68-210-98-112[.]cprapid[.]com

The domain 68-210-98-112.cprapid.com is currently active and has been identified as a phishing threat by 7 out of 91 vendors on VirusTotal. This domain is hosted on an IP address registered to Microsoft Corporation in Austria, and it uses a Let's Encrypt SSL certificate. Despite being created in 2019, it was flagged by PhishDestroy on June 19, 2026, indicating recent malicious activity.

The domain's presence on a public blocklist, specifically PhishDestroy's, underscores its potential threat to users. With a platform risk score of 78 out of 100, it represents a significant risk, especially given its active status. The use of a reputable registrar, TUCOWS.COM, CO., and a trusted SSL issuer like Let's Encrypt, may lend it an appearance of legitimacy, potentially deceiving users into trusting it.

The fact that 7 vendors have flagged it as malicious suggests that it is a well-documented threat, although it has managed to evade detection by the majority of security vendors. This highlights the importance of early detection systems like PhishDestroy's, which can identify threats before they are widely recognized by traditional antivirus solutions. The domain's association with a Microsoft Corporation ASN might also be a tactic to exploit trust in well-known organizations.