resacoua[.]com

The domain resacoua.com was registered on February 21, 2026 and is currently listed as offline. DNS resolution points to the IP address 104.21.80.1, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site presented the page title "Resaco" and was served over an SSL certificate identified as WE1. Threat intelligence records classify the site as a generic phishing operation, and the risk level has been assigned as elevated.

The domain appears on a single security blocklist, where it is specifically flagged by PhishDestroy. VirusTotal analysis shows that two of ninety‑three scanned security vendors flagged the domain, indicating at least minimal detection by independent scanners. No additional public detections or safe‑browsing alerts were observed in the provided data set. Because the site is presently offline, content analysis (e.g., HTML structure, credential‑harvesting forms, or redirects) could not be performed, leaving the precise phishing tactics and targeted brands undefined.

Defenders should continue to block traffic to 104.21.80.1 and to the domain name itself, update any URL filtering policies to incorporate the domain, and monitor for re‑appearance of the host or related IP ranges. Given the Cloudflare hosting, attackers might move the payload to another origin within the same network, so periodic re‑resolution of the domain is advisable. Organizations that employ domain‑based threat feeds should prioritize this indicator due to its elevated risk rating, and incident response teams should treat any login attempts or credential submissions to resacoua.com as potentially malicious. Continuous observation of blocklist status and future VirusTotal scans will provide additional context should the site reactivate.