dpd[.]mtqvrpx[.]cfd

This domain, dpd.mtqvrpx.cfd, is identified as a high-risk brand impersonation phishing site targeting DPD, a well-known parcel delivery service. The site is designed to deceive users into entering sensitive information under the pretense of tracking a parcel or resolving a delivery issue. As of the latest assessment, the domain has been taken offline, though its infrastructure and historical activity remain relevant for security analysis. Analysis indicates the domain was flagged by 17 of 95 security vendors on VirusTotal, a notable indicator of malicious intent. It was registered through Aceville Pte. Ltd. on May 30, 2026, an unusually future-dated registration that may suggest domain spoofing or typosquatting tactics. The domain resolved to the IP address 104.21.11.200, which is associated with Cloudflare, a common obfuscation technique used to conceal the true hosting origin. Additionally, the domain appears on one security blocklist, and Google Safe Browsing has flagged it for social engineering. Technologies detected include Cloudflare and HTTP/3, further confirming the use of modern infrastructure to evade detection. Given the current offline status of dpd.mtqvrpx.cfd, immediate threats to users are mitigated. However, the domain's infrastructure and historical indicators warrant caution. Organizations and individuals are advised to block this domain at the network level to prevent potential future reactivation. Users who may have interacted with the site should monitor their accounts for unauthorized activity and consider resetting credentials for any services accessed during the suspected compromise. Security teams should treat this domain as a high-risk indicator and include it in threat intelligence feeds for proactive defense measures.