eng-lace-extensions[.]wixstudio[.]com

Analysis of eng-lace-extensions.wixstudio.com indicates that the domain is actively being used for phishing. The site is currently listed by the PhishDestroy blocklist and remains marked as active in threat intelligence feeds. DNS resolution points to the IP address 162.159.143.12, which is hosted by Wix.com Ltd., the same registrar that provided the domain registration. The domain’s nameserver information is unavailable (NS_NOT_FOUND), suggesting that standard DNS records are either hidden or not properly configured.

VirusTotal records show that the domain was examined by 95 scanning engines; none reported a detection at the time of the scan. While the absence of detections does not confirm safety, it demonstrates that the domain has not yet triggered automated signatures across the majority of commercial AV products. The domain also appears on a single security blocklist, reinforcing the view that it is being monitored by defensive platforms. No further technical artifacts such as SSL certificate details, HTTP response codes, or page titles have been released, leaving the exact content and lure mechanisms unverified.

Consequently, defenders should treat the domain as hostile until additional evidence proves otherwise. Recommended actions include adding the domain to network deny lists, configuring web filters to block any HTTP(S) requests to the resolved IP, and monitoring outbound traffic for connections to 162.159.143.12. Continuous re‑scanning with multi‑vendor tools is advised to capture any future payload changes, and threat‑intel teams should track updates from PhishDestroy and related blocklists for new indicators linked to this infrastructure.