fasucup[.]com

This domain, fasucup.com, is identified as a credential theft phishing infrastructure targeting Russian-speaking users. The page title, "Достигайте Новых Высот. Развивайтесь Вместе с Про!" (Achieve New Heights. Grow Together with Pro!), suggests a fraudulent career development or professional networking scheme designed to harvest login credentials. No direct brand impersonation is evident, but the social engineering approach mimics legitimate employment or training platforms to deceive victims. The absence of cryptocurrency-related content or wallet drainer scripts further supports classification as a credential theft operation. Infrastructure analysis reveals the domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.96.3, which has been linked to other malicious activities. Security vendor detection on VirusTotal stands at 6/95, indicating moderate but not universal recognition of the threat. The domain appears in 8 threat intelligence pulses on AlienVault OTX and is listed on at least one security blocklist. Gridinsoft assigns a trust score of 0/100, reinforcing its malicious classification. No entries were found in Google Safe Browsing at the time of analysis. The domain has been taken offline, likely due to enforcement actions by security providers or hosting interventions. Despite its current inactive status, residual risk remains due to the domain's recent registration and its presence in multiple threat intelligence feeds. Organizations are advised to monitor for re-activation attempts and block the domain at the DNS or proxy level. Users who may have interacted with the site should reset credentials for any accounts accessed during the exposure window, particularly if similar social engineering lures were encountered. Network defenders should correlate the IP address 188.114.96.3 with internal logs to identify potential prior compromise.