# fafscup.com — SUSPICIOUS

> fafscup.com is a malicious domain pushing a crypto drainer phishing scam, with 0/95 VirusTotal detections. Avoid entering credentials or crypto wallet details.

## Summary
PhishDestroy identifies fafscup.com as an active crypto drainer phishing domain currently under investigation. This fraudulent site is designed to steal cryptocurrency assets by tricking users into connecting malicious wallet extensions or entering private keys.

Domain intelligence shows fafscup.com was registered on April 23, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, resolving to IP 172.67.204.214 with a Google Trust Services SSL certificate. Despite having 0 detections on VirusTotal (0/95 engines) as of the latest scan, the domain has already been blocked by PhishDestroy and appears on 1 security blocklist. This low detection rate is common among newly deployed malicious domains that evade initial screening.

Users should avoid accessing fafscup.com and refrain from entering any cryptocurrency wallet details or private keys. If exposed, immediately disconnect compromised wallets, revoke connected permissions, and transfer remaining assets to a secure wallet. Report the domain to PhishDestroy and your local cybersecurity authority to help mitigate further spread.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-04-23 13:52:19
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 172.67.204.214

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/31d3fbec-9c56-4caf-a084-e6c03b64275f
- PhishDestroy: https://phishdestroy.io/domain/fafscup.com/
- LLM endpoint: https://phishdestroy.io/domain/fafscup.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/fafscup.com/
Last updated: 2026-03-27