dinodhop[.]com

This domain, dinodhop.com, is identified as a credential-harvesting phishing site designed to deceive users into submitting sensitive authentication details. Analysis indicates the infrastructure was established to mimic legitimate login portals, though no specific brand impersonation or drainer kit signatures have been conclusively linked to this campaign. The domain exhibits characteristics consistent with automated phishing frameworks, including rapid deployment and generic template usage. Infrastructure analysis reveals dinodhop.com was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 27, 2026, with a creation date set anomalously in the future, suggesting potential domain spoofing or registry manipulation. The domain resolves to the IP address 188.114.97.3, which has been associated with prior phishing activity. VirusTotal detection metrics show 13 out of 95 security vendors flagging the domain as malicious, while it appears on a single security blocklist. Google Safe Browsing (GSB) status remains unconfirmed, though the domain was actively blocked by at least one threat intelligence feed. As of the latest assessment, dinodhop.com has been taken offline, likely in response to detection and blocking by security providers. However, the underlying infrastructure may persist, and the registrant could deploy replacement domains using similar tactics. The elevated risk level remains due to the domain's recent activity and the potential for re-emergence under altered identifiers. Organizations are advised to monitor for related indicators of compromise, including the associated IP address and registrar patterns, and to implement proactive blocking of newly registered domains from high-risk registrars.