dpd[.]kzrpwlq[.]cfd

This domain, dpd.kzrpwlq.cfd, was identified as a fraudulent parcel delivery phishing site impersonating DPD logistics services. The site was designed to deceive visitors into entering sensitive personal and financial information under the pretense of tracking or delivering a package. Such phishing pages typically harvest credentials, payment details, or install malicious software through fake login portals or download prompts, posing a direct risk to user privacy and financial security.

Analysis indicates the domain was registered on May 30, 2024, through Aceville Pte. Ltd., a registrar frequently associated with high-risk domains. At the time of assessment, 18 out of 95 security vendors on VirusTotal flagged the domain as malicious, with Google Safe Browsing specifically categorizing it under SOCIAL_ENGINEERING. The domain resolved to IP address 104.21.78.67 and was protected by Cloudflare, a common tactic used to obscure hosting infrastructure and evade detection. The domain appeared on one security blocklist and was subsequently taken offline following enforcement action.

If you visited dpd.kzrpwlq.cfd or entered any information on the site, immediate action is required. Disconnect the affected device from the network to prevent potential data exfiltration. Run a full antivirus scan using updated security software to detect and remove any malware. Change passwords for all accounts accessed from the device, particularly those related to banking, email, or parcel services, using strong, unique credentials. Monitor financial statements for unauthorized transactions and consider placing a fraud alert with credit bureaus. Report the incident to local cybercrime authorities and provide them with the domain, IP address, and any interaction details for further investigation.