dpd[.]kznxplt[.]cfd

The domain dpd.kznxplt.cfd was registered on May 29 2026 through Aceville Pte. Ltd. and is currently hosted on Cloudflare infrastructure (AS13335) with the IP address 172.67.145.55 located in the United States. DNS resolution points to the Cloudflare nameservers brit.ns.cloudflare.com and yadiel.ns.cloudflare.com, and the service is advertised as using HTTP/3. No TLS certificate was observed, indicating that the site does not provide HTTPS encryption. Google Safe Browsing has flagged the domain for social‑engineering content, and the site appears on a single external blocklist.

PhishDestroy has also taken the domain offline and listed it as malicious. VirusTotal analysis shows that 11 of 91 security vendors have marked the domain as suspicious, reinforcing the notion of malicious intent. The page title returned by the server is simply dpd.kznxplt.cfd, offering no additional context about the payload or the specific brand being spoofed. Because the site is presently offline, direct content analysis is not possible, leaving the exact phishing vector unconfirmed.

Defenders should immediately block DNS resolution for dpd.kznxplt.cfd and the associated IP 172.67.145.55 at network perimeter devices. Existing URL filtering and email security solutions that integrate Google Safe Browsing or PhishDestroy feeds should be updated to include this indicator. Traffic inspection tools should be configured to flag any HTTP/3 connections to the listed IP, and TLS inspection policies should be applied to detect attempts to serve content over an unencrypted channel. Continuous monitoring of newly registered domains that share the “dpd” keyword is advised, as the short lifespan of this domain suggests a rapid‑deployment phishing campaign.