dydx-airdrop[.]github[.]io

PhishDestroy identifies dydx-airdrop.github.io as a live cryptocurrency scam impersonating the legitimate dYdX exchange. The site promises fraudulent token airdrops to trick victims into connecting wallets and surrendering private keys or seed phrases. 1 out of 95 VirusTotal scanners currently detect the page, leaving most antivirus tools blind to the threat. The domain was registered through GitHub Pages on an IP address (185.199.108.153) hosting multiple look-alike airdrop campaigns. This threat is a classic brand-impersonation phishing scheme. Attackers use the dYdX name, logo, and styling to appear legitimate, then request wallet connections under the guise of distributing free tokens. The site leverages a valid Let’s Encrypt SSL certificate to add a false sense of security, even though the domain’s age, zero detection rate, and GitHub hosting profile are strong red flags. The risk is elevated because the page impersonates a major DeFi protocol and can harvest private keys in seconds once wallets are connected. If you visited dydx-airdrop.github.io, disconnect your wallet immediately and revoke any permissions it may have granted. Use a hardware wallet or clean browser profile for future DeFi interactions. Report the domain to your antivirus vendor, GitHub abuse, and the real dYdX team. Always verify airdrop links via the official dYdX website or social channels before taking any action.