dydx-trading-competition-frontend[.]pages[.]dev

Analysis of dydx-trading-competition-frontend.pages.dev indicates that the domain is actively leveraged in a phishing operation. The domain resolves to the IPv4 address 188.114.96.3 and is hosted behind Cloudflare’s network, as evidenced by the registrar information and the authoritative name servers susan.ns.cloudflare.com and titan.ns.cloudflare.com. The infrastructure has been listed on three public security blocklists, a signal that the domain has previously been reported for malicious use.

It is presently blocked by the PhishDestroy, MetaMask, and SEAL filtering services, confirming that multiple independent mitigation platforms have taken action against it. VirusTotal data show that 11 of 91 scanned security vendors flag the domain as malicious, providing vendor‑level corroboration of the threat. No public SSL certificate details, HTTP status codes, or page‑title metadata are currently available, limiting direct insight into the site’s payload or visual content.

Likewise, the specific brand being impersonated, the phishing kit employed, or any victim URLs have not been disclosed in the available intelligence, leaving the exact attack vector uncertain. Defenders should add the fully qualified domain name and its associated IP address to outbound and inbound deny lists, enforce DNS sink‑holing for the identified Cloudflare name servers, and incorporate the domain into existing threat‑intel feed ingestion pipelines. Continuous re‑evaluation is advised, as future observations may reveal additional indicators of compromise, victim attribution, or changes to the hosting configuration.