68-210-200-182[.]cprapid[.]com

This domain is flagged for hosting a targeted payment phishing operation impersonating DPD parcel delivery services. Analysis indicates the threat type as credential and payment card harvesting, classified with an elevated risk level due to its historical persistence and active abuse in financial fraud campaigns. The page title '💳 DPD Kasse (en) | | 0' explicitly signals an intent to deceive users into submitting sensitive payment details under false pretenses. Infrastructure analysis reveals the domain 68-210-200-182.cprapid.com was registered on May 16, 2019, through TUCOWS.COM, CO. It resolves to the IP address 68.210.200.182 and is served by an Apache HTTP Server. Detection metrics show 8 out of 95 security vendors on VirusTotal flagged the domain as malicious. The domain currently appears on one security blocklist and holds a trust score of 0/100, reflecting consistent malicious activity. The domain has since been taken offline, though its historical use in phishing operations remains a concern. Mitigation measures should include immediate blocking of the domain and its associated IP (68.210.200.182) across all network security controls. Organizations are advised to deploy email filtering rules to quarantine messages containing references to 'DPD Kasse' or similar payment-themed lures. End-user training should emphasize verification of payment portals via official DPD channels, particularly for unsolicited delivery notifications. Security teams should monitor for lateral movement or credential reuse attempts following exposure to this domain, as harvested data may be leveraged in subsequent fraud attempts.