest verification, dex-dydxx-en-us.pages.dev has been taken offline, though it remains flagged by security vendors for its prior malicious activity.

Technical analysis reveals that dex-dydxx-en-us.pages.dev was flagged by 12 of 95 security vendors on VirusTotal, including ChainPatrol, alphaMountain.ai, and BitDefender. Google Safe Browsing classified it as a social engineering threat, and it appeared on one security blocklist (PhishDestroy). The domain was registered through Cloudflare, Inc. on February 21, 2026, and resolved to the IP address 172.66.46.222, hosted by Cloudflare in the US. The SSL certificate was issued by Google Trust Services (WE1), and the site employed technologies such as HSTS and HTTP/3. At the time of assessment, the page returned a 403 HTTP status with the title 'Suspected phishing site | Cloudflare'.

Users who may have interacted with dex-dydxx-en-us.pages.dev should immediately change any compromised credentials, enable two-factor authentication, and monitor accounts for unauthorized activity. Cryptocurrency users are advised to revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. Report the domain to relevant platforms, including Google Safe Browsing, PhishTank, or the impersonated brand (dYdX), to aid in further takedown efforts.