lacewallet[.]net

This domain is assessed as a high-risk crypto drainer operation designed to impersonate a legitimate Web3 wallet interface. The infrastructure is consistent with malicious wallet interaction flows intended to trick users into connecting cryptocurrency wallets and approving unauthorized transactions, resulting in asset theft. The page title references wallet services and NFT functionality, indicating a deliberate attempt to mimic trusted decentralized finance tools.

Technical intelligence confirms multiple malicious indicators. VirusTotal reports 15/95 security vendors flagging the domain as malicious. The domain was created on June 08, 2026 and is currently taken offline. It resolves to IP 216.198.79.1 and is registered through Tucows Domains Inc. The SSL certificate is issued via Let's Encrypt. Additional threat signals include presence in 4 AlienVault OTX threat intelligence pulses and listing on 3 security blocklists. The domain is explicitly blocked by MetaMask, PhishDestroy, and SEAL. The page title observed is Lace Wallet | Lightweight Web3 Wallet for Assets, NFTs & DeFi.

If interaction occurred, immediate containment actions are required. Users should assume any connected wallet may be compromised and revoke all token approvals and smart contract permissions immediately. Affected assets should be transferred to a newly created secure wallet with fresh seed phrases. Browser extensions and cached credentials should be reviewed for compromise. Security teams should enforce domain blocking, monitor for reuse of similar wallet-themed infrastructure, and audit transaction logs for unauthorized transfers originating after any interaction with this domain.