official-dydx-trade-connect[.]pages[.]dev

The domain official-dydx-trade-connect.pages.dev is identified as a high-risk threat due to brand impersonation targeting the cryptocurrency trading platform dYdX. No specific drainer kit has been identified, but the domain is actively being used to deceive users into disclosing sensitive information.

Analysis indicates that the domain is flagged by 10 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion. The domain is registered through Cloudflare, Inc., and resolves to the IP address 172.66.47.140, which is located in the United States and belongs to AS13335 Cloudflare, Inc. The domain was created on October 08, 2025. Google Safe Browsing has flagged the domain for phishing, and it currently appears on one security blocklist, specifically PhishDestroy. The SSL certificate is issued by Google Trust Services / WE1, which may give users a false sense of security.

The domain remains active, posing a high risk of financial and personal data theft to unsuspecting users. Immediate response actions should include blocking the domain at the network level and educating users about the risks associated with visiting unverified or suspicious websites. Despite the current blocklist and GSB flags, the domain may still reach and impact users who are not adequately protected. Organizations should monitor for any further indicators of compromise and consider enhancing their phishing detection and prevention mechanisms.