en-us-dydx-trade-web[.]pages[.]dev

The domain en-us-dydx-trade-web.pages.dev was registered on October 10, 2025 through Cloudflare, Inc. and resolves to the Cloudflare edge address 172.66.44.217 (AS13335, United States). The host presents a valid TLS certificate issued by Google Trust Services under the WE1 root, and implements HTTP Strict Transport Security and HTTP/3, indicating a modern web stack. An HTTP GET returns status code 200, confirming the site is actively serving content. Intelligence tags the site as a seed‑phish operation targeting the cryptocurrency trading platform dYdX. The seed_phish classification aligns with the brand target field listing dYdX, and the domain name deliberately incorporates the brand name. Reputation metrics are poor: Gridinsoft assigns a trust score of 0/100, the domain appears on one security blocklist, and PhishDestroy has already blocked it. VirusTotal analysis shows 15 of 95 scanners flag the domain, reinforcing the malicious assessment. Nameservers are monroe.ns.cloudflare.com and kianchau.ns.cloudflare.com, both Cloudflare‑managed. While the page content has not been examined, the combination of recent registration, active hosting, brand‑matching subdomain, and multiple security detections indicates a high‑risk phishing infrastructure. Defenders should block the domain at perimeter filters, add the associated IP address to deny lists, and monitor for any derivative domains using similar naming patterns. Incident response teams should treat any credential submissions to this site as compromised and advise affected users to rotate credentials and authenticate via trusted dYdX channels.