dpd[.]mzqrvtplxn[.]club

This domain, dpd.mzqrvtplxn.club, is actively engaged in phishing operations targeting users of DPD parcel delivery services. Analysis indicates the site mimics legitimate DPD tracking portals to harvest login credentials, payment details, or personal information from victims attempting to track shipments. The domain employs social engineering tactics, presenting itself as an official DPD portal to deceive users into submitting sensitive data under false pretenses. Infrastructure analysis reveals multiple high-risk indicators. The domain is registered through Dominet (HK) Limited and currently resolves to IP address 104.21.75.25, associated with AS13335 Cloudflare, Inc. It lacks an SSL certificate, increasing the risk of data interception. VirusTotal detection shows 7 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is explicitly labeled as phishing by Google Safe Browsing. No legitimate creation date or historical context is available, further suggesting its fraudulent nature. Users who have visited dpd.mzqrvtplxn.club should immediately cease all interaction with the site. Those who entered credentials or financial information must change passwords for any compromised accounts, enable multi-factor authentication where available, and monitor accounts for unauthorized activity. System scans using updated security tools are recommended to detect potential malware infections. Network administrators should block the domain and its resolving IP (104.21.75.25) at the perimeter to prevent further access. Reporting the domain to relevant security teams or abuse contacts for hosting providers can aid in mitigation efforts.