dinodzop[.]com

The domain dinodzop.com posed as a platform for digital collectible enthusiasts, but in reality it was a phishing site designed to steal sensitive information from its visitors. The site's Russian-language title, "Коллекции — для настоящих энтузиастов цифровых коллекций!" (Collections — for true enthusiasts of digital collections!), was likely used to lure victims into a false sense of security. This type of threat is especially dangerous because it mimics legitimate services in the growing digital collectibles market, potentially compromising credentials or payment data.

Evidence of the threat comes from multiple sources. VirusTotal shows that only 1 out of 95 security vendors flagged this domain, meaning many scanners initially missed it. The domain was created on March 10, 2026, through NiceNIC International Group Co., Limited, a registrar often associated with malicious domains. Its SSL certificate was issued by Google Trust Services, and it resolved to IP 104.21.84.124. The domain now appears on one security blocklist and has been taken offline, but its short active period likely allowed it to cause harm before detection.

If you visited dinodzop.com, take immediate action. Change any passwords you use on other sites, especially if you reused credentials. Monitor your accounts for unusual activity, and consider enabling two-factor authentication where available. Run a full security scan on your device to check for malware. While the site is offline, the threat actors may have already collected your data, so staying vigilant is key.