dpd[.]rqtmzql[.]cfd

The domain dpd.rqtmzql.cfd has been identified as a generic phishing threat. It was set up to potentially impersonate legitimate delivery services to collect sensitive user information or credentials. Although no specific brand drainer kit is mentioned, the domain's configuration suggests malicious intent, given the phishing classification and its presence on security blocklists.

Technical analysis shows that the domain resolves to the IP address 104.21.70.206 and was registered through Aceville Pte. Ltd. on May 29, 2026. VirusTotal reports this domain is flagged by 18 out of 95 security vendors, indicating a significant risk. Furthermore, Google Safe Browsing categorizes this domain under "SOCIAL_ENGINEERING," which supports the phishing classification. Its trust score is critically low at 0/100 according to Gridinsoft, and it appears on one security blocklist, specifically blocked by PhishDestroy.

Currently, the status of dpd.rqtmzql.cfd is offline, which mitigates immediate threats. However, given its initial high-risk nature, users should remain cautious and ensure that no residual threats are accessible through cached pages or similar domains. It is recommended to monitor for any related domains that may use similar tactics to execute phishing attacks, and to update security software to recognize and block similar threats proactively.