hotdoc-rf-pending[.]com

Analysis indicates that hotdoc-rf-pending.com was registered on June 11 2026 through Global Domain Group LLC. The domain resolves to the IPv4 address 45.74.61.7, which is currently associated with a single security blocklist entry and is actively blocked by the PhishDestroy platform. VirusTotal reports that 17 of 91 scanning engines have flagged the domain as malicious, providing independent confirmation of its suspicious nature. The relatively recent creation date combined with the rapid appearance on blocklists suggests an opportunistic deployment, typical of generic phishing campaigns that aim to harvest credentials or financial information.

No publicly available TLS certificate information, HTTP status codes, or page title data were observed at the time of analysis, leaving the exact payload and impersonated brand unknown. Defenders should treat the domain as hostile: network perimeter controls should deny outbound connections to 45.74.61.7, DNS filtering policies should include hotdoc-rf-pending.com on block lists, and security monitoring solutions should generate alerts for any attempted communication.

Continued observation of the hosting infrastructure and periodic re‑scanning with VirusTotal or similar services are recommended to capture any evolution in the threat profile. Until further forensic evidence becomes available, the domain should be considered an active phishing threat and mitigated accordingly.