dinosdrop[.]com

This domain, dinosdrop.com, is categorized as a generic phishing threat currently under investigation. The page title references DinoDrop as an official site for CS2 case upgrades and premium skin collections, indicating a phishing campaign targeting Counter-Strike 2 players seeking in-game cosmetic items. The site likely employs a drainer kit to harvest Steam credentials or session tokens upon user interaction with fraudulent drop mechanics.

Technical indicators confirm the domain was created on April 26, 2025, and registers through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to IP address 172.67.217.223, which is associated with Cloudflare infrastructure. VirusTotal analysis shows 0 out of 95 security vendors flagging the domain, indicating it is not yet widely detected. The SSL certificate is issued by Google Trust Services, providing a false sense of security. Google Safe Browsing status is not explicitly listed but the domain remains active with no blocklist entries at this time.

The domain remains active with a status of active and risk level under investigation. No response actions have been initiated by the registrar or hosting provider. The primary risk is credential theft via fake authentication prompts or token grabbers embedded in the phishing page. Users should avoid visiting the domain, never submit login credentials, and enable two-factor authentication on Steam accounts. Organizations should block the domain at the network level and monitor for related phishing variants.