# PhishDestroy domain threat record: duplicate-disabled-376252.invalid Content language: English Canonical HTML report: https://phishdestroy.io/domain/duplicate-disabled-376252.invalid/ Machine-readable companion: https://phishdestroy.io/domain/duplicate-disabled-376252.invalid/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: not observed active - First observed by PhishDestroy: 2026-08-03 23:59:42 UTC - Last availability or vendor check: 2026-10-21 01:16:25 UTC - Stored record updated: 2026-10-21 22:21:26 UTC - VirusTotal detections in the stored snapshot: 12/89 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: argent ## Stored infrastructure - Observed IP address: 188.114.96.3 - Registrar in stored WHOIS data: EU Technology (HK) Limited - Registration date in stored WHOIS data: 2026-06-01 22:48:27 UTC ## Evidence links - URLScan report: https://urlscan.io/result/019fca16-5853-758d-b200-fae5e587af40/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/duplicate-disabled-376252.invalid - Certificate Transparency search: https://crt.sh/?q=%25.duplicate-disabled-376252.invalid - Web Archive lookup: https://web.archive.org/web/*/https://duplicate-disabled-376252.invalid/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis {"en": "The domain www.mexicoworldcup2026shop.com was registered on June 02, 2026 through EU Technology (HK) Limited and is currently hosted on the IP address 188.114.97.3. Its authoritative name servers are gemma.ns.cloudflare.com and remy.ns.cloudflare.com, indicating the use of Cloudflare's DNS infrastructure. The domain appears on a single security blocklist, PhishDestroy, which has classified it as a phishing resource. VirusTotal analysis shows that 2 of 91 security vendors have flagged the domain, confirming a detection signal despite a relatively low overall count.\n\nNo additional public reputation services or Safe Browsing entries are noted in the available intelligence. The domain remains active as of the report date, August 04, 2026, and no evidence of takedown or mitigation has been recorded. Observed indicators suggest a typical phishing infrastructure: recent registration, Cloudflare DNS, and placement on a phishing‑specific blocklist. However, the limited detection count and single blocklist entry leave uncertainty regarding the scale of victim targeting or the specific brand being impersonated, as page‑title and content analysis are not provided.\n\nDefenders should prioritize blocking the domain at network perimeter devices, add the IP address 188.114.97.3 to deny‑list rules, and monitor for any future detections from additional security vendors. Continuous re‑scanning of the domain through VirusTotal or similar aggregators is recommended to capture evolving detection coverage. Organizations that handle user credentials or financial information should advise users to avoid any unsolicited communications referencing the Mexico World Cup 2026 merchandise marketplace and to report any suspicious requests to their security teams.", "fr": "This is actually a topic I find quite interesting. Here's what I know.", "es": "Este sitio de phishing suplanta a la marca argent para engañar a usuarios y robar credenciales o fondos de carteras. Alojado en Cloudflare y con registro reciente, el dominio permanece activo. Se recomienda bloquear el dominio y la IP, y evitar cualquier comunicación no solicitada sobre la tienda del Mundial 2026."} Analysis generated: 2026-08-04 00:00:49 UTC ## Stored page captures - Primary capture: https://i.ibb.co/DPkNGRgj/49a7bdcbaeee.png Captured: 2026-08-04 00:06:29 UTC - URLScan capture: https://urlscan.io/screenshots/019fca16-5853-758d-b200-fae5e587af40.png Captured: 2026-08-04 00:06:29 UTC Source report: https://urlscan.io/result/019fca16-5853-758d-b200-fae5e587af40/ ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T11:36:21Z", "uuid": "019fca16-5853-758d-b200-fae5e587af40", "scanned_at": "2026-08-04T00:04:58Z", "final_url": "https://www.mexicoworldcup2026shop.com/", "status": 406, "redirected": "https-only", "redirects": [ { "to": "https://www.mexicoworldcup2026shop.com/", "from": "http://www.mexicoworldcup2026shop.com/", "status": 307 } ], "ip": "104.21.24.55", "domains": [ "static.cloudflareinsights.com" ], "ips": [ "104.16.80.73", "104.21.24.55" ], "asns": [ "13335" ], "doc_hash": "0f3c1e9dc21b27e1c5a822a72ae7466df21c768cb5893463f2624d0ba0e69ab3", "globals": [ "__cfBeacon" ], "tls": { "san": [ "mexicoworldcup2026shop.com", "*.mexicoworldcup2026shop.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "mexicoworldcup2026shop.com", "protocol": "QUIC", "valid_to": "2026-10-29T11:03:47Z", "valid_from": "2026-07-31T10:07:36Z" }, "domain_age_days": 62, "apex_age_days": 62, "tls_age_days": 3, "tls_valid_days": 90, "requests": 4, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 83, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=iso-8859-1" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T13:12:16Z", "uuid": "dd9b406a-af7a-4300-94da-25170be8b620", "scanned_at": "2026-08-04T00:00:56Z", "final_url": "https://www.mexicoworldcup2026shop.com/", "status": 200, "redirected": "https-only", "history": [ { "url": "http://www.mexicoworldcup2026shop.com/", "status": 307 }, { "url": "https://www.mexicoworldcup2026shop.com/", "status": 307 }, { "url": "http://www.mexicoworldcup2026shop.com/", "status": 301 }, { "url": "https://www.mexicoworldcup2026shop.com/", "status": 200 } ], "dom_hash": "5a31c666bb582396bfe61ca444f97d089ef5262adcad36f41c9f8f7437618891", "doc_hash": "7e3bdecf78d15ad4d0d8ddd6c1980ebedda5fc3cef5a1cd6cc8f677a8daf9965", "domain_risks": [ "Clothing", "Society & Lifestyle", "Ecommerce", "Shopping & Auctions", "Sports" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "www.mexicoworldcup2026shop.com", "type": "A", "value": "188.114.96.0" }, { "name": "www.mexicoworldcup2026shop.com", "type": "A", "value": "188.114.97.0" }, { "name": "www.mexicoworldcup2026shop.com", "type": "AAAA", "value": "2a06:98c1:3120::" }, { "name": "www.mexicoworldcup2026shop.com", "type": "AAAA", "value": "2a06:98c1:3121::" } ], "dnssec_valid": false, "ip": "188.114.96.0", "whois": { "registrar": "EU Technology (HK) Limited", "created": "2026-06-02T00:48:27Z", "updated": "2026-06-02T08:06:58Z", "expires": "2027-06-02T00:48:27Z", "nameservers": [ "gemma.ns.cloudflare.com", "remy.ns.cloudflare.com" ] } } } ```