fastcuj[.]com

This domain, fastcuj.com, poses as a legitimate platform for cyber sports betting matches but is designed to harvest user credentials and financial information. The site uses deceptive branding and localized content in Russian to trick visitors into entering sensitive account details, which are then transmitted to threat actors for fraudulent use. Analysis of the domain reveals it targets users interested in esports wagering, a growing sector for phishing operations due to its high engagement and financial transactions. Infrastructure analysis confirms the domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. The site resolves to the IP address 104.21.94.165 and uses an SSL certificate issued by Google Trust Services, a tactic to appear legitimate. Security vendors flagged the domain, with 4 out of 95 engines on VirusTotal detecting it as malicious. Additionally, it appears on one security blocklist and is referenced in a threat intelligence pulse on AlienVault OTX, further validating its malicious nature. If you visited fastcuj.com or entered any information on the site, immediate action is required. Disconnect the device from the network to prevent potential data exfiltration. Run a full antivirus scan to detect and remove any malware or keyloggers that may have been installed. Change passwords for all accounts accessed from the compromised device, prioritizing financial and email accounts. Enable multi-factor authentication where available. Monitor bank statements and transaction histories for unauthorized activity, and report any suspicious charges to your financial institution. Consider placing a fraud alert on your credit file if financial details were exposed.