futuresmjiuyt[.]com

The domain futuresmjiuyt.com is currently flagged as an active crypto drainer phishing site targeting cryptocurrency users. Analysis indicates the page mimics legitimate futures trading platforms, likely to harvest wallet credentials or execute unauthorized transactions. The domain remains operational as of the latest verification, posing a high risk to unsuspecting victims. Infrastructure analysis reveals the domain was registered on March 04, 2024, through GMO Internet, Inc., a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.43.157, hosted under AS13335 (Cloudflare, Inc.), a common proxy service used to obfuscate malicious infrastructure. The domain appears on three security blocklists, including PhishDestroy and SEAL, and is flagged by 6 of 95 security vendors on VirusTotal. The SSL certificate, issued by Let's Encrypt (serial number E8), provides minimal assurance, as it is commonly exploited by threat actors to lend superficial legitimacy to phishing pages. Current status confirms the domain remains active, with no evidence of takedown or mitigation. Users are advised to block the domain at the network level and avoid interacting with any associated URLs. Cryptocurrency wallet providers and exchanges should integrate the domain into their threat intelligence feeds to prevent credential harvesting or transaction hijacking. Given the high detection rate and persistent activity, continuous monitoring and proactive blocking are recommended to mitigate potential financial losses.