dpd[.]plktrmzvqn[.]ink

This domain, dpd.plktrmzvqn.ink, is flagged as a generic phishing site impersonating DPD, a known logistics and parcel delivery service. Analysis indicates the domain was designed to mimic legitimate parcel tracking portals, likely to harvest user credentials or payment details under false pretenses. No specific drainer kit signatures were identified, but the infrastructure aligns with common phishing campaign patterns targeting e-commerce and delivery services. Infrastructure analysis reveals the domain was registered through Dominet (HK) Limited and resolves to the IP address 188.114.96.3. Detection metrics show 18 out of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on one external security blocklist. The domain employs Cloudflare as a content delivery network and supports HTTP/3, which may be used to evade detection or improve performance. No Google Safe Browsing (GSB) listing was recorded at the time of analysis. The domain is currently offline, likely taken down following detection by security systems. While no active threat remains, the infrastructure may be repurposed or re-registered under a different name. Users who interacted with the domain should assume credential exposure and monitor for unauthorized access. Organizations are advised to block the domain and IP in perimeter defenses and review logs for connections to 188.114.96.3. Remaining risk includes potential reuse of the registrar or hosting provider for future phishing operations.