fatshcup[.]com

This domain, fatshcup.com, poses a targeted phishing threat designed to mimic legitimate cyber sports betting platforms. Analysis indicates the site presents itself as a Russian-language wagering service for esports events, likely harvesting login credentials, payment details, or personal information from unsuspecting users. The page title, "Платформа для Киберспортивных Матчей," directly translates to "Platform for Cyber Sports Matches," a common lure in fraudulent betting schemes. Given the domain's offline status, it may have been part of a larger, short-lived campaign or taken down following detection. Infrastructure analysis reveals multiple red flags. The domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3 and is flagged by 4 out of 95 security vendors on VirusTotal, including detection as a phishing site. Additionally, the domain appears on one security blocklist and was previously identified in a threat intelligence pulse on a major threat-sharing platform. The use of a Google Trust Services SSL certificate may lend a false sense of legitimacy, despite the domain's malicious intent. Users who visited fatshcup.com should take immediate action to mitigate potential risks. If any credentials or payment information were entered, those details should be considered compromised and changed immediately across all platforms where they were reused. Monitor financial accounts for unauthorized transactions and enable multi-factor authentication where available. Given the domain's association with phishing, users should also scan their devices for malware, as some phishing sites deploy malicious payloads. Organizations should update their security blocklists to include this domain and its associated IP address (188.114.97.3) to prevent future access attempts.