laceappswallet[.]wixstudio[.]com

This domain, laceappswallet.wixstudio.com, is under investigation as part of an active crypto drainer phishing campaign. Infrastructure analysis reveals it is hosted on Wix.com Ltd. infrastructure, resolving to the IP address 162.159.143.12. The domain currently lacks assigned nameservers, a configuration that may indicate recent deployment or evasion tactics. As of July 24, 2026, the domain remains operational with no reported downtime or HTTP errors. Detection data is limited but notable. The domain appears on one security blocklist, specifically PhishDestroy, which has flagged it for malicious activity.

A VirusTotal scan conducted by 91 vendors returned no detections; however, this absence does not confirm safety, as detection engines may not yet have updated signatures or behavioral indicators for this threat. No additional telemetry from Safe Browsing, OTX, or other threat intelligence platforms is currently available in the provided evidence. The registrar and hosting provider, Wix.com Ltd., is a legitimate platform frequently abused for phishing due to its ease of domain creation and free hosting services. The IP 162.159.143.12 is associated with Cloudflare, a common reverse proxy used to obscure origin servers and enhance resilience against takedowns. No SSL certificate anomalies or unusual HTTP headers have been reported at this stage. Defenders should treat this domain as high-risk for crypto-related fraud.

Given the crypto drainer classification, it is likely designed to interact with wallet browser extensions or web3 applications, executing unauthorized transactions. Network-level blocking is recommended for organizations handling cryptocurrency or financial operations. Security teams should monitor for connections to 162.159.143.12 and correlate with wallet transaction logs for signs of compromise.