# trmlabscoin.mom — SUSPICIOUS

> trmlabscoin.mom is a fake cryptocurrency scam site posing as TRM Labs. Resolves to IP 103.68.172.240. Avoid investing or entering personal data.

## Summary
PhishDestroy identifies trmlabscoin.mom as an active cryptocurrency scam domain mimicking TRM Labs' legitimate platforms. This fake domain attempts to deceive users into purchasing fraudulent tokens or exposing wallet credentials by impersonating a reputable blockchain analytics company. Security researchers consider this site hazardous due to its recent creation—just days after the real TRM Labs domain—signaling an opportunistic phishing campaign targeting cryptocurrency investors. The domain was registered through Gname.com Pte. Ltd. on March 24, 2026, suggesting a hastily deployed operation intended to capitalize on brand confusion.  This domain poses a direct financial threat to cryptocurrency users, with 0/95 VirusTotal detections as of latest analysis, indicating it remains undetected by security software. While its SSL certificate from Let's Encrypt implies an attempt at legitimacy, the recently created domain and low detection rate highlight the urgency for user vigilance. As of this report, no known blocklists include the domain, allowing it to remain accessible and potentially misleading visitors. Its IP address (103.68.172.240) and recent registration through a privacy-focused registrar further complicate takedown efforts, increasing the risk of escalation. The combination of brand impersonation and zero detections makes this a high-risk site requiring immediate caution.  If you visited trmlabscoin.mom, do not enter any personal information, download files, or connect cryptocurrency wallets. Disconnect from the site immediately and scan your device for malware using trusted antivirus software. Report the domain to your browser's security team and cryptocurrency platforms if you shared wallet details. Consider revoking any permissions granted to connected apps and review transaction histories for suspicious activity. Cryptocurrency users should verify website authenticity by checking official domains or social media before any financial interaction. Stay alert for similar impersonation attempts as scammers exploit new or lesser-known brands.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-24 16:02:23
- Registrar: Gname.com Pte. Ltd.
- IP: 103.68.172.240

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/42088fa0-f0f8-41f6-9629-8569fc31e20a
- PhishDestroy: https://phishdestroy.io/domain/trmlabscoin.mom/
- LLM endpoint: https://phishdestroy.io/domain/trmlabscoin.mom/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/trmlabscoin.mom/
Last updated: 2026-03-26