217-154-250-70[.]cprapid[.]com

Analysis of the domain 217-154-250-70.cprapid.com shows that it was registered on February 21, 2026 through Tucows Domains Inc. and resolves to the IP address 217.154.250.70, which belongs to the German hosting provider IONOS SE (ASN8560). The infrastructure is served by Apache HTTP Server and does not present an SSL certificate, indicating that any data exchanged would be transmitted in clear text. The site’s page title is reported as "Page Suspended," and the domain is currently offline, limiting direct observation of malicious content. Threat intelligence flags the domain as a generic phishing campaign with a specific Account Takeover scam classification and an elevated risk rating.

Detection data from VirusTotal indicates that 13 of 95 security vendors have flagged the domain, and it appears on a single blocklist operated by PhishDestroy. Independent reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. Nameservers ns1.pdns.tech, ns2.pdns.tech, and ns3.pdns.tech are associated with the domain, which may be reused for future campaigns.

Uncertainty remains regarding the exact payload or credential‑harvesting mechanisms because the site is taken offline and no SSL or page content can be inspected. Defenders should immediately block the domain and its resolved IP at network perimeters, add the IP and associated ASN to threat‑intel feeds, and monitor for any new domains registered with the same registrar or using the same nameserver set. Continuous observation of IONOS SE hosting activity and periodic re‑scans of the domain are recommended to capture any re‑activation attempts.