dpd.bzqwnp.ink
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of dpd.bzqwnp.ink
The domain dpd.bzqwnp.ink appears to be a very recently registered subdomain-style host using the .ink top-level domain. Based on the hostname, it may be attempting to reference or resemble the well-known DPD parcel delivery brand, which is commonly associated with shipping notifications, package tracking, and delivery-related communications. No clear legitimate business identity, publisher information, or established organizational presence is evident from the scan data provided.
The domain does not appear to belong to an official, widely recognized DPD web property. Its unusual structure, lack of ranking, and very recent registration may indicate that it was set up for a narrow or temporary purpose rather than as part of a long-standing public-facing website. Based on the available indicators, it may be intended to present delivery-themed content or messaging, potentially to attract users expecting shipment updates.
Safety Assessment for dpd.bzqwnp.ink
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 17 out of 91 security engines, with many of those detections classifying it as phishing or otherwise malicious. In addition, it was listed by a major safe-browsing database for social engineering, and a DNS-based threat list also showed a listing. Those are stronger indicators than a single heuristic alert and suggest broader security consensus rather than an isolated false positive.
The domain is also only 9 days old, has no established traffic ranking, and uses a hostname that closely resembles a known parcel-delivery brand while not appearing to be an official domain for that company. That kind of resemblance may indicate a look-alike setup intended to exploit user trust in shipping notifications or package-delivery messages. Although one malware scan reported no embedded malicious files at the time of inspection, phishing pages often contain little or no downloadable malware and can still present credential-theft or payment-fraud risks.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served through Cloudflare infrastructure and resolved to IP address 188.114.96.2, with hosting geolocated to Toronto, Canada based on available IP data. It presented a valid Let's Encrypt SSL certificate expiring on 2026-08-14, which indicates encrypted transport was available at the time of the scan. However, the presence of HTTPS should not be treated as proof of legitimacy, since low-cost or automated certificates are commonly used by both legitimate and abusive sites.
DNSSEC appears to be unsigned, so there is no additional DNS integrity protection indicated in the provided records. The domain uses Cloudflare nameservers and was registered very recently through Dominet (HK) Limited. From a technical risk perspective, the strongest concerns are not the TLS setup itself but the combination of recent registration, lack of reputation history, blacklist presence, and multi-engine phishing detections.
Share your experience with this website. Was it safe? Did you encounter any issues?