new-resonabank[.]wixstudio[.]com

As of July 21, 2026, the domain new-resonabank.wixstudio.com is under investigation and is currently active. This domain has been flagged as a banking phishing site by one security blocklist, specifically PhishDestroy. The domain is registered through Wix.com Ltd., a popular website builder and hosting service. Despite the single blocklist entry, the nameservers for this domain are not found, which could indicate recent changes or a deliberate attempt to obscure infrastructure. The domain resolves to the IP address 162.159.143.12, which is a known Cloudflare IP address, commonly used for content delivery and security services. This suggests that the site may be using Cloudflare to mask its true origin or to provide additional layers of protection against takedown efforts. The exact content of the site has not been analyzed, but the domain name and the blocklist entry strongly suggest that it is impersonating a legitimate banking institution to deceive users and steal sensitive information. Defenders should treat this domain with caution and consider blocking it at the network level to prevent potential phishing attacks. Regular monitoring and updates to blocklists are recommended to stay informed about any changes in the domain's status or threat level. Given the active nature of this domain and its appearance on a security blocklist, it is advisable to educate end-users about the risks of phishing and to implement multi-factor authentication where possible to mitigate the impact of any credential theft attempts.