faxstcup[.]com

The domain faxstcup.com has been identified as a credential theft site, currently offline. This domain was specifically flagged for attempting to steal sensitive user credentials, posing a significant risk to individuals who may have interacted with it. It has been taken offline following detection and appears on one security blocklist, indicating its malicious intent.

Upon investigation, faxstcup.com was flagged by 3 out of 95 security vendors on VirusTotal, highlighting its potential threat level. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar that has been associated with other suspicious activities in the past. The domain resolves to the IP address 188.114.96.3 and was created on March 27, 2026. Its presence on one security blocklist further underscores the risk it posed, and it was also included in a threat intelligence pulse on AlienVault OTX.

Currently, the domain is offline, reducing its immediate threat. However, users should remain vigilant and ensure that their systems are protected against potential credential theft attempts. It is recommended to maintain updated security software, use two-factor authentication where possible, and regularly review account activities for unusual behavior. Organizations should also update their security protocols and educate employees on recognizing phishing attempts to mitigate future risks.