dpd[.]xplvtrqmzn[.]icu

This domain, dpd.xplvtrqmzn.icu, has been assessed as a high-risk threat, specifically a credential theft operation designed to steal login credentials and personal information from unsuspecting visitors. The site mimics a legitimate package delivery service, likely DPD, to trick users into entering sensitive data. PhishDestroy identified this domain as a generic phishing threat, but the specific malicious intent is credential harvesting, making it a serious risk for identity theft and account compromise.

The domain was registered through Dominet (HK) Limited and was created on May 28, 2026, indicating it is relatively recent. It resolves to IP address 172.67.215.223 and lacks an SSL certificate, which is a red flag for any site handling personal data. Google Safe Browsing has flagged it as phishing, and it appears on one security blocklist. VirusTotal reports that 13 out of 95 security vendors flag this domain as malicious, providing strong evidence of its dangerous nature. Although the domain is currently offline, it could be reactivated or used to host other phishing campaigns.

To protect against credential theft like this, users should always verify the legitimacy of any website before entering login credentials or personal information. Double-check the URL for misspellings or unusual domain extensions, such as .icu, which are often used by phishers. Use a password manager that autofills only on known legitimate sites, and enable multi-factor authentication on all accounts to add an extra layer of security. If you have already entered credentials on this domain, change your passwords immediately and monitor your accounts for suspicious activity. Report the domain to anti-phishing organizations and your email provider to help prevent further attacks.