laceapps-extension[.]wixstudio[.]com

Analysis on July 24, 2026 identifies laceapps-extension.wixstudio.com as an active generic phishing infrastructure. The domain is registered through Wix.com Ltd. and resolves to the IP address 162.159.143.12, which belongs to the Wix hosting network. DNS queries return a missing nameserver record (NS_NOT_FOUND), indicating that standard authoritative name server information is unavailable. The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy remediation service.

VirusTotal records show that the domain was scanned by 91 antivirus and URL‑reputation vendors; none of the submitted samples triggered a detection, though the absence of a detection does not constitute a safety assurance. No additional intelligence such as Safe Browsing status, OTX mentions, SSL certificate details, HTTP response codes, or page title information is presently available. Consequently, the primary observable indicators are the registration data, hosting IP, blocklist presence, and the PhishDestroy block action.

Defenders should consider adding 162.159.143.12 to network deny lists, enforce domain‑based filtering for laceapps-extension.wixstudio.com, and monitor any future DNS or TLS changes associated with the host. Continuous re‑scanning with multi‑vendor services is recommended to capture any evolution of the payload or hosting configuration. Until further evidence emerges, the infrastructure should be treated as a high‑confidence phishing vector.