dydx-exchange[.]pages[.]dev

This domain, dydx-exchange.pages.dev, is identified as an active brand impersonation phishing site targeting dYdX, a decentralized cryptocurrency exchange platform. Analysis indicates the site mimics the legitimate dYdX interface, likely to deceive users into disclosing sensitive credentials or transferring digital assets. The page title explicitly displays 'dYdX,' reinforcing the impersonation attempt, though no specific drainer kit signatures have been confirmed at this stage. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on February 12, 2024, and resolves to the IP address 172.66.46.230, located in Canada under Cloudflare’s network. Detection metrics show 12 out of 95 security vendors on VirusTotal flag the domain as malicious. Google Safe Browsing has classified it as phishing, and it appears on three security blocklists. The SSL certificate is issued by Google Trust Services, serial number WE1, which is consistent with Cloudflare’s managed hosting environment. As of the latest assessment, dydx-exchange.pages.dev remains active, posing a high risk to users. Response actions include its inclusion in multiple blocklists and detection by endpoint protection systems. However, the domain’s continued operation underscores the need for heightened vigilance. Users are advised to verify domain authenticity before interacting with any cryptocurrency-related platforms and to report suspicious URLs to relevant security authorities for further mitigation.