Suspicious

Phishings targeting DPD

Suspicious and active websites

Phishings targeting Dpd

Suspicious and active websites

Active
9
New (7d)
0
Trend (7d)
↓100%
Website
dpd.com
About
AIEuropean parcel-delivery lure - same 'redelivery fee' pattern as DHL, concentrated in DPD's core UK/DE/FR/PL markets.
Hosts
Cloudflare, Inc. (6) · Tencent Building, Kejizhongyi Avenue (1) · ParkLogic Pty Ltd (1)
Countries
United StatesUnited States (7) · SingaporeSingapore (1) · AustraliaAustralia (1)
TLS certs
YE2 (4) · YR1 (1) · YE1 (1)
Possible campaigns 4 of these are in a suspected cluster 52f8809ec852

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) ▾ URL Screenshot Flags Details
2026-11-01 11:30 2026-10-24 17:23
https://dpd-ios.rest
Screenshot of dpd-ios.rest GSB Details
2026-11-01 11:30 2026-10-22 23:23
https://dpd.bio
Screenshot of dpd.bio GSB Details
2026-11-01 11:30 2026-10-19 05:24
https://dpd-bexnaro.com
Screenshot of dpd-bexnaro.com GSB Details
2026-11-01 11:30 2026-10-18 23:23
https://dpd-ravlimo.com
Screenshot of dpd-ravlimo.com GSB Details
2026-11-01 11:30 2026-10-18 23:23
https://dpd-telvora.com
Screenshot of dpd-telvora.com GSB Details
2026-11-01 11:30 2026-10-18 17:24
https://dpd-calviro.click
Screenshot of dpd-calviro.click GSB Details
2026-11-01 11:30 2026-10-18 05:24
https://dpd-malvexa.click
Screenshot of dpd-malvexa.click GSB Details
2026-11-01 11:30 2026-10-08 23:24
https://dpdie.live
Screenshot of dpdie.live GSB Details
2026-11-01 11:30 2026-09-30 13:05
https://7443893.eu.cc/dpd-group/ch/#/index
Screenshot of 7443893.eu.cc GSB OpenPhish Details

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://dpd-ios.rest
GSB 		Screenshot of dpd-ios.rest Details
https://dpd.bio
GSB 		Screenshot of dpd.bio Details
https://dpd-bexnaro.com
GSB 		Screenshot of dpd-bexnaro.com Details
https://dpd-ravlimo.com
GSB 		Screenshot of dpd-ravlimo.com Details
https://dpd-telvora.com
GSB 		Screenshot of dpd-telvora.com Details
https://dpd-calviro.click
GSB 		Screenshot of dpd-calviro.click Details
https://dpd-malvexa.click
GSB 		Screenshot of dpd-malvexa.click Details
https://dpdie.live
GSB 		Screenshot of dpdie.live Details
https://7443893.eu.cc/dpd-gro…
GSB OpenPhish 		Screenshot of 7443893.eu.cc Details

AIHow to verify a real DPD URL

  • Legitimate DPD URLs always end in dpd.com (e.g. www.dpd.com, account.dpd.com). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not DPD.
  • The padlock icon proves TLS is active, not that the site is safe. Free DV certificates are issued to attackers in minutes; every active site listed above has a valid TLS certificate.
  • If you got the link from email, SMS, or social media, do not click it. Open dpd.com from your browser bookmark or type the domain manually.
  • Real DPD pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.