futuresjkli[.]com

This domain, futuresjkli.com, is currently flagged as an active fake trading platform phishing site designed to harvest financial credentials and facilitate unauthorized transactions. Analysis indicates the site mimics legitimate futures trading platforms, likely impersonating established financial services to deceive users into submitting sensitive account details. The domain remains operational and poses a high risk to individuals engaging with online trading or investment services. Infrastructure analysis reveals the domain was registered on March 04, 2026, through GMO Internet, Inc., a registrar frequently associated with malicious domains. It resolves to the IP address 104.21.77.113, hosted on Cloudflare’s network (AS13335), a common tactic to obscure the true origin of phishing infrastructure. Security vendors on VirusTotal have flagged the domain, with 7 of 95 engines detecting malicious activity. Additionally, the domain appears on three security blocklists, including PhishDestroy and MetaMask, further confirming its fraudulent nature. The SSL certificate, issued by Let’s Encrypt (serial number E8), provides minimal trust indicators, as phishing sites often exploit free certificates to appear legitimate. As of the latest assessment, futuresjkli.com remains active and continues to pose a significant threat to users. Organizations and individuals are advised to block the domain and its associated IP address at the network level. End-users should avoid interacting with the site, particularly entering login credentials or financial information. Security teams are recommended to monitor for related indicators, including the domain’s SSL certificate fingerprint and resolving IP, to prevent further exposure. Immediate reporting to relevant security platforms and financial institutions is encouraged to mitigate potential fraud.