# ggdrope.com — SUSPICIOUS

> Caution advised for ggdrope.com. Active generic phishing domain with low risk. Avoid sharing sensitive data when visiting this site.

## Summary
PhishDestroy identifies ggdrope.com as an active domain associated with generic phishing activity. Classified under low-risk threats, this domain is designed to deceive users into divulging sensitive information through fraudulent means. The domain's creation date is recent—March 09, 2025—indicating a possibly emergent threat. Its activities fit the common profile of phishing campaigns targeting unsuspecting users via fake login pages or misleading content.

Technical analysis shows ggdrope.com resolves to the IP address 172.67.160.145, which is hosted through Cloudflare’s infrastructure. The domain was registered via NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often noted in low-reputation registrations. VirusTotal results register minimal detection with 2 out of 95 security vendors flagging this domain, suggesting the campaign may be in early stages or employing techniques to evade detection. The domain currently maintains active status, reinforcing the need for vigilance.

Given the low but present risk level, users are advised to exercise caution when interacting with ggdrope.com to prevent potential credential theft or data compromise. Security teams should monitor this domain for evolving threat patterns and consider adding it to blocklists or security monitoring tools. PhishDestroy will continue tracking the domain's behavior and provide updates as new intelligence emerges.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: GGDROP – Официальный Сайт | Кейсы CS2, CS:GO - Открывай кс2, кс го и получай лучшее!

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Country: HK
- IP: 172.67.160.145
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: gwen.ns.cloudflare.com nolan.ns.cloudflare.com
- SSL Issuer: Let's Encrypt / E7

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content

### Page Text
Your request was blocked.

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbf30-bc4b-72c8-90c3-8ed5e98a36f8.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/ggdrope.com
- Wayback Machine: https://web.archive.org/web/https://ggdrope.com
- PhishDestroy: https://phishdestroy.io/domain/ggdrope.com/
- LLM endpoint: https://phishdestroy.io/domain/ggdrope.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ggdrope.com/
Last updated: 2026-03-16