dinodmop[.]com

The domain dinodmop.com was registered on March 10 2026 through NiceNIC International Group Co., Limited. DNS resolution points to 104.21.28.188, an address owned by Cloudflare (AS13335) located in the United States. Both authoritative name servers are hosted on Cloudflare (alexa.ns.cloudflare.com, nico.ns.cloudflare.com). The site presented a page title in Russian, “Коллекции — для настоящих энтузиастов цифровых коллекций!”, indicating a focus on digital collections, but no further content analysis is available because the service is currently taken offline.

Network fingerprinting shows the server supports Cloudflare’s edge services, including HTTP/3, and the page load chain includes the Unpkg CDN and the AOS animation library. TLS termination is provided by Google Trust Services under the WE1 certificate, confirming a valid HTTPS endpoint at the time of capture. Malware scanning on VirusTotal recorded a single positive detection out of 95 scanners, suggesting at least one vendor identified malicious behavior. The domain is listed on one public blocklist and has been added to the PhishDestroy blocklist, confirming that security communities consider it a phishing threat.

Because the site is offline, active probing cannot confirm current payload delivery, but the combination of a recent registration, use of reputable CDN infrastructure, a non‑English page title, and a positive VirusTotal flag aligns with typical phishing staging practices. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any re‑activation, and correlate any outbound connections to 104.21.28.188 with user activity. Additional investigation of the single VirusTotal detection and the specific signature that triggered the alert would help clarify the exact malicious functionality. Until further evidence emerges, the domain should be treated as high‑confidence phishing and remain on blocklists.