famstcup[.]com

The domain famstcup.com is identified as a generic phishing threat targeting users through deceptive login or credential harvesting schemes. As of the latest assessment, the domain has been taken offline, though prior activity suggests it was actively used for malicious purposes. No specific brand impersonation has been confirmed, but the infrastructure aligns with broad phishing campaigns designed to extract sensitive information from victims. Analysis indicates that famstcup.com was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. The domain resolved to the IP address 172.67.152.116, which has been linked to other suspicious activities. It appears on one security blocklist and was flagged by 3 of 95 security vendors on VirusTotal, with additional references in one AlienVault OTX threat intelligence pulse. The domain’s creation date and rapid inclusion in threat feeds suggest it was deployed with malicious intent shortly after registration. The current status of famstcup.com is offline, reducing immediate risk to users. However, organizations and security teams are advised to monitor for re-registration or similar domains using the same registrar or IP infrastructure. Network defenders should block the domain and associated IP at perimeter defenses, while end users should be educated on recognizing generic phishing attempts. Historical DNS and WHOIS records should be preserved for forensic analysis in the event of future incidents involving this infrastructure.