dpd[.]kznxplt[.]cfd
“dpd.kznxplt.cfd”
ملخص الأدلة
The domain dpd.kznxplt.cfd was registered on May 29 2026 through Aceville Pte. Ltd. and is currently hosted on Cloudflare infrastructure (AS13335) with the IP address 172.67.145.55 located in the United States. DNS resolution points to the Cloudflare nameservers brit.ns.cloudflare.com and yadiel.ns.cloudflare.com, and the service is advertised as using HTTP/3. No TLS certificate was observed, indicating that the site does not provide HTTPS encryption. Google Safe Browsing has flagged the domain for social‑engineering content, and the site appears on a single external blocklist.
PhishDestroy has also taken the domain offline and listed it as malicious. VirusTotal analysis shows that 11 of 91 security vendors have marked the domain as suspicious, reinforcing the notion of malicious intent. The page title returned by the server is simply dpd.kznxplt.cfd, offering no additional context about the payload or the specific brand being spoofed. Because the site is presently offline, direct content analysis is not possible, leaving the exact phishing vector unconfirmed.
Defenders should immediately block DNS resolution for dpd.kznxplt.cfd and the associated IP 172.67.145.55 at network perimeter devices. Existing URL filtering and email security solutions that integrate Google Safe Browsing or PhishDestroy feeds should be updated to include this indicator. Traffic inspection tools should be configured to flag any HTTP/3 connections to the listed IP, and TLS inspection policies should be applied to detect attempts to serve content over an unencrypted channel. Continuous monitoring of newly registered domains that share the “dpd” keyword is advised, as the short lifespan of this domain suggests a rapid‑deployment phishing campaign.
لقطة الأدلة المرسلة
- أُرسل
- سجلات الدفتر
- 1
- معرّف القضية
PD-20260531-49666D- عنوان الصفحة الملتقطة
- dpd.kznxplt.cfd/com/
- ملف PDF
- دليل PDF
الأساس القانوني
النص الكامل للدليل
Acceptable Use Policy (AUP): The domain dpd.kznxplt.cfd is being utilized for phishing activities, which directly contravenes the AUP prohibiting illegal activities, fraud, and deception.
Terms of Service (TOS): The use of this domain for fraudulent purposes constitutes a violation of the TOS, which reserves the right to suspend or terminate services for such violations.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and the use of such access to commit fraud.
Wire Fraud Statute (18 U.S.C. § 1343): This statute criminalizes schemes to defraud individuals or entities through electronic communications.
CAN-SPAM Act (15 U.S.C. § 7701): This act regulates commercial email and prohibits deceptive practices in electronic communications.
Regulatory Note: Failure to address this matter promptly may result in regulatory scrutiny and potential legal consequences for non-compliance with applicable laws and your own policies. Immediate action is warranted to mitigate risk.
Data Coverage
استخبارات أمن الشبكات
مسار الاستجابة للتهديدات Pipeline
تغطية قوائم الحظر
١٠ مصادر خارجية مراقبة · لقطة محفوظة 13/08/2026
لقطة محفوظة
معلومات النطاق
التفاصيل التقنيةDNS وأسماء TLS والطوابع الزمنية
نطاق SHORTDOT · أدلة عامة
.cfd
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Registration: kznxplt.cfd
الاعتماد وسياق RAA
الاعتماد وسياق RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain kznxplt.cfd behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
التقنيات
حُدّدَت تقنيتان عاليتا الثقة
تحليل VirusTotal
هل تأثرت بهذا الموقع؟
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.
تحقق من أي نطاق
تحليل التهديدات باستخدام قائمة الحظر المخزنة، وWHOIS، وDNS، وأدلة الفحص العامة
امسح الآنالإبلاغ عن محاولة تصيد احتيالي
أرسل النطاقات المشبوهة إلى قاعدة بيانات التهديدات الخاصة بنا — ساهم في حماية المجتمع
إبلاغتحديثات فورية حول التهديدات
تقارير التصيد الاحتيالي الأخيرة وتغييرات التوفر الملحوظة
مراقبةابقَ على اطلاع، وابقَ آمنًا
راقب التهديدات في الوقت الفعلي أو اعترض على هذا الإدراج إذا كنت تعتقد أنه إنذار كاذب