dpd[.]cxmvtrp[.]cfd

This domain, dpd.cxmvtrp.cfd, is identified as a high-risk brand impersonation phishing site specifically targeting DPD, a well-known parcel delivery service. The domain remains active and is designed to deceive users into believing they are interacting with legitimate DPD communications, likely to harvest personal information, login credentials, or financial details under false pretenses. Analysis indicates the site employs social engineering tactics typical of parcel delivery scams, where victims are prompted to enter sensitive data to resolve fictitious delivery issues or track non-existent packages. Infrastructure analysis reveals multiple critical indicators of malicious activity. The domain is flagged by 14 of 95 security vendors on VirusTotal, including detection as a phishing threat by Google Safe Browsing. It is registered through Aceville Pte. Ltd. and resolves to the IP address 172.67.222.23, hosted on Cloudflare’s network (AS13335). Notably, the domain was created on May 29, 2026, a future date that suggests potential domain spoofing or incorrect registry data, further raising suspicions. The site lacks an SSL certificate, exposing all transmitted data to interception. Additionally, it appears on one security blocklist and is actively blocked by PhishDestroy, reinforcing its classification as a confirmed phishing domain. The current status of dpd.cxmvtrp.cfd remains active, posing an ongoing threat to unsuspecting users. Organizations and individuals are strongly advised to block this domain at the network level and update endpoint protection rules to prevent access. Users who may have interacted with the site should immediately change any credentials entered, monitor financial accounts for unauthorized activity, and report the incident to relevant cybersecurity authorities. Given the domain’s use of Cloudflare infrastructure, defenders should also monitor for similar domains leveraging the same hosting provider to evade detection. Proactive measures, including user education on recognizing parcel phishing scams and implementing multi-factor authentication, are critical to mitigating risks associated with this threat.