dpd[.]fxqmvtrpl[.]top

This domain, dpd.fxqmvtrpl.top, is identified as a high-risk brand impersonation threat targeting Google. Analysis indicates the site was designed to mimic legitimate Google services, likely to deceive users into disclosing credentials or installing malicious payloads under the guise of official branding. No specific drainer kit signatures were confirmed, but the presence of Cloudflare infrastructure and HTTP/3 suggests an attempt to evade detection while maintaining operational resilience. Infrastructure analysis reveals multiple technical indicators of compromise. The domain resolves to IP address 188.114.97.3, registered through Dominet (HK) Limited on May 21, 2026, an anomalous future date suggesting potential domain spoofing or registry manipulation. Google Safe Browsing explicitly flags the domain for SOCIAL_ENGINEERING, while VirusTotal reports 20 out of 95 security vendors detecting malicious activity. The domain appears on at least one security blocklist, further corroborating its fraudulent nature. As of the latest assessment, dpd.fxqmvtrpl.top has been taken offline, likely following automated or manual takedown procedures. Despite its inactive status, residual risk remains due to the domain's recent registration data and the possibility of re-emergence under altered infrastructure. Users who accessed the domain prior to deactivation should assume potential credential exposure and initiate account audits, particularly for Google-associated services. Continuous monitoring of related IPs and registrar activity is recommended to preempt future iterations of this campaign.