m[.]fortuneprimeglobalxins[.]pro

The domain m.fortuneprimeglobalxins.pro is a generic phishing site designed to impersonate the Fortune Prime Global brand, posing as a fake exchange to steal login credentials or financial information from visitors. It does not deploy a specific drainer kit but targets users through a fraudulent interface. As of the latest analysis, the site has been taken offline, reducing immediate risk, but its infrastructure remains a concern for threat actors.

Technical indicators confirm the malicious nature of m.fortuneprimeglobalxins.pro. VirusTotal reports 2 of 95 security vendors flagging it, including Netcraft and SOCRadar. The domain was registered through GNAME.COM PTE. LTD. on March 23, 2026, and resolves to IP address 172.67.141.143, hosted by Cloudflare, Inc. in Canada. It appears on three security blocklists: PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Let's Encrypt (E7), and the page title observed was 'Fortune Prime Global'. Technologies detected include Vue.js, Cloudflare Browser Insights, Cloudflare, and HTTP/3. The Gridinsoft trust score is 0 out of 100, reflecting high risk.

Users who interacted with m.fortuneprimeglobalxins.pro should take immediate safety steps. Since this is a generic phishing site without a known drainer, victims who entered login credentials or personal data must change passwords for any accounts used on the site and enable two-factor authentication on all financial and email accounts. Monitor for unauthorized transactions or identity theft. Report the domain to cybersecurity authorities and blocklist maintainers to prevent future abuse.