launchxrp[.]com

This domain, launchxrp.com, poses a high-risk credential harvesting threat by impersonating Google's authentication portal. Analysis indicates the site was designed to mimic Google's login interface, as evidenced by its page title labeled 'Google' and its classification as a brand impersonation threat. The absence of an SSL certificate further increases the risk of data interception during transmission, exposing users to potential account compromise. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with malicious domains. The site resolves to the IP address 188.114.96.3, hosted on Cloudflare's network (AS13335), which is commonly used to obfuscate the true origin of phishing infrastructure. Detection metrics confirm its malicious nature, with 17 out of 95 security vendors flagging it as malicious on VirusTotal, and additional listings on one security blocklist, including Google Safe Browsing. Users who visited launchxrp.com should immediately revoke any entered credentials and enable multi-factor authentication on their Google accounts. It is recommended to scan the device for malware, as phishing sites may deploy additional payloads. Monitor financial and linked accounts for unauthorized activity, and report the incident to relevant security teams for further investigation. The domain's current offline status does not eliminate the risk to previously exposed credentials, necessitating proactive remediation.