85-215-175-92[.]cprapid[.]com

This domain, 85-215-175-92.cprapid.com, is currently flagged as an active cryptocurrency phishing infrastructure. Registered on May 16, 2019, through Tucows Domains Inc., it resolves to the IP address 85.215.175.92, hosted on AS8560 (IONOS SE) in Germany. Analysis indicates the domain is listed on two security blocklists, PhishDestroy and PhishingDB, and is assigned a trust score of 0 out of 100 by Gridinsoft. As of July 12, 2026, the domain remains operational, returning an HTTP 200 status with a page title of 'Page Suspended,' which may suggest either a placeholder or a deceptive tactic to avoid detection. The domain's SSL certificate is issued by home.pl S.A. under the 'home pl DV TLS G2 R35 CA' authority, and its nameservers are ns1.pdns.tech, ns2.pdns.tech, and ns3.pdns.tech. While 19 out of 95 security vendors on VirusTotal have flagged this domain, the exact nature of the phishing content remains unverified due to the lack of detailed page analysis. The classification as a cryptocurrency scam is based on prior intelligence, but no specific brand or platform is confirmed as the target. The current page title does not provide additional context about the intended deception. Defenders should treat this domain as high-risk infrastructure. The combination of a long-standing registration, active resolution, and blocklist presence suggests persistent malicious intent. Network-level blocking of the IP 85.215.175.92 and the domain itself is recommended, along with monitoring for related subdomains or IPs within the same ASN. Given the domain's age and continued activity, it may be part of a broader phishing campaign, though further investigation is required to determine the full scope of its operations. No evidence currently links this domain to other known phishing kits or threat actor groups.