rezno-protocol[.]xyz

As of July 25, 2026, the domain rezno-protocol.xyz is flagged as a generic phishing domain with an elevated risk level. The domain was registered through NiceNIC International Group Co., Limited on November 21, 2024. Infrastructure analysis reveals that the domain resolves to the IP address 198.18.0.46, which is associated with Cloudflare and supports HTTP/3. The domain appears on one security blocklist, specifically PhishDestroy, indicating a known association with malicious activity.

The Gridinsoft trust score for this domain is 0 out of 100, reflecting a complete lack of trust in its legitimacy. The SSL certificate is issued by Google Trust Services, which might suggest an attempt to appear more trustworthy to potential victims. The page title, 'www.www.rezno-protocol.xyz', is unusual and may be an indicator of a poorly constructed or hastily deployed phishing site. The exact content of the site has not been analyzed, but the elevated risk level and presence on security blocklists suggest that it poses a threat.

Defenders are advised to block this domain and educate users about the risks of visiting unverified websites. The domain is currently offline, which could indicate a temporary takedown or a shift in the campaign's infrastructure. Monitoring for any resurgence or related domains is recommended.