dijnodrop[.]com

This domain is flagged as an active crypto collector scam designed to deceive digital asset collectors into surrendering wallet credentials and private keys. Analysis indicates the site employs social engineering tactics, presenting itself as an exclusive marketplace for rare digital collectibles while harvesting sensitive financial data from victims. The threat type is highly specific: a crypto drainer impersonating a legitimate digital asset platform to facilitate unauthorized fund transfers. Infrastructure analysis reveals multiple high-risk indicators. The domain dijnodrop.com was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with fraudulent activity. It resolves to the IP address 188.114.97.3 and is currently offline, though historical data shows it was previously active. Security vendors on VirusTotal flagged the domain at a rate of 8/95, while AlienVault OTX lists it in eight distinct threat intelligence pulses. The domain appears on one security blocklist and holds a Gridinsoft trust score of 0/100, further confirming its malicious nature. The SSL certificate is issued by Google Trust Services, which, while legitimate, is often exploited by threat actors to lend false credibility to phishing sites. Mitigation against this crypto collector scam requires immediate action from both individuals and organizations. Users who may have interacted with dijnodrop.com should disconnect any connected wallets, revoke smart contract approvals, and transfer remaining assets to a new, secure wallet. Organizations should block the domain and its associated IP (188.114.97.3) at the network level to prevent access. Additionally, security teams should monitor for indicators of compromise, such as unusual transaction patterns or unauthorized access attempts linked to this domain. Public awareness campaigns should emphasize verifying platform authenticity through official channels before entering wallet credentials or making transactions.