fastfccp[.]com

On July 24 2026, the domain fastfccp.com was observed to be offline but retains several indicators of malicious infrastructure. The domain was registered on February 21 2026 through NiceNIC International Group Co., Limited. DNS resolution points to the IP address 172.67.152.113, which belongs to Cloudflare’s AS13335 network in the United States. The authoritative nameservers are anuj.ns.cloudflare.com and vida.ns.cloudflare.com, confirming the use of Cloudflare’s edge services. The TLS certificate presented is issued by Google Trust Services under the WE1 intermediate, indicating a valid HTTPS configuration despite the malicious intent.

The page title returned by the now‑inactive site reads “Достигайте Новых Высот. Развивайтесь Вместе с Про!” which is Russian for “Reach New Heights. Grow Together with Pro!” No additional content has been captured, so the exact phishing lure remains unverified. Automated analysis detected the use of Unpkg, the AOS animation library, and HTTP/3 protocol, all of which are common in legitimate sites and do not provide direct evidence of the payload. Security scanning on VirusTotal recorded two positive detections out of 93 scanners, confirming that at least two vendors have flagged the domain as malicious.

The domain appears on the PhishDestroy blocklist, and its status in other blocklists is limited to a single listing. No further reputation scores are available. Given the combination of recent registration, Cloudflare hosting, a valid SSL certificate, and affirmative detections by multiple security vendors, the domain should be treated as a confirmed phishing infrastructure. Defenders should block the domain at perimeter firewalls, update URL filtering and DNS sinkhole lists, and monitor for any resurgence of the site under the same host or similar subdomains. Continued surveillance of the associated IP address and the Cloudflare account may be warranted, as the infrastructure can be rapidly repurposed for new campaigns.