dpd[.]jxqtrmv[.]cfd

This domain is flagged as a high-risk phishing site designed to impersonate legitimate parcel delivery services. Analysis indicates the site presents a fraudulent DPD parcel tracking interface, tricking visitors into entering sensitive credentials or payment details under the guise of resolving delivery issues. The campaign primarily targets individuals expecting package deliveries, exploiting trust in established logistics brands to facilitate credential theft and financial fraud. Infrastructure analysis reveals the domain was registered on May 29, 2026 through Aceville Pte. Ltd., an uncommon registrar for legitimate delivery services. The site resolves to IP address 104.21.41.45 and employs Cloudflare protection, masking its true hosting origin. Technical verification shows 16 out of 95 security vendors on VirusTotal detect malicious activity, with Google Safe Browsing specifically flagging the domain for SOCIAL_ENGINEERING. The domain appears on one security blocklist and is currently offline, though this status may change. If you visited dpd.jxqtrmv.cfd or entered any information on the site, immediate action is required. First, terminate any active sessions and disconnect the device from networks. Scan the system using updated security tools to detect potential malware or credential-stealing scripts. Change passwords for any accounts accessed from the compromised device, prioritizing email, financial services, and parcel delivery accounts. Monitor financial statements for unauthorized transactions and consider placing a fraud alert with relevant institutions. Report the incident to local cybercrime authorities and the legitimate parcel service being impersonated to assist in broader mitigation efforts.