dpd[.]tmzqrvxpln[.]cfd

This domain, dpd.tmzqrvxpln.cfd, has been assessed as presenting a generic phishing threat. Infrastructure analysis indicates the domain is currently offline, reducing immediate exposure while not eliminating the possibility of future reuse or related infrastructure appearing elsewhere. The observed configuration suggests short-lived deployment characteristics commonly associated with phishing campaigns, and the available evidence supports maintaining an elevated risk classification until the infrastructure lifecycle is fully concluded.

Technical indicators show that 14 of 95 VirusTotal vendors flagged the domain as malicious. The domain appears on 1 security blocklist and resolves to IP address 188.114.97.3. Registration records indicate the domain was created on May 28, 2026, through Aceville Pte. Ltd. Detected technologies include Cloudflare and HTTP/3. The recorded page title matched the domain name itself, and available intelligence confirms the domain has been taken offline. These indicators collectively suggest infrastructure with a limited operational lifespan that attracted measurable security detections during its active period.

Although the domain is no longer reachable, historical detection data warrants continued monitoring for related indicators, including similar domain naming patterns, associated IP infrastructure, and newly registered domains using comparable characteristics. Security teams should retain the identified indicators within detection and blocking policies, review historical network and authentication logs for prior communications involving the domain, and investigate any endpoints that previously accessed it. Maintaining defensive monitoring is recommended because offline phishing infrastructure may be replaced by successor domains using comparable registration patterns, hosting characteristics, or technical configurations.