173.237.189.41 отмечен как спам

Over the past several weeks, a coordinated phishing campaign has been observed targeting DTDC’s brand and its customers. The threat actors behind this operation have registered and weaponized multiple domains that closely imitate DTDC’s legitimate web infrastructure. These domains are not simple typo-squatted assets but fully functional fraudulent websites designed to deceive users and harvest sensitive information, including login credentials, one-time passwords (OTPs), payment card details, and personally identifiable information (PII). Victims are tricked into believing they are interacting with authentic DTDC services, thereby compromising their financial and personal data.
The adversaries are employing a combination of search engine optimization (SEO) poisoning and SMS-based social engineering (smishing) to lure victims to these malicious domains. SEO poisoning allows these fake sites to appear prominently in search results when users attempt to locate DTDC’s official services.

Over the past few weeks, we've observed a coordinated attack where threat actors have registered multiple domains that closely mimic DTDC's brand identity. These sites are not just passive typo-squats—they're actively harvesting login credentials, OTPs, payment card details, and personal information from unsuspecting users who believe they're interacting with legitimate DTDC services.
The threat actors are using SEO poisoning and SMS-based social engineering to drive traffic to these fake sites, which feature:
Realistic parcel tracking interfaces
Fake "redeliver your package" login pages
Payment collection forms for fabricated customs/delivery fees
OTP capture mechanisms that relay codes in real-time to attackers

"Over the past few weeks, we've observed a coordinated attack where threat actors have registered multiple domains that closely mimic DTDC's brand identity. These sites are not just passive typo-squats—they're actively harvesting login credentials, OTPs, payment card details, and personal information from unsuspecting users who believe they're interacting with legitimate DTDC services.
The threat actors are using SEO poisoning and SMS-based social engineering to drive traffic to these fake sites, which feature:
Realistic parcel tracking interfaces
Fake ""redeliver your package"" login pages
Payment collection forms for fabricated customs/delivery fees
OTP capture mechanisms that relay codes in real-time to attackers"