68-221-27-73[.]cprapid[.]com

Analysis of the domain 68-221-27-73.cprapid.com indicates an elevated risk profile consistent with a generic phishing campaign. The domain was registered through Tucows Domains Inc. on May 16, 2019 and is currently serviced by the authoritative name servers ns1.pdns.tech, ns2.pdns.tech, and ns3.pdns.tech. VirusTotal records show that six of ninety‑one AV engines have flagged the domain, suggesting that a subset of security products have identified malicious characteristics.

The domain is listed on a single external blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the likelihood of phishing activity. No further public intelligence such as Safe Browsing or OTX entries is available, leaving the broader ecosystem context uncertain. Defenders should treat any traffic to or from this host as hostile, enforce outbound filtering, and consider adding the domain to internal blocklists.

Continuous monitoring of the associated name servers and any future VirusTotal scans is advised to capture changes in detection ratios. Because the registration date predates the current campaign, the infrastructure may be repurposed from older assets, highlighting the importance of periodic re‑evaluation of legacy domains that suddenly appear in threat feeds.