worldcup2026shop[.]us

Analysis of worldcup2026shop.us as of August 03, 2026 indicates this domain is under investigation for phishing activity targeting FIFA World Cup 2026 ticket buyers. The domain appears on one security blocklist, specifically PhishDestroy, which flags it as malicious. No detections are currently recorded by the 91 vendors that scanned the domain on VirusTotal, though the absence of detections does not confirm safety. Infrastructure details, including hosting provider, autonomous system number, and SSL certificate issuer, remain unconfirmed at this stage.

The domain name suggests a focus on World Cup 2026 merchandise or ticket sales, a common lure for phishing campaigns exploiting high-profile sporting events. No specific page title, brand target, or phishing kit has been identified in available data, limiting further classification of the exact threat vector. Registrar and registration details are not provided in the current intelligence, preventing assessment of domain age or ownership patterns. Defenders are advised to treat this domain as potentially malicious until further evidence is available.

Network-level blocking based on the PhishDestroy flag is recommended for organizations with exposure to event-related fraud risks. Monitoring for additional detections or blocklist additions should continue, as phishing domains targeting major events often escalate in activity closer to the event date. No actionable indicators beyond the domain itself are currently available for hunting or detection engineering.