dydx-claim[.]pages[.]dev

This domain, dydx-claim.pages.dev, is flagged for brand impersonation targeting dYdX, a decentralized cryptocurrency exchange. Analysis indicates the site mimics the legitimate dYdX Foundation, presenting a page titled 'Governance, Community and Decentralization | dYdX Foundation' to deceive users into interacting with fraudulent governance or token-claim portals. No explicit crypto drainer kit signatures were identified in initial scans, but the impersonation framework aligns with common phishing tactics used to harvest credentials or private keys under false pretenses.

Technical indicators reveal the domain was registered on August 21, 2024, through Cloudflare, Inc., resolving to the IP address 172.66.44.124 (AS13335, US). The SSL certificate is issued by Google Trust Services (WE1), a common practice for malicious domains leveraging legitimate CDN infrastructure. VirusTotal detection shows 13 out of 95 security vendors flagging the domain as malicious, while it appears on three security blocklists, including PhishDestroy, ScamSniffer, and Enkrypt. Google Safe Browsing status was not explicitly provided, but the domain's active blocklist presence suggests it is recognized as a threat by multiple threat intelligence feeds.

As of the latest assessment, dydx-claim.pages.dev remains active, posing a high risk to users unfamiliar with dYdX's legitimate domains. Immediate response actions include reporting the domain to additional threat intelligence platforms for broader dissemination and urging network-level blocking of the IP 172.66.44.124. Users are advised to verify domain authenticity by cross-referencing with official dYdX communications and avoiding interaction with unsolicited governance or token-claim pages. Organizations should monitor for connections to this IP or domain in network logs and implement DNS-based blocking to mitigate exposure.