# rufastcup.com — SUSPICIOUS

> Rufastcup.com is linked to low-risk generic phishing and is now offline. Learn more and verify before visiting this domain.

## Summary
PhishDestroy identifies rufastcup.com as a domain associated with generic phishing activities. Classified as a low-risk threat, this domain was registered on March 05, 2026, indicating recent creation likely aimed at deceptive campaigns. The classification is based on behavioral patterns typical of phishing infrastructure aimed at credential theft or fraud.

Technical indicators reveal that rufastcup.com was flagged by 2 out of 95 security vendors on VirusTotal and appeared in one AlienVault OTX pulse. It also features on one security blocklist, underscoring some degree of suspicion from the cybersecurity community. These findings, combined with its recent registration date, suggest limited but credible malicious intent. The domain's hosting and registrar details were consistent with common phishing setups, reinforcing the domain's classification.

Currently, rufastcup.com is offline, indicating proactive mitigation or enforcement action. Its inactive status reduces immediate risk to users; however, PhishDestroy advises continued vigilance and verification when encountering this domain. Users and organizations are encouraged to leverage updated blocklists and threat intelligence to prevent potential exposure to similar phishing threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 530)
- Page title: FASTCUP - Твой путь в мир Counter-Strike 2!

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- SSL Issuer: WE1

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/b00f62c5-9a12-4e6d-b768-31ad90c56696.png
- PhishDestroy: https://phishdestroy.io/domain/rufastcup.com/
- LLM endpoint: https://phishdestroy.io/domain/rufastcup.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rufastcup.com/
Last updated: 2026-03-19