dpd[.]tnplzrq[.]cfd

This domain, dpd.tnplzrq.cfd, is identified as a generic phishing site targeting users of delivery services. Analysis indicates the domain mimics DPD, a legitimate parcel logistics provider, to deceive victims into entering personal and financial information under false pretenses of package tracking or delivery confirmation. No associated drainer kit has been confirmed, but the domain exhibits classic phishing infrastructure characteristics, including the absence of an SSL certificate and reliance on Cloudflare hosting to obscure its origin. Infrastructure analysis reveals concrete technical indicators of compromise. The domain resolves to IP address 188.114.97.3, hosted on AS13335 (Cloudflare, Inc.), and was registered on May 29, 2026, through Aceville Pte. Ltd. Google Safe Browsing explicitly flags it as phishing, while VirusTotal reports 13 out of 95 security vendors detecting malicious activity. The domain appears on one security blocklist and is actively blocked by at least one threat intelligence feed. Notably, the creation date suggests either a typo or an attempt to evade detection by appearing futuristic, though this does not align with standard registration practices. As of the latest assessment, dpd.tnplzrq.cfd remains active and continues to pose a high risk to users. No takedown or sinkholing has been observed, and the domain lacks basic security measures such as SSL encryption, increasing the likelihood of credential interception. Users are advised to avoid interacting with the site, and network administrators should implement blocking at the DNS or IP level. Given the domain's persistence and the use of a reputable CDN provider, further monitoring is recommended to track potential shifts in infrastructure or additional malicious payloads.