# fustcup.net — SUSPICIOUS

> fustcup.net is linked to phishing schemes. Exercise caution and avoid sharing sensitive data on this active malicious domain.

## Summary
PhishDestroy has identified the domain fustcup.net as engaged in generic phishing activities, posing a medium risk to unsuspecting users. Phishing attacks remain a significant threat, aiming to steal credentials or personal information through deceptive websites. The recent registration of this domain in November 2024 underlines its potential use in ongoing fraud campaigns.

This domain is registered via NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 172.67.180.28. VirusTotal analysis indicates that 4 out of 95 security vendors have flagged fustcup.net, suggesting it has been recognized in some security circles as suspicious. Its relatively new creation date and active status emphasize the importance of monitoring this infrastructure closely.

Users should remain vigilant when encountering communications or links referencing fustcup.net. It is advised to refrain from entering any personal or financial information on sites related to this domain. Organizations should consider blocking access and updating phishing filters accordingly to prevent potential compromise stemming from this threat vector.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: FASTCUP.net - Турниры CS2 (CS:GO): Создавай Кастомные Матчи, Соревнования на ФастКап

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.180.28
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: art.ns.cloudflare.com courtney.ns.cloudflare.com
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "Fortinet", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbf32-9644-7215-bfc8-d6d1e0a5bf6c.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/fustcup.net
- Wayback Machine: https://web.archive.org/web/https://fustcup.net
- PhishDestroy: https://phishdestroy.io/domain/fustcup.net/
- LLM endpoint: https://phishdestroy.io/domain/fustcup.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/fustcup.net/
Last updated: 2026-03-19