dpd[.]ie-package[.]icu

Analysis as of July 24 2026 indicates that the domain dpd.ie-package.icu was registered on June 22 2026 through Aceville Pte. Ltd. The domain resolves to IP 172.67.218.74, which belongs to Cloudflare’s AS13335 network and is hosted in the United States. The presence of Cloudflare nameservers brit.ns.cloudflare.com and yadiel.ns.cloudflare.com confirms the use of Cloudflare’s DNS and CDN services. The TLS certificate presented by the site is issued by Google Trust Services under the WE1 designation, suggesting a valid‑looking HTTPS connection despite the malicious intent. Google Safe Browsing has flagged the domain for social engineering, and four of ninety‑one VirusTotal scanners have generated detections, indicating that multiple security products consider the site malicious.

The Gridinsoft trust score of 0 out of 100 further corroborates the low credibility of the infrastructure. The domain is currently listed on one public blocklist and has been actively blocked by the PhishDestroy sinkhole, demonstrating that at least one anti‑phishing organization has taken remediation steps. The primary threat associated with the domain is a delivery‑scam campaign, as indicated by the threat type label. No additional content analysis—such as page title, brand targeting, or payload details—has been published, so the exact tactics employed by the actors remain unknown.

Defenders should continue to block connections to 172.67.218.74 and add dpd.ie-package.icu to internal deny lists. Monitoring of DNS queries for the associated Cloudflare nameservers can help detect any re‑activation attempts. Because the domain was taken offline, any future resurrection would likely reuse the same infrastructure; therefore, threat‑intel feeds should be updated with the registration and hosting details to enable early detection.