dpd[.]tnplrqz[.]cfd

This domain, dpd.tnplrqz.cfd, is currently active and classified as a high-risk phishing site targeting DPD parcel delivery services. Analysis confirms the domain is designed to impersonate legitimate logistics communications, likely to harvest user credentials or payment details under false pretenses. The domain remains operational and exhibits multiple indicators of malicious intent. Infrastructure analysis reveals the domain was registered on May 30, 2026, through Aceville Pte. Ltd., an uncommon registrar for legitimate logistics operations. It resolves to the IP address 188.114.97.3, hosted on Cloudflare’s network (AS13335), which is frequently leveraged to obscure malicious infrastructure. The domain lacks an SSL certificate, a deviation from standard secure communication practices. Security vendors have flagged it in 12 of 95 VirusTotal scans, and it appears on one security blocklist. Google Safe Browsing has explicitly categorized it as phishing. The domain remains active and unmitigated at the time of this report. Organizations are advised to block access to dpd.tnplrqz.cfd at the network perimeter and update endpoint protection rules to include this indicator. Users should be alerted to the impersonation of DPD branding and instructed to verify all parcel delivery communications through official channels. Monitoring for related domains using similar naming conventions (e.g., random subdomains with ‘dpd’ prefixes) is recommended to preempt further phishing attempts.