dpd[.]jprwlnz[.]cfd

PhishDestroy has identified dpd.jprwlnz.cfd as a generic phishing domain that is currently active and posing a high risk to users. The threat type is generic phishing, with the domain appearing to impersonate the DPD courier brand in an attempt to harvest login credentials or personal information. No specific drainer kit has been identified, but the page title matches the domain name, suggesting a barebones fake login page designed to trick victims into entering sensitive data.

Technical indicators paint a clear picture of malicious intent. VirusTotal reports 18 out of 95 security vendors flagging this domain as malicious, providing strong evidence of its dangerous nature. The domain was created on May 29, 2026, a recent date that aligns with freshly registered phishing infrastructure. It is registered through Aceville Pte. Ltd. and resolves to IP address 188.114.96.3. Google Safe Browsing flags the domain for phishing, and it already appears on one security blocklist, confirming its reputation as a threat.

As of this report, dpd.jprwlnz.cfd remains active online, meaning users may still encounter it in emails, SMS messages, or search results. PhishDestroy recommends that recipients avoid interacting with this domain entirely. If you have already submitted any information, change your passwords immediately and monitor accounts for unauthorized activity. Always verify the legitimacy of courier notifications by visiting the official DPD website directly rather than clicking links in unsolicited messages.