72-146-195-11[.]cprapid[.]com

The domain 72-146-195-11.cprapid.com resolves to the IPv4 address 72.146.195.11, which is allocated to an Italian hosting location under AS8075 belonging to Microsoft Corporation. No TLS certificate is presented for the host, indicating that connections are served over clear HTTP only. A HTTP request to the domain returned the page title "Default Web Site Page," which is a generic placeholder often used for unconfigured web servers. The domain was registered on May 16, 2019 through Tucows Domains Inc., and its authoritative name servers are listed as ns1.pdns.tech, ns2.pdns.tech, and ns3.pdns.tech.

Security monitoring shows that the domain appears on a single public blocklist and is actively blocked by the PhishDestroy feed, reinforcing its association with malicious activity. VirusTotal scans have recorded that 12 of 93 antivirus and URL‑reputation engines flagged the domain, providing additional independent confirmation of its suspicious nature. The current operational status is marked as offline, which may be a takedown or a temporary unavailability, but the historical evidence points to a generic phishing campaign that leveraged the domain to host deceptive content.

Defenders should continue to enforce blocks on the domain and its associated IP address, monitor DNS queries for any reappearance, and incorporate the domain into internal threat‑intel feeds. Given the lack of SSL and the generic page title, any future re‑activation would likely repeat the same low‑complexity phishing tactics. Ongoing vigilance is recommended, including periodic re‑scanning of the domain should it come back online, to capture any changes in payload or hosting infrastructure.