dpd[.]tnqzpvr[.]cfd

This domain, dpd.tnqzpvr.cfd, is actively engaged in credential phishing targeting users of parcel delivery services. The site impersonates legitimate logistics tracking portals, specifically mimicking DPD delivery notifications, to harvest login credentials, payment details, and personal information. Analysis indicates the domain is designed to exploit user trust in branded parcel tracking systems, likely through fraudulent SMS or email campaigns directing victims to the malicious URL. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered on May 29, 2026, through Aceville Pte. Ltd., an uncommon registrar for legitimate logistics platforms. It resolves to IP address 172.67.147.170, hosted on Cloudflare infrastructure (AS13335), which is frequently leveraged to obscure malicious origin servers. No SSL certificate is present, increasing the risk of unencrypted credential transmission. VirusTotal reports 18 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. Google Safe Browsing has classified the domain as phishing. Users who have visited dpd.tnqzpvr.cfd should immediately revoke any entered credentials, particularly for parcel delivery or financial accounts. Monitor linked accounts for unauthorized transactions or password reset attempts. Clear browser cache and cookies to remove any persistent session tokens. If payment details were submitted, contact financial institutions to flag potential fraud. Report the domain to local cybersecurity authorities or anti-phishing working groups to support takedown efforts. Avoid interacting with any communications claiming to be from DPD that reference this domain.