dydx-exchange-www[.]pages[.]dev

The domain dydx-exchange-www.pages.dev is a fake exchange site impersonating dYdX, a well-known crypto derivatives platform. It currently has zero detections on VirusTotal, highlighting its freshness and early stage in the phishing lifecycle. This domain exploits the typical 24-72 hour window before antivirus databases update, allowing it to potentially deceive users during this critical period. PhishDestroy's early detection places it on a public blocklist, providing a crucial barrier against this threat.

Registered through Cloudflare, Inc., and hosted on an IP address located in Canada, the site uses an SSL certificate issued by Google Trust Services. The page title, "dYdX Exchange - Trade Crypto Derivatives | Official DEX Platform," is designed to mislead visitors into believing they are accessing the legitimate dYdX platform. This tactic is common in phishing schemes, aiming to harvest sensitive user information or cryptocurrency assets.

The platform risk score of 68 out of 100 indicates a significant threat level. Despite its recent creation in March 2025, the site remains active, underscoring the need for continuous monitoring and quick response to new phishing domains. The use of a reputable registrar and SSL issuer adds a layer of deception, as these elements can falsely reassure potential victims of the site's legitimacy. By identifying and blocking such domains early, PhishDestroy helps mitigate the risk posed by these sophisticated scams.