fattcup[.]com

This domain, fattcup.com, carries an elevated risk level and is specifically a credential theft threat, not just generic phishing. The site lures visitors with the Russian title 'Достигайте Новых Высот. Развивайтесь Вместе с Про!' which translates to 'Reach New Heights. Develop Together with Pro!'—a classic impersonation of a legitimate professional development or training platform to trick users into entering login credentials or personal information.

PhishDestroy found that fattcup.com was flagged by 2 out of 95 security vendors on VirusTotal and appears on one security blocklist. The domain was registered on May 26, 2025, through NiceNIC International Group Co., Limited and resolves to IP address 104.21.10.230. It uses an SSL certificate from Google Trust Services (WE1), and the site is currently offline, having been taken down. These indicators, combined with the very recent creation date, strongly suggest a malicious campaign aimed at harvesting credentials.

To protect against this specific threat, users who may have visited fattcup.com should immediately change any passwords used on that site and enable two-factor authentication on accounts where credentials may have been compromised. Avoid reusing passwords across multiple sites. Monitor financial and account statements for suspicious activity, and report any phishing attempts to relevant authorities or security teams. Since the site is offline, further interaction is not possible, but vigilance against similar fraudulent domains is advised.