lacedesktopapp[.]io

lacedesktopapp.io was registered on June 08, 2026. Since its appearance, the domain has been observed on three public security blocklists, indicating that multiple defensive platforms have identified it as malicious. VirusTotal scans show that 16 of 91 participating security vendors have flagged the domain, demonstrating a moderate level of consensus among detection engines. The domain is actively blocked by the PhishDestroy, MetaMask, and SEAL blocklist feeds, further confirming its classification as a phishing-related resource.

The threat intelligence record assigns a high risk rating and marks the infrastructure as active as of the report date, July 29, 2026. The available data do not include registrar details, IP address, hosting provider, SSL certificate information, HTTP response codes, or page title, limiting the depth of technical fingerprinting at this stage. Consequently, the exact content hosted on the site, the targeted brand, or the phishing kit employed remain unknown. Defenders should prioritize adding lacedesktopapp.io to deny‑list configurations across web proxies, DNS filters, and endpoint protection solutions.

Monitoring for any new observations, such as DNS queries, TLS certificates, or content hashes, is recommended to enrich the profile. Organizations using the blocklists that already flag the domain—PhishDestroy, MetaMask, and SEAL—should ensure those feeds are up to date. Where possible, threat hunters should query passive DNS and SSL‑observability services to capture the underlying IP range and certificate fingerprints, enabling broader network‑wide mitigation. Continuous re‑evaluation is advised, as additional indicators may emerge that clarify the target brand or campaign tactics.