87-106-70-155[.]cprapid[.]com

This domain, 87-106-70-155.cprapid.com, is flagged as a generic phishing infrastructure impersonating DPD, a logistics and parcel delivery service. The page title 'DPD Kasse (en)' suggests the site mimics a payment or checkout portal, likely designed to harvest credentials or financial data from victims under the guise of parcel processing. No specific drainer kit signatures were identified, but the domain follows common phishing patterns targeting e-commerce and delivery services. Analysis indicates the domain was registered through Tucows Domains Inc. on February 21, 2026, an unusually future-dated creation that may indicate automated or bulk registration tactics. It resolves to IP address 87.106.70.155, hosted on AS8560 (IONOS SE) in Germany. The SSL certificate is issued by Let's Encrypt (R12), a common choice for malicious actors due to its free and automated issuance. VirusTotal reports 20 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is not currently listed in Google Safe Browsing. As of the latest verification, the domain has been taken offline, likely due to hosting provider or registrar intervention. However, the infrastructure remains a residual risk. The future-dated registration suggests the operators may redeploy similar domains or reuse the IP for other phishing campaigns. Organizations should monitor for related indicators, including the IP address and SSL certificate issuer, and update detection rules to block domains with similar naming patterns or registration anomalies.