futuvmmnbb[.]com

This domain, futuvmmnbb.com, is identified as a high-risk crypto phishing site targeting users of the Futures platform. Analysis of the page title, "Futures," and associated infrastructure indicates an attempt to impersonate the legitimate service, likely to harvest credentials or facilitate unauthorized transactions. No specific drainer kit signatures have been confirmed, but the domain exhibits characteristics consistent with credential theft and wallet-draining campaigns. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 172.67.202.236, hosted on Cloudflare’s network (AS13335). It was registered on March 20, 2026, through GMO Internet, Inc., and is secured with a Let’s Encrypt SSL certificate (serial number E7). VirusTotal detection shows 6 out of 95 security vendors flagging the domain as malicious. The domain appears on three security blocklists and is actively blocked by at least three independent threat intelligence feeds, including PhishDestroy and MetaMask. As of the latest assessment, futuvmmnbb.com remains active and poses a continued risk to users. Immediate response actions include blocking the domain at the DNS and network levels, as well as alerting users to avoid interaction. Despite mitigation efforts, the domain’s persistence on Cloudflare infrastructure and its recent registration suggest ongoing malicious intent. Organizations are advised to monitor for related indicators, including the IP address and SSL certificate, to prevent further compromise.