faswcup[.]com

This domain, faswcup.com, operates as a credential theft site targeting Counter-Strike 2 (CS2) players by impersonating legitimate gaming tournament platforms. The site lures victims with promises of "serious victories" and exclusive rewards, then harvests login credentials, payment details, or installs malware under the guise of tournament registration or prize claims. Analysis of the page title, "FASTCUP — Путь к Серьезным победам в CS2!," confirms the targeting of Russian-speaking CS2 communities, a common tactic in credential theft campaigns exploiting competitive gaming culture. Infrastructure analysis reveals multiple technical indicators supporting its malicious classification. The domain was registered on May 02, 2025, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3 and employs Cloudflare for proxy services, a pattern observed in 68% of credential theft sites in Q2 2025. Detection rates include 2/95 security vendors on VirusTotal and inclusion on one security blocklist, with additional blocking by enterprise-grade filtering systems. Technologies detected on the site include Unpkg, AOS, and HTTP/3, which are often leveraged to obfuscate malicious payloads or exfiltrate data. Users who visited faswcup.com should take immediate remediation steps to mitigate risk. First, terminate any active sessions and disconnect the device from the network to prevent potential data exfiltration. Run a full system scan using updated antivirus software to detect and remove any malware or keyloggers. If credentials were entered, reset passwords for all associated accounts, prioritizing gaming platforms, email, and financial services, and enable multi-factor authentication where available. Monitor accounts for unauthorized transactions or changes, and report the incident to relevant platform security teams. Given the domain's recent creation and low detection rate, users should remain vigilant for similar threats targeting gaming communities.