45-61-148-254[.]cprapid[.]com

Analysis indicates that the domain 45-61-148-254.cprapid.com was registered on May 16, 2019 through Tucows Domains Inc. and is currently offline. The authoritative name servers ns1.pdns.tech, ns2.pdns.tech, and ns3.pdns.tech resolve the hostname to the IP address 45.61.148.254, which belongs to AS14956 RouterHosting LLC and is geolocated in the United States. No SSL certificate is present for the site, and the HTTP response returns the generic page title "Default Web Site Page," providing no additional context about the content or intended victim brand.

Reputation scoring from Scamadviser assigns a trust rating of 1 out of 100, underscoring a high likelihood of malicious intent. VirusTotal reports that 16 of 95 security vendors have flagged the domain, and it is listed on a single public blocklist, with PhishDestroy confirming active blocking. The limited detection footprint and the absence of a TLS layer suggest a low‑cost phishing infrastructure possibly leveraged for credential harvesting or redirecting traffic to downstream malicious sites.

Uncertainty remains regarding the specific brand or service being impersonated, as no indicators of a target were observed. Defenders should add the domain and its associated IP address to network deny lists, monitor DNS queries for the listed name servers, and ensure that any inbound traffic to the IP is dropped. Continuous re‑evaluation is advised should the domain become active again or additional intelligence emerge.