Is lacepc.com a scam? TrustSniffer's high-risk assessment: 2/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Lacepc.com is a very recently registered website. Its homepage is titled "Lace Desktop — Explore Web3 on Windows and macOS" and presents itself as a desktop application for exploring Web3 on Windows and macOS. Its apparent purpose is to steer visitors toward a downloadable Web3 client, which implies wallet-style interaction with blockchain assets.

Scam/Impersonation Risk

This assessment carries a confirmed adverse reputation signal. A third-party reputation source currently lists the domain as blacklisted. Independent threat-intelligence engines add one malicious and several suspicious detections, so the listing is not an isolated or stale entry. The available evidence does not say what the detections relate to, and none of it shows conflicting legal identities or a documented brand-impersonation claim. The adverse listing is nonetheless decisive. It is compounded by two things. The domain was registered only weeks ago. The offering is also a Web3 desktop client, a category where a malicious download or a wallet-connection lure can cause irreversible loss of funds. Behavioural testing of the homepage showed that almost all of its network activity went to external destinations, and it produced repeated browser console errors. All external calls went to recognised destinations, and no wallet-drainer behaviour, clipboard manipulation, hidden forms or credential-capturing external forms were observed. These are secondary observations and do not offset the listing. Evidence:

• Homepage: an external reputation source reports the domain as blacklisted, with one malicious and three suspicious engine verdicts.
• Domain provenance: registered 2026-08-27 (~0.16 years, about 59 days old), so the domain has no established operating history.
• Homepage behaviour: 27 external XHR/fetch requests and 9 external POSTs across 3 test runs, with up to 97.6% of requests going to external hosts, and 9 console errors recorded.
• Homepage behaviour: no wallet-provider injection, clipboard writes or external password forms were detected.

Regulatory Verification Notes

The captured page content does not identify a legal entity, a licensing authority or a registration number, and the operator's real-world identity is not independently verified. Registration details are incomplete on the ownership side, which amounts to ownership opacity. That is an administrative limitation, not an identity contradiction. No third-party broker or regulatory-registry match was found for this domain, and nothing in the evidence supports any claim that the site is licensed or supervised. Evidence:

• Registrar of record is NICENIC INTERNATIONAL GROUP CO., LIMITED, with registration running to 2027-08-27.
• Hosted on AS13335 (Cloudflare, Inc., US).
• TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-12-03, with about 38 days remaining. DV confirms domain control only, not the operator's identity.
• Homepage: no legal entity, licence or registration disclosure was identified in the captured content.

What to Verify Next

Any download offered here should be treated as untrusted until the publisher is confirmed through an independent route. Check whether the Lace Desktop software is distributed by a known publisher, using that publisher's official channels reached independently of this domain, such as a trusted app marketplace or an official documentation source typed in manually. Confirm the current status of the blacklist listing and the detections with the original reporting sources before any engagement. Confirm the official support and contact channels offline. Check the operator's corporate registration and any claimed regulatory status directly with the relevant public registry. Evidence:

• Homepage: the page promotes a desktop application for Windows and macOS, so a file download is the central interaction.
• Domain timeline: the domain is about two months old, so a long-standing publisher relationship cannot be assumed.
• Reputation: the current blacklist listing makes independent publisher confirmation a precondition for any download.

Summary Verdict

The overall posture is high-risk. A confirmed external blacklist listing and corroborating detections dominate the assessment, and they are compounded by a very young domain and an unverified operator. Technical hygiene, such as a valid encrypted connection and stable page delivery, is real but cannot offset the adverse reputation. Only passive, read-only viewing is consistent with the evidence. Login, credential entry and financial interaction fall outside it.

Infrastructure Integrity

The site is served through Cloudflare's CDN and web application firewall, with a valid DV TLS certificate. Several edge addresses were observed, plus some candidate origin addresses, and the domain's DNS has few subdomains for its age. Bot protection was active during testing, and the page loaded stably across all test runs. This infrastructure is a mitigating factor only. It shows that the site is competently fronted, not that its operator or content is legitimate, and it cannot offset the external threat detections.

Closing Assessment

Do not download or run software from this site, do not connect a wallet, and do not enter credentials or payment details until the publisher is independently confirmed and the reputation listing is resolved. Anyone who has already interacted with the site should consider rotating exposed credentials and reviewing wallet approvals.