dydx-exchange-io-us[.]pages[.]dev

This domain, dydx-exchange-io-us.pages.dev, is identified as posing a high risk of brand impersonation, specifically targeting the dYdX brand. The threat type is classified as phishing, aiming to deceive users by mimicking the legitimate dYdX exchange platform. The domain has been flagged as suspicious, indicating a significant threat to users attempting to access it.

Infrastructure analysis reveals multiple indicators of fraudulent activity. The domain was created on October 10, 2025, and registered through Cloudflare, Inc. It resolves to IP address 172.66.44.165, located in the United States under AS13335 Cloudflare, Inc. Google Safe Browsing has flagged it for phishing activity, corroborated by VirusTotal where 11 out of 95 security vendors have identified it as malicious. Additionally, it appears on one security blocklist, and is blocked by PhishDestroy, further validating its status as a threat. The presence of an SSL certificate from Google Trust Services / WE1 does not mitigate its risk, given the context of impersonation.

To mitigate the risks associated with this domain, users should avoid interacting with it entirely and treat any communications originating from it as potentially fraudulent. Security teams should ensure that this domain is added to internal blocklists and monitor for similar domains that may emerge. Organizations should educate users about recognizing phishing attempts, emphasizing the importance of verifying domain authenticity before engaging with online platforms. Enhanced monitoring and user awareness are crucial steps in safeguarding against such brand impersonation threats.