dinodqrop[.]com

This domain, dinodqrop.com, was flagged as a Russian-language phishing site targeting digital collectors, based on its page title 'Эксклюзивные Наборы и Идеальное место для цифровых коллекционеров!' and its classification by five security vendors on VirusTotal. Registered on March 10, 2026, through NiceNIC International Group Co., Limited, the domain resolved to 188.114.96.3, a Cloudflare IP (AS13335) commonly used for bulletproof hosting. The site was taken offline by July 22, 2026, and appears on at least one security blocklist, specifically PhishDestroy.

SSL certification was issued by Google Trust Services (WE1), a legitimate provider often exploited for phishing. Infrastructure analysis reveals Cloudflare nameservers (emerie.ns.cloudflare.com, yadiel.ns.cloudflare.com) and detected technologies including Unpkg, AOS, and HTTP/3, which are not inherently malicious but frequently leveraged in phishing campaigns for obfuscation and performance. The combination of a recently registered domain, Russian-language content, and Cloudflare hosting aligns with patterns observed in phishing operations targeting niche communities, such as digital collectors or NFT enthusiasts.

Defenders should treat this domain as high-risk for credential harvesting or fraudulent transactions, particularly if logs show referrals from social media or messaging platforms. While the site is currently offline, historical DNS and WHOIS records should be preserved for forensic analysis, and any associated email addresses or payment gateways should be cross-referenced with other known phishing campaigns. No concrete evidence links this domain to a specific brand or scam subtype beyond its stated theme, so further investigation is required to determine the exact monetization method.