farstcup[.]com

This domain is flagged as an elevated-risk phishing site specifically targeting Counter-Strike 2 (CS2) players through fraudulent skin gambling and tournament schemes. Analysis indicates the site employs social engineering tactics to deceive users into submitting login credentials, payment details, or in-game item transfers under the guise of competitive events or prize giveaways. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain farstcup.com resolves to IP address 188.114.96.3 and was registered on March 05, 2026, through NiceNIC International Group Co., Limited. Security vendors on VirusTotal flagged the domain at a 2/95 detection rate, while Gridinsoft assigned a trust score of 0/100. The site appears on one security blocklist and was previously blocked by PhishDestroy. Detected technologies include Unpkg, Cloudflare, AOS, and HTTP/3, which are commonly observed in phishing infrastructure for obfuscation and performance optimization. Mitigation steps for this threat type include immediate blacklisting of the domain and associated IP address across all network security controls. Organizations should implement real-time URL filtering to block access to newly registered domains with gambling or gaming-related themes, particularly those using Cloudflare for hosting. End-users should be educated on recognizing phishing lures in gaming communities, such as unsolicited tournament invitations or prize notifications. CS2 players should enable two-factor authentication on their accounts and verify all tournament organizers through official game channels before engaging with external links or providing credentials.