new-lace-extension[.]wixstudio[.]com

Analysis of new-lace-extension.wixstudio.com indicates a credential harvesting phishing operation active as of July 19, 2026. The domain is hosted on Wix Studio infrastructure and resolves to IP address 34.144.206.118, though its nameservers are currently unresponsive (NS_NOT_FOUND). It appears on one security blocklist, having been flagged by PhishDestroy, but no additional vendor detections are recorded at this time. The absence of detections from other sources does not confirm safety, as the domain remains under investigation. Defenders should note that the domain is still active and capable of resolving, suggesting ongoing malicious activity. The lack of nameserver resolution may indicate evasion tactics or infrastructure instability, but this does not preclude functional phishing attempts. No specific brand impersonation or phishing kit details are currently available, limiting attribution to a generic credential harvesting scheme. Network-level blocking of 34.144.206.118 and monitoring for connections to new-lace-extension.wixstudio.com are recommended. If internal logs show user interaction with this domain, immediate credential reset and endpoint analysis should be prioritized. Further analysis is required to determine the full scope of the campaign.