secure-us-dydx-exchage[.]pages[.]dev

The domain secure-us-dydx-exchage.pages.dev was created on 29 October 2025 and is currently taken offline. It is registered through Cloudflare, Inc. and resolves to IP address 172.66.44.181, which is hosted in the United States under ASN 13335 (Cloudflare). DNS resolution shows authoritative nameservers mary.ns.cloudflare.com and vicky.ns.cloudflare.com. The site served an HTTP 403 response and presented the page title "dYdX Exchange | Trade, Stake & Grow Your Crypto Assets Safely," indicating a direct impersonation of the dYdX brand.

Security telemetry reports that 10 of 95 VirusTotal scanners flagged the domain, and it appears on one external blocklist. PhishDestroy has also listed the domain as blocked. A Gridinsoft trust score of 0/100 further corroborates the malicious assessment. The TLS certificate is issued by Google Trust Services under the WE1 identifier, and the site employed HSTS, Cloudflare caching, and HTTP/3 protocols, consistent with typical abuse of legitimate CDN services.

The threat is classified as a crypto‑related scam targeting dYdX users. While the page content beyond the title has not been publicly disclosed, the combination of brand impersonation, low trust score, multiple vendor detections, and blocklist presence provides strong evidence of malicious intent. Defenders should add the domain and its IP to internal blocklists, monitor for any resurgence of the sub‑domain, and enforce strict URL filtering for any dYdX‑related traffic. Incident response teams should also review logs for connections to 172.66.44.181 and consider alerting users of dYdX about the offline impersonation attempt.