dibnodrop[.]com

Dibnodrop.com, a phishing domain, is currently offline but has already been flagged by 7 out of 94 vendors on VirusTotal. The domain was hosted by CloudFlare, Inc. in Canada, and registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It was issued an SSL certificate by Google Trust Services, indicating a level of sophistication in its setup.

Despite its current offline status, dibnodrop.com has been added to at least one public blocklist, specifically PhishDestroy's. The presence of this domain on blocklists and its detection by multiple vendors suggest that it was actively used for malicious purposes before being taken down. The domain's hosting on a reputable service like CloudFlare might have been an attempt to lend it legitimacy and evade initial detection.

The relatively high number of detections in a short time frame indicates that dibnodrop.com was likely involved in a significant phishing operation. The use of a well-known SSL issuer such as Google Trust Services could have been a tactic to deceive users into believing the site was secure. This case highlights the ongoing challenges in combating phishing threats, as malicious actors continue to exploit trusted services and infrastructure to carry out their schemes.