dydx-ttrade[.]pages[.]dev

The domain dydx-ttrade.pages.dev has been identified as a brand impersonation threat targeting the dYdX brand. The domain is currently offline, which may indicate that the threat has been mitigated or that the attackers have temporarily suspended their activities.

Analysis indicates that the domain was flagged by 12 of 95 security vendors on VirusTotal, suggesting a moderate level of suspicion among the security community. The domain was registered through Cloudflare, Inc., and resolves to the IP address 172.66.46.222, which is located in the United States and belongs to AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1, which could be used to gain user trust. The domain was created on August 26, 2025, and it appears on 1 security blocklist, further confirming its malicious intent. The page title 'dYdX Trade — Decentralized Perpetuals Exchange' closely mimics the legitimate dYdX website, potentially leading users to believe they are interacting with the genuine service.

Given that the domain is currently offline, it is recommended to continue monitoring the domain for any signs of reactivation. Organizations and users should be vigilant and ensure that they verify the URL of any dYdX-related website before entering sensitive information. Additionally, network administrators should update security policies to block access to this domain and educate users about the risks of brand impersonation attacks.