apps-lacescdn[.]wixstudio[.]com

Analysis on July 20, 2026 indicates that apps-lacescdn.wixstudio.com resolves to the IPv4 address 34.144.206.118. The domain is hosted on Wix's infrastructure, as evidenced by the registrar entry showing registration through Wix.com Ltd. The authoritative name servers could not be retrieved (NS_NOT_FOUND), which may hinder DNS‑based reputation checks but does not affect the observed A‑record resolution. The host IP belongs to a cloud service provider commonly used for legitimate web content; no anomalous open ports or unusual services were identified in public scans. VirusTotal records reveal that the domain was submitted to 95 antivirus and URL‑reputation engines, none of which raised a detection at the time of scanning. Although the absence of a detection does not guarantee safety, it suggests that the payload, if any, was not yet recognized by those engines. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed, indicating that at least one defensive organization has observed malicious use. No additional threat intelligence sources such as OTX, Safe Browsing, or SSL certificate anomalies are currently linked to the domain, and the page title and content have not been publicly disclosed. Consequently, the confidence in the domain’s malicious intent rests primarily on its inclusion in a blocklist and its classification as a generic phishing vector. Defenders should treat the domain as suspicious, enforce outbound DNS filtering to block resolution to 34.144.206.118, and consider adding the FQDN to existing URL‑allow/deny lists. Continuous monitoring of the IP reputation and periodic rescanning with URL analysis tools are recommended to detect any future payload deployment. Organizations that rely on Wix‑based services should verify that legitimate traffic to Wix subdomains is not inadvertently impacted by blanket blocks, applying more granular controls where feasible.