futuresaza[.]com

The domain futuresaza.com was registered on December 3, 2025 through Gname.com Pte. Ltd. and resolves to the IP address 188.114.97.3, which is part of the Cloudflare network. The site serves content over HTTPS using a Google Trust Services certificate, enforces HSTS, and supports HTTP/3. An HTTP GET returns status 200 and the page title is "Futures". These baseline characteristics match a typical phishing hosting setup.

Threat intelligence indicates that futuresaza.com is actively blocked by PhishDestroy and appears on one security blocklist. Four out of ninety‑five VirusTotal scanners have flagged the domain, and Gridinsoft assigns it a trust score of 0 out of 100. The domain is also referenced in a single AlienVault OTX pulse. Technical profiling shows a front‑end built with Vue.js that pulls libraries from the unpkg and jsDelivr CDNs, and Cloudflare Browser Insights is present, suggesting a dynamically generated page designed to mimic a legitimate service.

While the infrastructure details are concrete, the exact payload delivered to victims remains unclear. No malware binaries have been observed, and the specific brand or service being impersonated has not been publicly identified. The use of a generic phishing label implies the site likely harvests login credentials or financial information, but the precise data collection form and any downstream exfiltration mechanisms are not documented.

Defenders should add futuresaza.com to DNS and proxy blocklists, and monitor network traffic for connections to 188.114.97.3. Email filtering rules ought to be updated to quarantine messages containing links or references to the domain or its "Futures" page title. Any credentials suspected to be submitted to this site should be treated as compromised, prompting password resets and possible account monitoring. Continuous observation of the associated IP address and CDN assets is recommended to detect any expansion of the malicious campaign.