prop-ftmo[.]com

This domain, prop-ftmo.com, is flagged as a high-risk phishing site specializing in brand impersonation targeting FTMO, a well-known proprietary trading firm. Analysis indicates the site mimics legitimate FTMO branding, likely to deceive users into disclosing sensitive credentials or financial information. No direct evidence of a crypto drainer kit was observed, but the infrastructure aligns with credential harvesting tactics commonly used in financial scams. Infrastructure analysis reveals the following technical indicators: the domain was registered on June 25, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with newly created phishing domains. It resolves to the IP address 188.114.97.3, which has been linked to other suspicious activities in recent threat intelligence reports. The domain is flagged by 1 out of 95 security vendors on VirusTotal, suggesting limited but confirmed detection. The SSL certificate is issued by Google Trust Services, providing a false sense of security to potential victims. No detections were found on Google Safe Browsing (GSB) at the time of analysis, and no additional blocklist entries were identified beyond the single VirusTotal alert. The domain remains active as of the latest assessment, with no evidence of takedown or mitigation efforts. Users are advised to exercise extreme caution, as the site continues to pose a significant risk for credential theft or financial fraud. Organizations should consider implementing network-level blocks for the domain and its associated IP address. Given the domain’s recent creation and low detection rate, continuous monitoring is recommended to track any shifts in infrastructure or additional threat indicators. The remaining risk is classified as high due to the active status and targeted nature of the impersonation.