m[.]fortuneprimeglobalrset[.]com

This domain, m.fortuneprimeglobalrset.com, operates as a crypto wallet drainer designed to impersonate the legitimate financial trading platform Fortune Prime Global. Analysis indicates the site employs social engineering tactics to deceive users into connecting their cryptocurrency wallets, subsequently draining funds through malicious smart contract interactions. The page title explicitly mimics Fortune Prime Global, reinforcing the brand impersonation strategy to gain victim trust. Infrastructure analysis reveals the domain was registered on April 24, 2024, through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains. The site resolves to the IP address 172.67.144.93 and is currently flagged by 14 out of 95 security vendors on VirusTotal. Additionally, the domain appears on four security blocklists, including MetaMask and PhishDestroy, and is categorized under Google Safe Browsing’s SOCIAL_ENGINEERING classification. The SSL certificate issued by Let’s Encrypt further suggests an attempt to appear legitimate, despite the malicious intent. Users who interacted with this domain should immediately revoke any connected wallet permissions and transfer remaining assets to a new, secure wallet. It is recommended to scan affected devices for malware and monitor financial accounts for unauthorized transactions. If credentials were entered, users must reset passwords across all platforms where similar login details may have been reused. No further interaction with the domain should occur, as it remains a verified threat vector for financial theft.