134-112-56-85[.]cprapid[.]com

This domain, 134-112-56-85.cprapid.com, is identified as a high-risk generic phishing site targeting users of DPD, a logistics and parcel delivery service. Analysis of the page title, '💳 DPD Kasse (fr) | | 0,' indicates an attempt to impersonate DPD's payment portal, specifically targeting French-speaking users. The domain appears designed to harvest payment credentials or personal information under the guise of a legitimate transaction page, a common tactic in financial fraud campaigns. Infrastructure analysis reveals the domain resolves to the IP address 134.112.56.85 and was registered through Tucows Domains Inc. It is currently flagged by 15 out of 95 security vendors on VirusTotal, confirming its malicious classification. The domain appears on three security blocklists, including entries from PhishDestroy, StevenBlack, and CERT-PL. No creation date is available in the provided data, but its rapid inclusion in multiple blocklists suggests recent malicious activity. Google Safe Browsing (GSB) status is not explicitly stated, but the domain's presence on multiple threat intelligence feeds corroborates its high-risk classification. As of the latest assessment, 134-112-56-85.cprapid.com has been taken offline, reducing immediate exposure risk. However, the infrastructure associated with this domain, including its IP address and registrar, may still pose residual threats. Organizations are advised to block the domain and its associated IP at the network perimeter and monitor for any attempts to reuse the infrastructure for similar phishing campaigns. Users who may have interacted with the domain should immediately verify their accounts for unauthorized transactions and reset credentials as a precautionary measure.