dpd[.]kznxplt[.]cfd
“dpd.kznxplt.cfd”
Kanıt özeti
The domain dpd.kznxplt.cfd was registered on May 29 2026 through Aceville Pte. Ltd. and is currently hosted on Cloudflare infrastructure (AS13335) with the IP address 172.67.145.55 located in the United States. DNS resolution points to the Cloudflare nameservers brit.ns.cloudflare.com and yadiel.ns.cloudflare.com, and the service is advertised as using HTTP/3. No TLS certificate was observed, indicating that the site does not provide HTTPS encryption. Google Safe Browsing has flagged the domain for social‑engineering content, and the site appears on a single external blocklist.
PhishDestroy has also taken the domain offline and listed it as malicious. VirusTotal analysis shows that 11 of 91 security vendors have marked the domain as suspicious, reinforcing the notion of malicious intent. The page title returned by the server is simply dpd.kznxplt.cfd, offering no additional context about the payload or the specific brand being spoofed. Because the site is presently offline, direct content analysis is not possible, leaving the exact phishing vector unconfirmed.
Defenders should immediately block DNS resolution for dpd.kznxplt.cfd and the associated IP 172.67.145.55 at network perimeter devices. Existing URL filtering and email security solutions that integrate Google Safe Browsing or PhishDestroy feeds should be updated to include this indicator. Traffic inspection tools should be configured to flag any HTTP/3 connections to the listed IP, and TLS inspection policies should be applied to detect attempts to serve content over an unencrypted channel. Continuous monitoring of newly registered domains that share the “dpd” keyword is advised, as the short lifespan of this domain suggests a rapid‑deployment phishing campaign.
Gönderilen kanıt anlık görüntüsü
- Gönderildi
- Kayıt defteri kayıtları
- 1
- Vaka kimliği
PD-20260531-49666D- Yakalanan sayfa başlığı
- dpd.kznxplt.cfd/com/
- PDF belgesi
- PDF kanıtı
Hukuki dayanak
Kanıtın tam metni
Acceptable Use Policy (AUP): The domain dpd.kznxplt.cfd is being utilized for phishing activities, which directly contravenes the AUP prohibiting illegal activities, fraud, and deception.
Terms of Service (TOS): The use of this domain for fraudulent purposes constitutes a violation of the TOS, which reserves the right to suspend or terminate services for such violations.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and the use of such access to commit fraud.
Wire Fraud Statute (18 U.S.C. § 1343): This statute criminalizes schemes to defraud individuals or entities through electronic communications.
CAN-SPAM Act (15 U.S.C. § 7701): This act regulates commercial email and prohibits deceptive practices in electronic communications.
Regulatory Note: Failure to address this matter promptly may result in regulatory scrutiny and potential legal consequences for non-compliance with applicable laws and your own policies. Immediate action is warranted to mitigate risk.
Data Coverage
Ağ Güvenliği İstihbaratı
Tehdit Müdahale Pipeline
Engelleme listesi kapsamı
10 izlenen harici kaynak · kayıtlı anlık görüntü 12.08.2026
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, TLS adları ve zaman damgaları
SHORTDOT BÖLGESİ · KAMUYA AÇIK KANIT
.cfd
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Registration: kznxplt.cfd
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For the registrable domain kznxplt.cfd behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknolojiler
2 yüksek güvenli teknoloji belirlendi
VirusTotal Analizi
Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin