45-79-149-117[.]cprapid[.]com

Analysis of the domain 45-79-149-117.cprapid.com shows that it was registered through Tucows Domains Inc. on February 21, 2026. The domain is currently listed as offline and has been taken down by the PhishDestroy takedown service. Infrastructure data reveal that the authoritative name servers are ns1.pdns.tech, ns2.pdns.tech, and ns3.pdns.tech, indicating reliance on the pdns.tech DNS hosting platform.

The domain appears on a single security blocklist and has been flagged by 17 of 93 security vendors on VirusTotal, supporting the classification as a generic phishing site. The page title returned by the web server is identical to the domain name, offering no additional context about the intended victim or lure. No public evidence of SSL certificates, HTTP response codes, Safe Browsing status, or Open Threat Exchange (OTX) mentions is available, leaving those aspects of the infrastructure unverified.

Defenders should continue to block the domain at network perimeter and DNS layers, monitor the associated name servers for any re‑use, and add the domain to internal threat‑intelligence feeds. Ongoing observation of the pdns.tech name server cluster is advisable, as adversaries may shift hosting to adjacent zones. Because the domain is already offline, immediate remediation focuses on preventing resurgence and ensuring that any related indicators (e.g., the name servers or the registrar) are incorporated into broader phishing mitigation strategies.