dpd[.]xvnplrqtmz[.]cyou

The domain dpd.xvnplrqtmz.cyou is identified as a high-risk phishing site. The threat category is generic_phishing, and there is no specific brand or drainer kit associated with this domain. The domain is actively used to deceive users and capture sensitive information.

Infrastructure analysis reveals that dpd.xvnplrqtmz.cyou is registered through Dominet (HK) Limited and resolves to the IP address 172.67.140.159, which is located in the United States and is part of AS13335 Cloudflare, Inc. The domain was created on May 28, 2026, and has been flagged by 15 out of 95 security vendors on VirusTotal. Google Safe Browsing has also identified this domain as a phishing site, and it appears on one known security blocklist. The site does not have an SSL certificate, which is a common indicator of a lack of security and potential malicious intent.

The current status of dpd.xvnplrqtmz.cyou is active, indicating ongoing threats. Response actions should include blocking access to the domain at the network level, educating users about the risks, and deploying additional monitoring tools to detect and prevent access attempts. Despite the current block by PhishDestroy and appearances on blocklists, the remaining risk is high, as not all security vendors have flagged the domain, and users may still be at risk if they bypass existing protections.