rpcresolvehub[.]org

Analysis indicates that rpcresolvehub.org is currently active and was registered on July 08, 2026 through Namecheap Inc. The domain resolves to the IPv4 address 198.54.115.202 and uses the authoritative name servers dns1.namecheaphosting.com and dns2.namecheaphosting.com, both associated with Namecheap’s hosting service. The domain appears on three public security blocklists and is explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services, confirming its classification as a phishing infrastructure. VirusTotal reports that one of ninety‑one scanned security vendors flagged the domain, providing additional corroboration of malicious intent. The available intelligence does not include SSL certificate details, HTTP response codes, page title, or any observed content, leaving the exact landing page characteristics unknown.

No additional context such as associated campaign identifiers, malware kits, or victim targeting is present in the current data set. The lack of further attributes limits attribution beyond the observed hosting and registration details. Given the high‑risk rating and the confirmed presence on multiple blocklists, defenders should enforce network‑level deny rules for rpcresolvehub.org and its resolved IP address 198.54.115.202. Endpoint security solutions that reference the listed blocklists should be updated to include this domain.

Continuous monitoring of the domain’s DNS records is recommended to detect any future changes to name servers or IP addresses. Where feasible, threat‑intel platforms should be queried for any emerging indicators that may expand the current profile. Until additional evidence is gathered, the domain should be treated as a confirmed phishing vector and blocked across all ingress and egress points.