Blockchain eth_call RPC lookup observed from host (possible DOUBLECUP config resolution)

Duo Tech@duotech

•updated Aug 4, 2026•3•0•1

Detects an HTTP POST to an IP-literal host occurring after an eth_call blockchain RPC lookup from the same host, consistent with DeviceManager/DOUBLECUP resolving and beaconing to a C2 address extracted from blockchain-sourced configuration.