ifxsoccer[.]com

ifxsoccer.com is currently listed as a high‑risk generic phishing site. The domain was created on 29 July 2007 and remains active as of 12 July 2026, serving HTTP 200 responses under the title “International Soccer Camps, Academies”. The site operates on a WordPress stack with MySQL, PHP, and several common plugins such as Yoast SEO, Sucuri, Slider Revolution, and Sendinblue, indicating a typical content‑management deployment. Infrastructure analysis shows the domain resolves to Cloudflare nameservers (aitana.ns.cloudflare.com, miguel.ns.cloudflare.com) and is hosted on Amazon Web Services. The TLS certificate is issued by Starfield Secure Certificate Authority – G2, providing a valid HTTPS connection. Registration was performed through GoDaddy.com, LLC, and no additional registrar anomalies are observed. Threat intelligence sources have placed ifxsoccer.com on a single security blocklist and it is actively blocked by PhishDestroy. VirusTotal scans returned 5 positive detections out of 95 security vendors, while the Gridinsoft trust score is 14 / 100, both reinforcing the high‑risk assessment. The combination of a generic phishing classification, active blocklist inclusion, and low trust score suggests the domain is being used to harvest credentials or deliver malicious payloads, although the exact phishing landing page has not been publicly disclosed. Defenders should add ifxsoccer.com to deny‑list rules at DNS and proxy layers, monitor for any C2 traffic associated with the identified AWS infrastructure, and consider sinkholing the domain to disrupt potential credential collection. Continuous re‑evaluation is advised, as the site may evolve its content or tactics, but current indicators justify immediate mitigation.