dpd[.]tracks-bag[.]icu

Is dpd.tracks-bag.icu safe? PhishDestroy flags this domain as an active fake DPD tracking scam designed to steal your package details and personal data. Scammers impersonate DPD’s legitimate tracking portal to trick users into entering sensitive information like delivery addresses, phone numbers, or even payment details under the guise of resolving a fake shipping issue. Once submitted, the stolen data is used for fraudulent purchases, identity theft, or sold on dark web markets, putting your financial and personal security at elevated risk.

PhishDestroy confirms this threat based on verified intelligence: the domain was registered on March 27, 2026, through Gname.com Pte. Ltd., and is already flagged by 13 out of 95 VirusTotal security vendors. It resolves to IP address 43.165.3.85 and uses a Let’s Encrypt SSL certificate, which provides a false sense of legitimacy but does not guarantee safety. The recent creation date and low detection rate suggest this campaign is newly deployed and actively evolving.

If you visited dpd.tracks-bag.icu, stop interacting with the site immediately. Do not enter any personal or payment information. Scan your device using updated antivirus software and change any passwords that may have been reused on the site. Report the domain to your email provider, browser, and platforms like Google Safe Browsing. If you entered payment details, contact your bank to block or replace the card. Monitor your accounts for unauthorized transactions and consider freezing credit reports if sensitive data was exposed. Stay alert for follow-up phishing attempts using your stolen credentials.