apiresolvehub[.]com

The domain apiresolvehub.com was registered on 2025-10-16 through Hostinger Operations, UAB and is currently listed as offline. The site presented the page title “API Reset Portal” and claimed to be an “API Reset” service, a typical lure for wallet or seed credential theft. The infrastructure resolves to the IPv4 address 92.112.189.191, which belongs to AS47583 Hostinger International Limited and is geolocated in the United States. No TLS certificate is deployed, meaning the site operated over plain HTTP only.

The domain is hosted on the default parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. Reputation checks show a Gridinsoft trust score of 0 out of 100, indicating a completely untrusted profile. VirusTotal analysis recorded eight detections out of ninety‑five scanned security vendors, confirming malicious classification by multiple engines. The domain appears on four independent blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—each flagging it as a wallet/seed phishing site that impersonates the decentralized exchange aggregator 1inch.

Defenders encountering traffic to apiresolvehub.com should block the domain at the network perimeter and update URL filtering rules to include the four blocklists. Because the site is already offline, any ongoing campaigns likely rely on cached or previously harvested URLs; threat‑hunters should search for related indicators such as the IP address 92.112.189.191, the hosting ASN, and the observed page title. Continuous monitoring of the host’s IP range is advised in case the operators redeploy the phishing page on a new domain. The combination of low trust scores, multiple vendor detections, and explicit brand impersonation underscores the elevated risk associated with this infrastructure.