cpcd[.]org[.]br

The domain cpcd.org.br is currently active and classified as a high‑risk generic phishing site. Infrastructure analysis shows the zone is hosted on Cloudflare, using nameservers arvind.ns.cloudflare.com and gloria.ns.cloudflare.com, and resolves to the IP address 104.21.45.61. The site presents a valid Let's Encrypt certificate issued to YE1, which does not mitigate the malicious intent. Registration data indicate the domain was created on 20 October 1998, suggesting the attacker is leveraging an aged domain to improve reputation. The domain appears in three AlienVault OTX threat‑intel pulses, confirming prior detection by the community. VirusTotal scans report that three of ninety‑one security vendors flagged the domain, reinforcing the suspicion of malicious use. No additional technical details such as payload, landing page content, or targeted brand have been disclosed, so the exact phishing scenario remains unknown. Defenders should add cpcd.org.br to blocklists at the DNS and proxy layers, monitor outbound connections to the resolved IP, and consider sinkholing the domain to disrupt any ongoing campaigns. Continuous re‑evaluation is advised, as the domain may be repurposed or further indexed by additional intelligence sources.