launch[.]iabpro[.]xyz

This domain, launch.iabpro.xyz, poses a brand impersonation threat specifically targeting MetaMask, a widely used cryptocurrency wallet. The site is designed to deceive users into believing they are interacting with a legitimate MetaMask interface, potentially leading to unauthorized access to wallet credentials, seed phrases, or direct cryptocurrency theft. Such impersonation schemes often employ convincing visual elements and urgent messaging to manipulate victims into disclosing sensitive information or approving malicious transactions. Analysis indicates this domain was registered on October 14, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with newly created malicious domains. Infrastructure analysis reveals the domain resolves to the IP address 104.21.59.253 and is flagged by 8 out of 95 security vendors on VirusTotal, reflecting an elevated risk level. Additionally, the domain appears on two security blocklists and has been proactively blocked by multiple threat intelligence platforms, further confirming its malicious intent. The page title, 'Lab App,' does not align with MetaMask’s official branding, serving as another indicator of fraudulent activity. If you visited launch.iabpro.xyz or interacted with any content from this domain, immediate action is required. First, disconnect any connected wallets or devices from the internet to prevent further unauthorized access. Next, review all recent transactions for signs of unauthorized activity and revoke any suspicious wallet approvals or connected applications. If credentials or seed phrases were entered, migrate funds to a new, secure wallet immediately and monitor the compromised wallet for any further irregularities. Report the domain to relevant security platforms to assist in broader threat mitigation efforts.