lace-home[.]wixstudio[.]com

The domain lace-home.wixstudio.com was created on 17 December 2016 and is registered through the Wix Studio platform. Its authoritative name servers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net, indicating reliance on the NSONE hosting infrastructure. DNS resolution points to the public IPv4 address 34.144.206.118, a cloud‑hosted endpoint commonly associated with large‑scale content delivery services.

The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed, confirming that at least one reputable anti‑phishing service has observed malicious activity originating from this host. VirusTotal analysis shows that five of ninety‑one scanned scanners flagged the domain, providing additional independent evidence of abuse. No public information is available regarding TLS certificate details, HTTP response codes, or page title content, and the domain has not been reported in open threat exchange (OTX) feeds.

Consequently, the full scope of the phishing campaign—such as the specific credential‑stealing pages or targeted brands—remains unverified. Defenders should continue to monitor the IP address 34.144.206.118 for anomalous traffic patterns, enforce blocklisting of lace-home.wixstudio.com in corporate web filters, and consider adding the domain to internal threat intelligence feeds. Given the elevated risk rating and the presence of multiple independent detections, proactive remediation, including sink‑holing or sink‑routing of the associated IP range, is advisable to mitigate potential credential harvest attempts.