dioodrop[.]com

This domain, dioodrop.com, operates as a fraudulent digital collectibles marketplace designed to deceive users into disclosing personal and financial information. Analysis of the site content reveals Russian-language lures advertising "exclusive sets" and "ideal places for digital collectors," suggesting a targeted campaign against cryptocurrency or NFT enthusiasts. The page title, "Эксклюзивные Наборы и Идеальное место для цифровых коллекционеров!," indicates an attempt to exploit interest in limited-edition digital assets, a common tactic in credential harvesting schemes.

Infrastructure analysis reveals multiple red flags supporting the phishing classification. The domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious domains. It resolves to the IP address 172.67.142.59, which has been linked to other phishing operations. Security vendors have flagged the domain at a rate of 7/95 on VirusTotal, while Gridinsoft assigns it a trust score of 0/100. The domain appears on one security blocklist and is included in one AlienVault OTX threat intelligence pulse, further confirming its malicious status.

Users who visited dioodrop.com should take immediate remediation steps. Clear browser cache and cookies to remove any stored session data, as the site may have deployed tracking scripts or attempted to install malicious payloads. Monitor financial accounts and cryptocurrency wallets for unauthorized transactions, as the domain likely aimed to harvest login credentials. If any credentials were entered, reset passwords for all associated accounts and enable multi-factor authentication where available. Report the incident to relevant security teams or fraud prevention services to contribute to threat intelligence sharing.