dinodrcp[.]com

The domain dinodrcp.com was registered on March 27, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently taken offline. DNS resolution points to the IP address 172.67.164.230, which belongs to Cloudflare, Inc. and is geolocated in California, United States. The domain is served by Cloudflare’s nameservers irena.ns.cloudflare.com and jihoon.ns.cloudflare.com, and the presented SSL certificate is issued by Google Trust Services under the WE1 designation, indicating a valid TLS handshake. Threat intelligence shows the domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy.

VirusTotal analysis recorded four positive detections out of ninety‑four scanned security vendors, confirming that a minority of scanners identified malicious characteristics. No additional context such as a page title, brand impersonation, or specific phishing kit details is available from the current intelligence set. The limited visibility suggests that the site may have been used briefly before takedown, reducing the opportunity for widespread collection of credentials.

Defenders should continue to enforce deny‑list rules for the IP 172.67.164.230 and the domain dinodrcp.com, monitor any future DNS changes, and consider adding the domain to internal blocklists. Because the infrastructure relies on Cloudflare’s edge network, any re‑hosting attempts are likely to reuse the same CDN address, so correlation with other Cloudflare‑hosted malicious domains may aid in early detection. Ongoing observation of the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED for patterns of rapid domain issuance could also improve proactive mitigation.