dydx[.]airsdropsalert[.]lol

On July 24, 2026, analysis of the domain dydx.airsdropsalert.lol shows that it was registered on 5 November 2025 through Dynadot LLC and currently resolves to the IP address 216.58.206.68, which belongs to AS15169 Google LLC and is geolocated in Germany. The domain is hosted on Cloudflare name servers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. No TLS certificate was observed, indicating that the site is served over plain HTTP. The page title returned by the HTTP response is “Google”, which does not correspond to the advertised dYdX brand.

VirusTotal scans have recorded six positive detections out of ninety‑five scanned engines, and the domain appears on a single external blocklist. Gridinsoft assigns a trust score of zero out of one hundred, reflecting a high confidence in malicious intent. The site has been flagged by the PhishDestroy blocklist and is currently listed as offline. The intelligence categorizes the activity as a crypto‑scam that impersonates the decentralized exchange dYdX.

At present, no additional content or payload details have been captured, and the absence of a valid SSL certificate limits the ability to inspect encrypted traffic. Defenders should continue to block the domain at DNS and proxy layers, monitor for any resurgence of the same name or similar sub‑domains, and consider adding the associated IP address to network‑wide deny lists. Ongoing observation of the registrar Dynadot for new registrations resembling the pattern is advisable, as is periodic re‑scanning with multi‑engine services to capture any changes in detection status.