Security Scan Report: mydpd.xwfku.top

Redirected to:
https://mydpd.xwfku.top/track-ch/#/index
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 13 HTTP transactions. The main domain is xwfku.top.

Submitted URL: https://mydpd.xwfku.top/track-ch

Effective URL:
https://mydpd.xwfku.top/track-ch/#/index
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

DPD-branded parcel-failure lure on the deceptive host mydpd.xwfku.top, flagged by Google Safe Browsing for social engineering and by two HIGH IDS .top alerts. Brand impersonation phishing; do not enter data.

Risk Factors (6)
Google Safe Browsing social-engineering (phishing) detection on the scanned URL
Brand impersonation of DPD on a non-official domain
Deceptive hostname mixing the DPD brand with an unrelated .top domain
Two HIGH-severity IDS alerts for hostile .top domain traffic
Domain not present in Cisco Umbrella top 1M while wearing a major courier brand
Classic parcel-delivery 'address could not be verified, action required' social-engineering lure
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'mydpd.xwfku.top' on the .top top-level domain and includes subdomain 'mydpd'. Count 5 characters in 'xwfku' split between one vowel and four consonants. Tokenizing the label suggests 4 words: x, w, f, ku. Median word length is 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mydpd.xwfku.top/track-ch

Page Load Overview

2.86s
Total Load Time
442 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:41%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,393 chars
Detector Agreement:67%
Language mismatch: Declared as en but detected as de

Website Classification

Primary Category

social media network87% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
87%
technology software
66%
government public service
60%
adult content
51%
cryptocurrency blockchain
43%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13209.141.47.167Las Vegas, Nevada, United States
AS53667FranTech Solutions
131--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T138F37D3499012427963F5FD1A32537882F9AE34FC88649187D9C864BCFD7DA2F829C76

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:z/4FZzB3WMBtIYdYuLWj/4FZ3B3WMBtIYdYuLEC:z/G/IYdYaWj/g/IYdYaEC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:163763:n5s4AwQCFAAASiAQmAEgSiYECAURkGLqgIgAESAOAICEgSMARQNIIh6SrBcyRGhIYCIUggbAADoTYA4pBKgDIJUAYBBAgJRE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fbe3e1c1c3c3c3c7
Perceptual Hash:e9c9928c961bc736
Difference Hash:8303032b07233b0c
Wavelet Hash:fbe3c181c1c1c3c7
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data