rh-ofac[.]xyz

This domain, rh-ofac.xyz, was registered on July 15, 2026, through Web Commerce Communications Limited (WebNic.cc) and is currently active. Infrastructure analysis reveals it resolves to the IP address 188.114.96.3 and uses Cloudflare nameservers (arturo.ns.cloudflare.com and kimora.ns.cloudflare.com). As of July 16, 2026, three of ninety-one security vendors on a widely used scanning platform have flagged the domain as malicious, indicating early detection of phishing-related activity. The domain name incorporates 'OFAC,' a term associated with the U.S. Office of Foreign Assets Control, suggesting a likely credential phishing campaign targeting individuals or organizations interacting with financial sanctions programs. No specific brand impersonation or scam subtype has been confirmed at this stage, and the exact content of the site remains unanalyzed. Defenders should treat this domain as high-risk and prioritize blocking or monitoring access to it. Given the recent registration and low but growing detection rate, further investigation into associated infrastructure, such as the hosting IP and linked domains, is recommended to identify related threats. Network-level protections, including DNS filtering and endpoint detection rules, should be implemented to mitigate potential exposure.