rpcautoresolve[.]vercel[.]app

The domain rpcautoresolve.vercel.app was created on February 21, 2026 through Tucows Domains Inc. and resolves to the IP address 64.29.17.67, which is owned by Amazon.com, Inc. (AS16509) in the United States. The site hosted on Vercel presented the HTTP status code 451 and the page title "Deployment Unavailable," indicating that the content was taken offline, likely in response to abuse reports. TLS termination is provided by a Google Trust Services certificate (WR1), confirming the use of a legitimate certificate authority but not mitigating the underlying malicious intent.

VirusTotal analysis recorded 10 detections out of 93 security vendors, and the domain is listed on two independent blocklists, specifically PhishDestroy and ScamSniffer. The technology fingerprint includes Vercel and HSTS, and the observed scam type is classified as a crypto scam. While the site is currently offline, the infrastructure details demonstrate a typical abuse pattern where a legitimate hosting platform is leveraged for phishing or credential harvesting.

The precise payload, lure content, or target audience remains unconfirmed due to the absence of live page evidence. Defenders should continue to block the domain at network perimeter assets, monitor the associated IP address for any future re‑use, and incorporate the domain into threat intelligence feeds. Ongoing surveillance of the registrar and hosting provider for similar patterns is advised, as well as periodic re‑scanning to capture any re‑appearance of malicious content.