flastcup[.]com

This domain, flastcup.com, is flagged as a credential theft operation targeting users of cyber sports betting platforms. Analysis of the page title, "Платформа для Киберспортивных Матчей" (Platform for Cyber Sports Matches), indicates an attempt to impersonate legitimate betting or gaming services to harvest login credentials, payment details, or personal information from victims. No specific drainer kit or brand association was identified, but the phishing page is designed to mimic the appearance of a functional betting platform, increasing the likelihood of user engagement. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 188.114.97.3 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 27, 2026. The domain holds a VirusTotal detection score of 4/95 security vendors, appears on one security blocklist, and is referenced in one AlienVault OTX threat intelligence pulse. The SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy to the site. The domain's creation date is anomalous, suggesting either a typo-squatting attempt or a placeholder for future malicious activity. As of the latest assessment, flastcup.com has been taken offline, reducing immediate exposure to potential victims. The domain was blocked by PhishDestroy and other security mechanisms, mitigating further risk. However, the infrastructure remains registered and could be repurposed for future campaigns. Organizations and users are advised to monitor for related domains, particularly those using similar naming conventions or targeting the cyber sports and betting sectors. Network-level blocking of the associated IP (188.114.97.3) and vigilance for credential reuse across platforms are recommended to prevent secondary compromise.