dinodroup[.]com

This domain, dinodroup.com, is identified as a credential harvesting phishing site targeting users through deceptive login portals. Analysis indicates the domain is currently offline, though it previously posed an elevated risk to individuals and organizations by attempting to capture sensitive authentication details. Infrastructure analysis reveals the domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 188.114.96.3 and has been flagged by 3 of 95 security vendors on VirusTotal. The domain appears on one security blocklist and was detected in a single threat intelligence pulse on AlienVault OTX. These indicators confirm its malicious intent and association with phishing campaigns. The domain is currently offline, reducing immediate risk. However, organizations should proactively block the domain and its associated IP (188.114.96.3) at the network perimeter. Security teams are advised to monitor for related infrastructure, such as newly registered domains under the same registrar or IP range, and update detection rules to include this domain in threat intelligence feeds. Users who may have interacted with the site should reset credentials and enable multi-factor authentication where applicable.