fabtcup[.]com

This domain, fabtcup.com, is identified as a crypto drainer scam designed to illicitly siphon cryptocurrency assets from victims. Analysis indicates the infrastructure is engineered to mimic legitimate cryptocurrency platforms or wallets, tricking users into authorizing transactions that transfer funds to attacker-controlled addresses. The threat leverages social engineering tactics, such as fake airdrops, wallet recovery prompts, or investment opportunities, to exploit user trust and urgency. Once interacted with, the domain executes malicious scripts that drain connected wallets without further user consent, posing a severe financial risk to visitors. Infrastructure analysis reveals multiple technical indicators supporting this assessment. The domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3 and is flagged by 5 out of 95 security vendors on VirusTotal, including detections for malicious or phishing-related activity. Additionally, the domain appears on one security blocklist, further corroborating its malicious nature. The creation date, while seemingly futuristic, may indicate an attempt to evade reputation-based detection systems or suggest a typo in available data. Users who have visited fabtcup.com or interacted with its content should take immediate remedial action. Disconnect any wallets or financial accounts linked to the domain and revoke all active authorizations for connected decentralized applications (dApps). Scan the device used for access with updated security tools to detect and remove any residual malware. Monitor all linked accounts, including cryptocurrency wallets and email, for unauthorized transactions or changes. If assets were transferred, report the incident to relevant financial platforms and law enforcement agencies, providing transaction hashes and other forensic details. Exercise heightened caution with unsolicited investment opportunities or wallet-related communications to avoid further compromise.