dpd[.]tvplmxqrzn[.]club

This domain, dpd.tvplmxqrzn.club, is actively engaged in phishing operations targeting parcel delivery services, specifically impersonating DPD. The threat type is classified as generic phishing with a high-risk level, and the domain remains operational as of the latest verification. Analysis indicates the page title matches the domain name, reinforcing its deceptive intent to mimic legitimate parcel tracking portals. Infrastructure analysis reveals the domain resolves to the IP address 172.67.141.112, hosted on Cloudflare infrastructure (AS13335) in the United States. It is flagged by 9 of 95 security vendors on VirusTotal, including detection by Google Safe Browsing as phishing. The domain is registered through Dominet (HK) Limited and appears on at least one security blocklist. Notably, the domain lacks an SSL certificate, a common red flag for malicious sites. No creation date is provided, but the absence of encryption and the use of a newly registered domain registrar further elevate its risk profile. Current status confirms the domain remains active and unmitigated. Organizations and users are advised to block the domain and its associated IP address at the network perimeter. Endpoint protection solutions should be updated to include this domain in phishing detection rules. Users encountering this domain should avoid interacting with it, particularly refraining from entering credentials or financial information. Network logs should be reviewed for connections to 172.67.141.112 or the domain to identify potential compromise. If credentials were entered, immediate password resets and multi-factor authentication enforcement are recommended for affected accounts.