facstcup[.]com

The domain facstcup.com has been identified as a generic phishing threat, posing an elevated risk level. Although no specific brand or drainer kit is directly associated with this domain, its activities align with typical phishing campaigns aimed at deceiving users to obtain sensitive information. The domain was registered on March 27, 2026, indicating a relatively recent addition to the internet landscape and suggesting potential malicious intent from the outset.

Technical analysis reveals several indicators of compromise. The domain resolves to the IP address 188.114.96.3, which may be associated with other malicious activities. It is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar that is sometimes associated with questionable domain registrations. The domain has been flagged by 2 out of 95 security vendors on VirusTotal, indicating limited but significant detection. Furthermore, facstcup.com appears on one security blocklist, specifically blocked by PhishDestroy, which further corroborates its malicious nature.

Currently, facstcup.com is offline, reducing immediate risk exposure. However, the fact that it was operational and detected by security vendors suggests that it was actively involved in phishing activities prior to being taken offline. Users and organizations should remain vigilant and ensure that their security systems are updated to recognize and block any future attempts to use similar domains for phishing. Continued monitoring of related domains and IP addresses is recommended to preemptively address potential threats and safeguard against data breaches.