marchmadnessncaasports[.]com

marchmadnessncaasports.com was registered on 23 March 2026 through iNET SOFTWARE COMPANY LIMITED and is hosted behind Cloudflare (IP 188.114.97.3, CA). The site resolves to a 301 redirect and serves a WordPress stack with MySQL, PHP, Yoast SEO, and Cloudflare Browser Insights over HTTP/3. The TLS certificate is issued by Let’s Encrypt (E8). Threat intelligence shows the domain appears in 23 AlienVault OTX pulses, is listed on three public blocklists, and has a Gridinsoft trust score of 0/100. Four of ninety‑four VirusTotal scanners flagged the domain, and it is currently blocked by PhishDestroy, MetaMask, and SEAL. The page title – “NCAA March Madness Sports – Merchandise Online Shopping in the USA” – indicates the site is attempting to lure users seeking official NCAA merchandise, consistent with an e‑commerce phishing campaign. Infrastructure analysis reveals no additional hosting artifacts beyond the Cloudflare front‑end; the underlying server details are obscured. Uncertainty remains regarding the exact payload delivered to victims, as no page content has been captured. Defenders should add the domain and its resolving IP to web‑filter and DNS block lists, monitor for related lookup activity, and enforce TLS inspection to capture any malicious redirects. Continuous watch on the associated OTX pulses is advised to detect new indicators tied to this campaign.