dpd[.]xqtrplmzvn[.]club

This domain, dpd.xqtrplmzvn.club, is currently active and identified as a fake parcel tracking phishing site specifically designed to impersonate the legitimate courier service DPD. The site targets users by presenting fraudulent delivery notifications, tricking them into entering personal and financial information under the guise of resolving parcel issues or confirming delivery details. Analysis indicates this is a high-risk threat due to its active status and direct targeting of a widely recognized logistics brand. Infrastructure analysis reveals several critical technical indicators associated with this domain. The site resolves to the IP address 188.114.97.3, which is hosted on AS13335 Cloudflare, Inc. infrastructure located in the United States. It has been flagged by 10 out of 95 security vendors on VirusTotal, and is currently listed on one security blocklist. The domain was registered through Dominet (HK) Limited, a registrar frequently associated with high-risk domains. Notably, the site lacks an SSL certificate, further increasing its risk profile as it does not provide encrypted communication. Google Safe Browsing has also classified this domain as phishing, corroborating the malicious intent. Current monitoring confirms that dpd.xqtrplmzvn.club remains operational and continues to pose a significant risk to users. The absence of SSL encryption, combined with the domain's registration details and hosting on a content delivery network, suggests an attempt to evade detection while maintaining scalability for the phishing campaign. Users are strongly advised to avoid interacting with this domain and to verify any parcel notifications directly through official DPD channels. Organizations should update their security controls to block access to this domain and its associated IP address. Additionally, monitoring for similar domains registered through Dominet (HK) Limited or resolving to the same IP range may help preemptively identify related threats.