oauth-resonabank[.]wixstudio[.]com

Analysis on July 20, 2026 indicates that oauth-resonabank.wixstudio.com resolves to the IPv4 address 34.144.206.118 and remains reachable at the time of assessment. The domain is registered through Wix.com Ltd., a popular website‑builder service, and its authoritative nameservers could not be enumerated (NS_NOT_FOUND). It appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, suggesting that at least one reputable anti‑phishing repository has identified it as malicious. VirusTotal records show that the domain was submitted to 95 scanning engines; none of the engines returned a positive detection, but the absence of detections does not constitute validation of safety, especially given the confirmed blocklist entry. No public Safe Browsing, Open Threat Exchange, SSL certificate, HTTP status code, trust‑score information, or page title is available for this host, leaving the visual or functional characteristics of the site unverified. The limited evidence points to an infrastructure used for banking‑phishing campaigns, likely leveraging the Wix hosting platform to obtain a legitimate‑looking domain. Defenders should treat the domain as hostile: block network connections to 34.144.206.118 at the perimeter, add oauth-resonabank.wixstudio.com to internal URL filtering lists, monitor for outbound traffic to the host, and consider enriching the indicator with additional context from threat‑intel platforms. Continuous re‑evaluation is advised, as the hosting environment may change and new detections could emerge.