dpd[.]jwtxqlrp[.]cfd

This domain, dpd.jwtxqlrp.cfd, is currently flagged as a high-risk phishing site specifically targeting DPD parcel delivery customers. The domain remains active and is designed to impersonate legitimate DPD tracking or notification pages, likely harvesting login credentials or payment details under false pretenses. Analysis confirms the domain is being used in ongoing phishing campaigns, with no indication of takedown or mitigation at this time. Infrastructure analysis reveals the domain was registered through Aceville Pte. Ltd. and resolves to the IP address 188.114.96.3. It appears on one security blocklist, and 16 out of 95 security vendors on VirusTotal have flagged the domain as malicious. The domain lacks an SSL certificate, further reducing its legitimacy and increasing the risk of interception or manipulation of user data. No creation date is provided, but the domain's active status and detection metrics suggest recent deployment in phishing operations. Current threat assessment indicates this domain poses a significant risk to users, particularly those expecting communications from DPD. Immediate mitigation steps include blocking the domain at the network level, adding it to endpoint protection denylists, and alerting users to avoid interaction. Organizations should monitor for connections to 188.114.96.3 and investigate any related traffic. Users who may have engaged with the domain should reset credentials and review accounts for unauthorized activity. The absence of SSL and the domain's presence on multiple detection platforms underscore the need for proactive containment.