tastydrop[.]io

PhishDestroy identifies the domain tastydrop.io as an active phishing campaign masquerading as Dropbox (cloud-storage brand impersonation). The threat is classified as generic_phishing and remains in under_investigation status as of today. Tactics include spoofed login pages to harvest user credentials and session tokens, distributing phishing links via email campaigns and malicious ads with high click-through rates.

This domain was flagged by 2 of 95 VirusTotal security vendors, indicating zero detections at the time of analysis. The domain resolves to IP address 103.224.212.213 and is registered through CommuniGal Communication Ltd. Domain registration was completed on May 26, 2025, making it a recently deployed threat. The SSL certificate is issued by Let’s Encrypt, leveraging trusted encryption to appear legitimate and evade browser warnings. No current blocklist entries were detected during the scan, placing this domain in a high-risk discovery window where early intervention is critical.

The current status of tastydrop.io is active, with evidence of ongoing credential harvesting attempts. Users are strongly advised to avoid interacting with this domain and to scan devices for potential compromise if any exposure occurred. Administrators should block the domain and IP at network and DNS levels. Report suspicious emails to relevant security teams and educate users on verifying sender domains before entering credentials. Continuous monitoring is recommended due to the low detection rate and active status. Users can access the full report for updated IOCs and mitigation guidance.