club-onefootball[.]org

PhishDestroy identifies club-onefootball.org as a crypto drainer scam impersonating the legitimate sports platform OneFootball. This domain uses social engineering tactics to trick users into connecting crypto wallets under the guise of accessing exclusive content or promotions, then silently draining digital assets. The site mimics the branding and visual identity of OneFootball to appear credible, making it especially dangerous for sports fans and cryptocurrency users who may not scrutinize URLs closely. Always verify domains before interacting with wallet prompts. This domain was flagged due to active abuse reports across three security blocklists, including MetaMask and ScamSniffer, which have independently detected malicious behavior. It was registered on December 3, 2025, through Cloudflare, Inc., a common privacy-focused registrar that does not require full identity disclosure. Despite using a Google Trust Services SSL certificate—often seen as a trust signal—the site remains unflagged by most antivirus engines (0 detections out of 95 scans on VirusTotal as of discovery). The domain resolves to IP 188.114.97.3, hosted on Cloudflare’s infrastructure, a pattern consistent with short-lived malicious domains designed to evade detection. If you visited club-onefootball.org or entered any information, immediately disconnect your wallet from the site and revoke any unauthorized permissions via your wallet’s settings. Do not interact with wallet connection prompts on unfamiliar domains. Report the domain to your antivirus provider and local cybercrime units. Use official OneFootball channels (onefootball.com) for content access and only connect wallets to trusted, verified platforms. Enable transaction alerts in your wallet app to detect unauthorized transfers in real time.