dpd[.]cxmvprt[.]cfd

This domain, dpd.cxmvprt.cfd, is identified as a high-risk phishing site specifically designed to impersonate DPD parcel delivery services. Analysis indicates the site is engineered to harvest user credentials, payment card details, and personal information under the guise of tracking or managing parcel deliveries. The fraudulent page employs social engineering tactics, including fake login portals and urgent delivery notifications, to deceive victims into disclosing sensitive data. Google Safe Browsing has flagged the domain with the SOCIAL_ENGINEERING classification, confirming its intent to manipulate users through deceptive content. Technical evidence supports the classification of this domain as malicious. The site is registered through Aceville Pte. Ltd. and was created on May 29, 2026, suggesting an attempt to exploit future-dated registration to evade immediate detection. VirusTotal analysis reveals that 12 out of 95 security vendors have flagged the domain as malicious, while it appears on at least one security blocklist. Infrastructure analysis reveals the domain resolves to the IP address 104.21.6.176 and utilizes Cloudflare with HTTP/3 support, a common tactic to obscure hosting origins and enhance delivery speed for phishing content. The page title, identical to the domain name, further indicates a lack of legitimate branding or content structure. Users who have visited dpd.cxmvprt.cfd or interacted with its content should take immediate action to mitigate potential compromise. All credentials entered on the site must be considered exposed and should be reset across all platforms where identical or similar passwords are used. Financial institutions should be notified if payment card details were submitted, and affected users are advised to monitor accounts for unauthorized transactions. System scans using updated security tools are recommended to detect any secondary payloads or malware distributed through the phishing site. Organizations should update internal blocklists to include this domain and its associated IP address to prevent future access attempts.