futuresdaqrh[.]com

This domain is flagged as a high-risk cryptocurrency futures phishing infrastructure, targeting users through deceptive financial trading interfaces. Analysis indicates a deliberate attempt to mimic legitimate futures trading platforms, likely to harvest credentials or distribute malicious payloads under the guise of investment opportunities. Infrastructure analysis reveals the domain futuresdaqrh.com was registered on March 04, 2026, through GMO Internet, Inc., an uncommon registrar for financial services. It resolves to IP address 188.114.96.3, hosted on Cloudflare’s network (AS13335), which is frequently leveraged by threat actors to obscure origin servers. The SSL certificate is issued by Let’s Encrypt (serial E8), a common choice for malicious domains due to its low validation requirements. The domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal reports 7 out of 95 security vendors flagging the domain as malicious, with detections spanning phishing, fraud, and cryptocurrency-related threats. The page title, “Futures,” further suggests an intent to impersonate legitimate trading platforms. Mitigation requires immediate blocking of the domain and its resolving IP at network and endpoint layers. Users should be cautioned against interacting with any financial or trading-related content hosted on futuresdaqrh.com, as it is confirmed to be part of an active phishing campaign. Security teams should monitor for credential submissions or wallet interactions originating from this domain, particularly in environments where cryptocurrency trading is permitted. Given the domain’s recent creation date and Cloudflare hosting, defenders should also investigate for related infrastructure using the same registrar or IP range, as threat actors often deploy multiple domains in parallel.