tastydrop[.]net

tastydrop.net was registered on March 05 2026 through NiceNIC International Group Co., Limited. The site presents a Russian‑language title “TastyDrop – Официальный Сайт с Кейсами Dota 2”, which mimics a legitimate gaming service. No TLS certificate is served, and HTTP requests return status 200, indicating the site is reachable without encryption. The domain is currently active and appears on one security blocklist.

The domain resolves to 188.114.97.3, an address owned by AS13335 Cloudflare, Inc. Nameservers ray.ns.cloudflare.com and sandy.ns.cloudflare.com confirm Cloudflare front‑end services. Fingerprinting shows a Node.js stack with Vue.js, Nuxt.js, Cloudflare Browser Insights, and HTTP/3 support, a combination often used for rapidly deployed phishing pages. HTTP/3 can bypass some legacy inspection tools, increasing the difficulty of interception.

Threat intelligence classifies tastydrop.net as a generic phishing site. It is blocked by PhishDestroy and carries a Gridinsoft trust score of 0 / 100. VirusTotal reports a single positive detection out of 95 scanners. Although only one vendor has flagged the domain, the low trust score, recent creation date, lack of TLS, and brand impersonation justify the high‑risk rating assigned by analysts.

Defenders should add tastydrop.net to network‑level deny lists and monitor DNS queries for the domain and its Cloudflare nameservers. Because the site is hosted behind Cloudflare, sinkholing the IP may not be feasible, but URL filtering and user education about the fake Dota 2 case store can reduce exposure. Organizations are also advised to sandbox the landing page to capture any credential‑harvesting scripts and to schedule continuous re‑scanning to detect future changes to the site’s content or hosting infrastructure.