dino-drop[.]org

Analysis indicates that dino-drop.org is currently classified as a high‑risk generic phishing campaign. The domain was registered on 20 April 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and remains active as of the report date (12 July 2026). The site presents a page title that references “DinoDrop – …” and includes Cyrillic text describing a “официальный сайт :: откритие кейсов в игре CS2 и CS:GO”, suggesting an attempt to lure victims interested in game‑related services. Infrastructure analysis reveals that the domain resolves to IP 188.114.96.3, an address owned by Cloudflare, Inc., and located in Canada. The authoritative nameservers are aliza.ns.cloudflare.com and kyle.ns.cloudflare.com, both typical of Cloudflare‑hosted services. The SSL certificate is issued by Let’s Encrypt (identifier E7), confirming the use of a valid TLS certificate but offering no insight into the underlying payload. The domain’s Gridinsoft trust score is 0 out of 100, indicating a lack of trust from that engine. Reputation signals show that 15 of 95 security vendors on VirusTotal flagged the domain, reflecting a moderate level of detection across the ecosystem. AlienVault OTX lists the domain in a single threat‑intelligence pulse, and it appears on one external blocklist. The site has been actively blocked by the PhishDestroy mitigation service. An HTTP request returns a 200 status code, confirming that the web server is reachable. Defenders should prioritize the domain for blocking at network perimeter and DNS filtering layers, given its high risk rating and confirmed phishing classification. Continuous monitoring of outbound connections to 188.114.96.3 is advisable, as well as periodic re‑evaluation of the domain’s status on VirusTotal and other reputation services. Because the page content has not been publicly analyzed beyond the title, additional sandbox or manual inspection may be required to ascertain any payload or credential‑harvesting mechanisms.