dpd[.]plwztnq[.]cfd

The domain dpd.plwztnq.cfd is identified as a high-risk phishing site specifically designed to impersonate DPD, a legitimate parcel delivery service. Analysis confirms this domain as a brand impersonation threat, currently offline but previously active in credential harvesting campaigns. The page title matches the domain name, reinforcing its deceptive intent to mimic official DPD communications and trick users into entering sensitive information. Infrastructure analysis reveals the domain resolves to the IP address 188.114.96.3 and was registered through Aceville Pte. Ltd. on May 30, 2026, an unusually future-dated registration likely indicative of fraudulent activity. Security vendors on VirusTotal flagged this domain at a rate of 18 out of 95, while Google Safe Browsing classified it under SOCIAL_ENGINEERING. The domain appears on one security blocklist, and its hosting infrastructure leverages Cloudflare with HTTP/3 support. Detection by PhishDestroy further corroborates its malicious classification. At present, dpd.plwztnq.cfd has been taken offline, reducing immediate risk to end users. However, the domain’s infrastructure and registration details suggest it may resurface under a different name or IP. Organizations and individuals are advised to block the domain and its associated IP at the network level. Users who interacted with this domain should reset credentials for any accounts accessed during the exposure window, particularly those tied to parcel delivery services. Monitoring for similar domains registered via Aceville Pte. Ltd. or resolving to 188.114.96.3 is recommended for proactive threat mitigation.