fartcoup[.]com

PhishDestroy identifies fartcoup.com as a generic phishing domain with an elevated risk level, specifically a crypto drainer designed to steal cryptocurrency wallet credentials. Although it does not impersonate a specific brand, its threat profile indicates a targeted attempt to harvest sensitive financial data from unsuspecting users. The domain was created on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to IP address 188.114.97.3, which is associated with Cloudflare services. Security analysis reveals that 4 out of 95 antivirus engines on VirusTotal flag this domain as malicious, and it appears on one security blocklist. Additionally, AlienVault OTX includes it in one threat intelligence pulse, confirming its presence in the cybercriminal ecosystem.

The domain currently has an offline status, meaning it may have been taken down or is temporarily inaccessible. The SSL certificate is issued by Google Trust Services (WE1), which is common for domains using Cloudflare, and does not inherently indicate legitimacy. Despite being offline, the risk remains elevated because similar domains can reappear under different names or be reactivated. PhishDestroy advises users to avoid any interaction with this domain and to always verify unknown websites through its verification tool. The combination of a recent registration, a suspicious registrar, and multiple security flags strongly suggests malicious intent, and users who encountered this site should monitor their accounts for unauthorized activity and change any credentials that may have been exposed.