dpd[.]plzqtrvnmx[.]icu

PhishDestroy identifies dpd.plzqtrvnmx.icu as a high-risk domain engaged in generic phishing, specifically targeting users through brand impersonation to steal login credentials. The domain mimics the legitimate DPD parcel delivery service, luring victims into submitting personal information under the guise of tracking a package. This type of credential theft can lead to account takeover, identity fraud, and financial loss if sensitive details are captured.

Technical analysis reveals concerning indicators. VirusTotal reports that 13 out of 95 security vendors flag this domain as malicious, underscoring its dangerous reputation. The domain was registered on May 28, 2026, through Dominet (HK) Limited, a registrar often associated with questionable domains. It resolves to IP address 172.67.167.120 and appears on at least one security blocklist. Notably, the domain lacks an SSL certificate, meaning any data transmitted is unencrypted and easily intercepted. Google Safe Browsing also flags it for phishing, further confirming the threat. The page title "dpd.plzqtrvnmx.icu/com/" suggests an attempt to appear as a subdirectory of a legitimate site.

Users who have visited this domain should immediately change any passwords entered on the page and enable multi-factor authentication on affected accounts. They should also monitor financial statements for unauthorized transactions and consider running a security scan to check for malware. PhishDestroy advises blocking the domain and reporting it to relevant authorities to prevent further victimization.