Suspicious

Phishings targeting DPD

Suspicious and active websites

Phishings targeting Dpd

Suspicious and active websites

Active
6
New (7d)
3
Trend (7d)
↑50%
Website
dpd.com
About
AIEuropean parcel-delivery lure - same 'redelivery fee' pattern as DHL, concentrated in DPD's core UK/DE/FR/PL markets.
Hosts
Cloudflare, Inc. (3) · Akamai Connected Cloud (2) · ACE (1)
Countries
United StatesUnited States (5) · SingaporeSingapore (1)
TLS certs
YE2 (2) · WE1 (1) · DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1 (1)
Possible campaigns 5 of these are in a suspected cluster 928dfd7bcf4d

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) ▾ URL Screenshot Flags Details
2026-09-21 21:30 2026-09-20 17:26
https://dpd-ie-edit.com
Screenshot of dpd-ie-edit.com GSB Details
2026-09-21 21:30 2026-09-20 17:25
https://dpd-ie.xin
Screenshot of dpd-ie.xin GSB Details
2026-09-21 21:30 2026-09-16 23:25
https://dpdr.live
Screenshot of dpdr.live GSB Details
2026-09-21 21:30 2026-09-11 05:25
https://dpdn62.click
Screenshot of dpdn62.click GSB Details
2026-09-21 21:30 2026-09-10 13:08
https://light-aquamarine-o9esov3l-dpdycnoyj29j.edgeone.dev
Screenshot of light-aquamarine-o9esov3l-dpdycnoyj29j.edgeone.dev OpenPhish Details
2026-09-21 21:30 2026-08-26 05:24
https://dpdi.xyz
Screenshot of dpdi.xyz GSB Details

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://dpd-ie-edit.com
GSB 		Screenshot of dpd-ie-edit.com Details
https://dpd-ie.xin
GSB 		Screenshot of dpd-ie.xin Details
https://dpdr.live
GSB 		Screenshot of dpdr.live Details
https://dpdn62.click
GSB 		Screenshot of dpdn62.click Details
https://light-aquamarine-o9es…
OpenPhish 		Screenshot of light-aquamarine-o9esov3l-dpdycnoyj29j.edgeone.dev Details
https://dpdi.xyz
GSB 		Screenshot of dpdi.xyz Details

AIHow to verify a real DPD URL

  • Legitimate DPD URLs always end in dpd.com (e.g. www.dpd.com, account.dpd.com). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not DPD.
  • The padlock icon proves TLS is active, not that the site is safe. Free DV certificates are issued to attackers in minutes; every active site listed above has a valid TLS certificate.
  • If you got the link from email, SMS, or social media, do not click it. Open dpd.com from your browser bookmark or type the domain manually.
  • Real DPD pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.