diondrop[.]com

The domain www.diondrop.com was registered on March 06, 2026 through NiceNIC International Group Co., Limited and is currently taken offline. It resolves to the Cloudflare‑managed address 172.67.132.55, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The domain is served by Cloudflare nameservers chloe.ns.cloudflare.com and chris.ns.cloudflare.com and presents a TLS certificate issued by Let’s Encrypt (certificate identifier E8). HTTP traffic is observed over HTTP/3, confirming the use of modern Cloudflare edge infrastructure.

On VirusTotal the site received detections from 13 of 95 security vendors, indicating that a notable minority of scanners flagged the domain as malicious. It is listed on a single security blocklist and has been actively blocked by the PhishDestroy service. The Gridinsoft trust score is recorded as 0 out of 100, reinforcing the assessment of high risk. The page title retrieved from the site reads "DINODROP – Официальный Сайт: Кейсы КС2 с Лучшим Дропом!

на Дино Дроп," and the threat is classified as brand impersonation targeting the cs2 brand. No further content analysis is available because the site is offline, leaving the exact malicious payload or credential‑capture mechanisms unverified. Defenders should treat www.diondrop.com as a confirmed brand‑impersonation threat: block the domain at network perimeter, add the IP address 172.67.132.55 to deny‑list rules where appropriate, and continue monitoring for any re‑use of the same infrastructure in future campaigns.