m[.]trustwalletffm[.]com

The domain m.trustwalletffm.com is a high-risk brand impersonation threat targeting Trust Wallet users, and it is currently offline. The domain impersonates the legitimate Trust Wallet service, posing a significant risk to users who may be tricked into providing sensitive information or credentials.

Analysis indicates that m.trustwalletffm.com was flagged by 19 of 95 security vendors on VirusTotal, suggesting a moderate level of detection and awareness within the security community. The domain was registered through Gname.com Pte. Ltd. and resolves to the IP address 35.173.253.72. It was created on October 29, 2025, and appears on three security blocklists. The page title, which translates to an unrelated text, further indicates a potential attempt to confuse users. The domain uses an SSL certificate from Let's Encrypt, which could give users a false sense of security. It also employs technologies such as Nginx, HSTS, and HTTP/3, which are common in legitimate web services but are being misused for phishing purposes. The Gridinsoft trust score for this domain is 0/100, indicating a complete lack of trustworthiness.

Given the current status of the domain as offline, users should remain vigilant and avoid any links or communications that redirect to or mention m.trustwalletffm.com. Organizations and individuals are advised to update their security policies and blocklists to include this domain. Additionally, security teams should monitor for any reactivation of the domain and ensure that users are educated on the importance of verifying URLs and looking for signs of phishing, such as unexpected page titles and the presence of an SSL certificate on suspicious sites.