cpcontacts[.]129-121-102-216[.]cprapid[.]com

This domain, cpcontacts.129-121-102-216.cprapid.com, was registered through Tucows Domains Inc. on May 16 2019. The sub‑domain incorporates the IPv4 address 129.121.102.216, a pattern often observed in phishing infrastructure that points directly to a hosting endpoint. VirusTotal analysis shows that 17 of 91 security vendors have flagged the domain as malicious, indicating a non‑trivial detection consensus.

The domain is currently listed on three public blocklists and is actively blocked by the PhishDestroy, MetaMask, and SEAL filtering services. The threat intelligence record classifies the activity as generic phishing with a high risk rating and an active status as of the report date, 29 July 2026. No additional public evidence such as SSL certificate details, HTTP response codes, page title, or brand targeting has been released, leaving the exact payload or credential‑harvesting mechanism unverified.

Defenders should add the domain to network and DNS blocklists, monitor for any resolution of the embedded IP address, and ensure endpoint protection solutions are updated to recognize the 17 vendor detections. Continuous telemetry collection on related cprapid.com sub‑domains is recommended to detect potential expansion of the same infrastructure.