dpd[.]mvztrqplxn[.]club

The domain dpd.mvztrqplxn.club is flagged for brand impersonation, a specific form of generic phishing. The domain likely impersonates the legitimate DPD brand, a well-known delivery service, to deceive users into providing sensitive information or credentials. No specific drainer kit has been identified, but the domain's structure and naming suggest a targeted phishing attempt to exploit brand trust.

Infrastructure analysis reveals that dpd.mvztrqplxn.club resolves to the IP address 104.21.30.249. The domain is registered through Dominet (HK) Limited, a registrar based in Hong Kong. As of the latest assessment, the domain has been flagged by 7 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. Google Safe Browsing has also flagged the domain for phishing, and it appears on 1 known security blocklist. The creation date of the domain is not provided, but its current status is taken offline, which suggests that it may have been a temporary or short-lived campaign.

The domain dpd.mvztrqplxn.club is currently offline, reducing the immediate risk to users. However, the residual risk remains, as the domain could be reactivated at any time. It is recommended that users avoid accessing this domain and report any related phishing attempts to their security teams. Organizations should consider blocking this domain at the network level to prevent accidental access by employees. Continued monitoring of the domain and associated IP address is advised to detect any future malicious activity.