Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is qibvgau9217b@outlook.com.
The latest stored availability evidence still shows the domain reachable; 12 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
home-fifalottery[.]com[.]cn
“2026世界杯(FIFA Lottery)中国体育彩票投注平台 · home-fifalottery.com.cn”
home-fifalottery.com.cn is recorded as an active generic phishing infrastructure with an elevated risk rating as of August 03, 2026. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy mitigation service, indicating that at least one anti‑phishing platform has observed malicious activity associated with this host. VirusTotal scans show that eight of ninety‑one security vendors have generated detections, providing independent confirmation that the site is being used for fraudulent purposes. The modest blocklist footprint may reflect a nascent campaign, limited targeting scope, or the use of dynamic hosting techniques that reduce the visibility of the underlying infrastructure.
Current intelligence does not contain registrar information, hosting IP addresses, SSL certificate data, or HTTP response details, leaving the operational back‑end of the domain uncharacterized. Because of this lack of concrete hosting evidence, attribution of the threat actor or identification of supporting services cannot be asserted at this time. Defenders should immediately add home-fifalottery.com.cn to URL filtering, DNS sinkhole, and endpoint protection policies to prevent user interaction.
Network monitoring should include logging of DNS queries for this domain and any sub‑domains that may be generated in future iterations of the campaign. Security teams are advised to share observed network indicators with threat‑intelligence communities to enrich collective detection capabilities. Continuous monitoring is recommended to capture any increase in blocklist listings, additional vendor detections, or the emergence of related command‑and‑control infrastructure that could broaden the impact of this phishing operation.
Network Security Intelligence
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | home-fifalottery.com.cn |
malicious | Sinkholed |
Threat Response Pipeline
Public Blocklist Status
Casino / Gambling License Verification
Technologies · 3 identified
Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com 100% confidenceNginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100% confidenceHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% confidenceVirusTotal Analysis
Archived Evidence
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of home-fifalottery.com.cn · checked Aug 4, 2026
Site Configuration Analysis
Evidence & External Reports
PD-20260804-17FDA3 Recipient: qibvgau9217b@outlook.com Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive