access-dydxedex-en[.]pages[.]dev

The domain access-dydxedex-en.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and is hosted on Cloudflare’s network (AS13335). DNS resolution points to IP address 188.114.97.3, which is geolocated to the United States. The domain employs Cloudflare‑provided nameservers hank.ns.cloudflare.com and julissa.ns.cloudflare.com, and the TLS certificate presented is issued by Google Trust Services under the WE1 designation, indicating a valid HTTPS endpoint despite the malicious intent. HTTP requests to the site return a 403 status code and the page title is reported as “Suspected phishing site | Cloudflare,” suggesting that the content has been flagged by Cloudflare’s own detection mechanisms.

Google Safe Browsing classifies the URL as a social engineering threat, and the site appears on a single security blocklist. Independent analysis on VirusTotal shows that 13 of 93 scanning engines flagged the domain, reinforcing the suspicion of malicious activity. The Gridinsoft trust score of 0 out of 100 and the classification as a “Crypto Scam” further corroborate the risk profile. The site is currently offline, and PhishDestroy has listed it as blocked.

While the technical indicators confirm the presence of a phishing infrastructure targeting the dYdX brand, no additional payload or page content has been captured, leaving the exact phishing vector and user‑facing artefacts unverified. Defenders should continue to monitor the associated IP address and Cloudflare account for any re‑activation, enforce URL filtering for the domain across enterprise gateways, and incorporate the domain into threat‑intel feeds. Given the confirmed malicious classification by multiple vendors and the high‑risk rating, organizations handling dYdX‑related credentials should treat any communication referencing this domain as hostile and advise users to avoid interaction with the URL.