futuresttir[.]com

This domain, futuresttir.com, is flagged as a high-risk phishing operation specifically targeting users of futures trading platforms. Analysis indicates no direct association with a known brand, but the page title 'Futures' and infrastructure suggest an intent to mimic legitimate financial services. No explicit drainer kit signatures have been identified in initial scans, though further forensic analysis of the payload may reveal JavaScript-based credential harvesters or wallet-draining scripts. Infrastructure analysis reveals multiple concrete indicators of malicious activity. The domain was registered on March 04, 2026, through GMO Internet, Inc., and resolves to the IP address 188.114.96.3, hosted on AS13335 Cloudflare, Inc. Security vendors on VirusTotal have flagged this domain with a detection score of 5/95, and it appears on three security blocklists, including PhishDestroy and MetaMask. The SSL certificate is issued by Let's Encrypt, a common tactic to lend superficial legitimacy to phishing sites. As of the latest assessment, futuresttir.com remains active and continues to pose a significant risk to users. The domain is blocked by multiple security mechanisms, including browser-based protections and financial transaction filters. Response actions should include immediate blacklisting in enterprise security tools, DNS sinkholing, and user education to recognize phishing tactics targeting financial services. Despite these measures, the domain's continued operation and use of Cloudflare infrastructure present an ongoing threat, necessitating continuous monitoring and proactive mitigation.