cpcontacts[.]20-244-0-63[.]cprapid[.]com

The domain cpcontacts.20-244-0-63.cprapid.com is currently classified as high risk for phishing based on multiple indicators as of August 06, 2026. Technical analysis shows that the domain resolves to IP address 20.244.0.63 and remains active at this time. Security telemetry from VirusTotal reports that 14 out of 91 security vendors have flagged this domain for phishing, providing substantial consensus among threat detection engines. The domain has also been blocked by PhishDestroy and appears on at least one independent security blocklist, reinforcing the assessment of malicious intent or behavior.

The domain is registered via cPanel Rapid, a platform commonly used for rapid provisioning of hosting resources. Notably, its nameservers are not found, which may indicate an atypical or deliberately obscured DNS configuration. This DNS anomaly can be characteristic of domains used in phishing campaigns, as threat actors frequently manipulate DNS records to evade detection and takedown efforts.

There is no evidence in the available data regarding the specific web content, targeted brands, or scam type associated with this domain. The page title and content have not been analyzed, so defenders cannot yet confirm the exact tactics or lures being employed. However, the current technical and threat intelligence context justifies immediate defensive actions.

Defenders should block cpcontacts.20-244-0-63.cprapid.com and its resolving IP at both network and endpoint layers. Security teams are advised to monitor for any traffic to or from this domain, as well as investigate related infrastructure. Continued observation is recommended in case the domain’s status or associated indicators change. The domain should remain on blocklists until it is proven inactive and no longer presents a threat.