fartcup[.]com

PhishDestroy identifies fartcup.com as an active crypto drainer domain designed to steal cryptocurrency and credentials through fake login portals. This domain resolves to IP 104.21.27.7 and was registered on June 6, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED. VirusTotal currently shows 4/95 detections, indicating it has not yet been widely flagged by security engines. The domain uses a Google Trust Services SSL certificate, which may lend false legitimacy to unsuspecting users. This threat poses a high risk due to its recent creation and low detection rate, making it likely to bypass initial security checks. Crypto drainers typically replace wallet addresses on a webpage with attacker-controlled ones, siphoning funds directly from victims. The domain’s association with NICENIC INTERNATIONAL GROUP CO., LIMITED—a registrar with a history of hosting malicious infrastructure—further underscores its malicious intent. Users who interact with this domain risk losing funds or having their credentials harvested for further attacks. If you visited fartcup.com, immediately disconnect from the internet and check your device for malware. Review your cryptocurrency wallets and connected accounts for unauthorized transactions. Use PhishDestroy’s verification tool to confirm the legitimacy of the domain before engaging further. Report the domain to your antivirus provider and local cybersecurity authorities to aid in its takedown.