managedfuturesadvisors[.]net

managedfuturesadvisors.net was registered on April 28, 2026 and is currently listed as active in threat intelligence feeds. The domain is classified as a generic phishing site and carries a high risk rating. It appears on a single security blocklist and has been explicitly blocked by the PhishDestroy mitigation service. Technical analysis shows the domain resolves to the IPv4 address 194.58.106.205, which is geolocated to Russia and hosted by the registrar hosting.reg.ru, as indicated by the authoritative nameservers ns1.hosting.reg.ru and ns2.hosting.reg.ru. The site presents a Let’s Encrypt certificate (R11) and returns an HTTP 403 response, suggesting that the landing page is either restricted or removed. Registration details list Fewmoretaps OU d/b/a Trustname.com as the registrant. VirusTotal scans have flagged the domain by only one of ninety‑five security vendors, while the Gridinsoft trust score is 0 out of 100, reflecting a very low reputation. An AlienVault OTX pulse references the domain in a single threat‑intel report, reinforcing its presence in the broader phishing ecosystem. The combination of a recent creation date, active blocklist status, and the low trust score outweighs the limited detection by mainstream scanners, indicating a purposeful infrastructure likely used for credential harvesting. Defenders should add both the domain name and the associated IP address to network deny lists and configure email gateways to reject messages that reference managedfuturesadvisors.net. Continuous monitoring of DNS queries for this domain and periodic re‑scanning with multiple sandbox services are advised to capture any changes in payload or hosting. Given the Russian hosting context and the use of a free TLS certificate, threat actors may be leveraging inexpensive resources to increase the perceived legitimacy of phishing campaigns, so vigilance is required.