45-32-94-105[.]cprapid[.]com

Analysis of the domain 45-32-94-105.cprapid.com indicates it was active as a generic phishing endpoint until taken offline on or before July 25, 2026. The domain, registered on February 21, 2026, through Tucows Domains Inc., resolved to the IP address 45.32.94.105, hosted under AS20473 (The Constant Company, LLC) in the United States. Infrastructure analysis reveals the domain utilized nameservers ns1.pdns.tech, ns2.pdns.tech, and ns3.pdns.tech, a configuration commonly observed in rapidly deployed phishing campaigns. The domain appears on one security blocklist, specifically PhishDestroy, and was flagged by 14 of 93 security vendors on VirusTotal, suggesting detection as malicious by a subset of the security community.

The SSL certificate was issued by Let's Encrypt (R12), a common choice for both legitimate and malicious sites due to its accessibility. The page title, matching the domain name (45-32-94-105.cprapid.com), provides no explicit indication of a targeted brand or service, and no additional content analysis is available to confirm the specific phishing lure or intended victim profile. At the time of reporting, the domain is offline, limiting further real-time assessment. Defenders should treat this domain as a confirmed malicious indicator, particularly in environments where phishing detection relies on blocklists or vendor signatures.

The absence of a known brand target or phishing kit in the available data precludes attribution to a specific campaign. Network logs should be reviewed for connections to 45.32.94.105 or the domain itself, and any associated credentials or session tokens should be invalidated if exposure is suspected. Given the domain's short lifespan and offline status, retrospective analysis of proxy or DNS logs may be necessary to identify affected systems.