fustcup[.]net

Analysis of fustcup.net indicates a high-risk phishing domain targeting users of CS2 (Counter-Strike 2) tournament platforms. The domain, registered on March 5, 2026, through NiceNIC International Group Co., Limited, resolves to IP address 172.67.180.28 and presents a page title in Russian: 'FASTCUP.net - Турниры CS2 (CS:GO): Создавай Кастомные Матчи, Соревнования на ФастКап.' This suggests an attempt to impersonate legitimate esports or gaming competition services, though the exact content and mechanisms of the phishing operation remain unconfirmed as the site has not been directly analyzed. Infrastructure review shows the domain is secured with a Let's Encrypt SSL certificate, a common tactic to appear legitimate. It has been flagged by 12 of 95 security vendors in aggregated scans and appears on two security blocklists. Additionally, the domain is referenced in 24 threat intelligence pulses, indicating widespread detection in the security community. Defensive systems such as PhishDestroy and BLP-Malware have already classified it as malicious. Defenders should treat this domain as an active threat. The combination of a recent registration date, association with a known phishing theme (gaming tournaments), and multiple security vendor detections supports its classification as high-risk. Network-level blocking is recommended, along with monitoring for related domains or IPs that may emerge as part of the same campaign. Further analysis of the site's content and backend infrastructure could provide additional indicators of compromise, but current evidence is sufficient to justify immediate mitigation.