dpd[.]vrtxqplznm[.]cfd

PhishDestroy has identified the domain dpd.vrtxqplznm.cfd as a high-risk generic phishing threat, specifically impersonating the DPD courier brand to steal login credentials and personal information. This domain was registered through Aceville Pte. Ltd. and employs a deceptive page title matching the domain name to trick visitors into believing they are on a legitimate DPD tracking or delivery page. No specific drainer kit was detected, but the site likely uses credential harvesting forms.

The technical indicators are severe: VirusTotal flagged this domain with a score of 15 out of 95 security vendors, indicating broad consensus on its malicious nature. The domain was created on May 28, 2026, and resolves to IP address 172.67.177.103. Google Safe Browsing explicitly flags it as phishing, and it appears on one security blocklist. Notably, the site lacks an SSL certificate, which is a strong red flag for any site handling sensitive data.

As of the latest check, the domain is offline, suggesting it may have been taken down by the hosting provider or registrar. However, the risk remains that similar domains could appear under different subdomains or TLDs. Users who may have visited the site should change any passwords entered and monitor accounts for unauthorized activity. PhishDestroy advises avoiding any interaction with such domains and reporting them to relevant authorities. Check the full report for more details on this and related threats.