fagtcup[.]com

This domain, fagtcup.com, is identified as a fake login phishing site designed to harvest user credentials. Analysis indicates the infrastructure was actively used to mimic legitimate login portals, though no specific brand impersonation has been confirmed. The domain is currently offline, but prior activity suggests it targeted unsuspecting users through deceptive login interfaces. Infrastructure analysis reveals the domain was created on March 27, 2026, and registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolved to the IP address 188.114.96.3 and appears on one security blocklist. VirusTotal detections show 5 of 95 security vendors flagged the domain as malicious, indicating moderate confidence in its phishing classification. The domain’s registration details and hosting patterns align with known phishing campaigns, though no additional subdomains or redirect chains were observed. The domain is currently offline, reducing immediate risk to users. However, historical indicators suggest potential reuse or rebranding by threat actors. Organizations and individuals are advised to block the domain and associated IP at the network level. Monitor for similar domains registered through the same registrar or resolving to the same IP range. Users who may have interacted with the site should reset credentials for any accounts accessed during the exposure window and enable multi-factor authentication where available.