dydx[.]airdropalert[.]us

The domain dydx.airdropalert.us was registered on October 19, 2025 through Dynadot LLC and subsequently taken offline prior to this analysis. Technical inspection shows the zone is delegated to the Cloudflare nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, and it resolves to the IP address 172.217.165.132, which belongs to Google LLC (AS15169) in the United States. No TLS certificate is presented, indicating the site served HTTP only. The sole visible artifact is a page title of "Google," which does not correspond to the advertised dYdX brand.

Google Safe Browsing classifies the domain as a social engineering threat, and a single security blocklist includes it. PhishDestroy has already blocked the domain, and VirusTotal records indicate that 11 of 93 scanned security vendors flagged the host. The Gridinsoft trust score is 0 out of 100, reinforcing the malicious assessment.

The threat is categorized as a crypto scam that impersonates the decentralized exchange dYdX, aiming to lure users into fraudulent airdrop or token‑distribution schemes. Defenders should add dydx.airdropalert.us to network and email filtering rules, monitor the associated IP for any future repurposing, and consider proactive DNS sinkholing. Continuous re‑scanning is advised to capture any changes in content or hosting, and threat‑intel feeds should be updated to reflect the domain’s affiliation with brand impersonation and crypto‑related social engineering tactics.