worldbuyyouself[.]com
“FIFA World Cup 2026⢠Tickets | Host Cities, Dates, Teams, Tickets”
Evidence Summary
The domain worldbuyyouself.com was observed on August 03, 2026 and is currently classified as an active generic phishing site with an elevated risk rating. VirusTotal scans show that 12 out of 91 participating security vendors have flagged the domain as malicious, indicating a moderate consensus among detection engines. The domain also appears on a single external blocklist and is explicitly blocked by the PhishDestroy remediation service, reinforcing its malicious reputation.
No additional infrastructure details such as registrar information, hosting IP, ASN, or SSL characteristics have been published, so the underlying command‑and‑control infrastructure remains opaque. The limited visibility suggests the campaign may rely on short‑lived hosting or fast‑flux techniques to evade attribution. Because the site is actively listed and flagged, defenders should incorporate worldbuyyouself.com into deny‑list policies across perimeter firewalls, DNS filtering solutions, and endpoint web‑proxy configurations.
Continuous monitoring for DNS queries or outbound connections to the domain is advised, and any detected traffic should be quarantined and investigated for credential compromise. Threat‑intel teams should also request fresh VirusTotal scans and consider sharing newly discovered indicators of compromise with industry‑wide blocklist operators to accelerate collective mitigation. Until further technical artefacts become available, the safest posture is to treat any communication with worldbuyyouself.com as hostile and to block it at the earliest possible enforcement point.
Data Coverage
Network Security Intelligence
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 11, 2026
10 monitored external feeds No match
Detection timeline
-
First recorded
First stored value: Reachable
-
Domain status
Reachable → Unreachable
-
Domain status
Unreachable → Reachable
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies
7 high-confidence technologies identified
VirusTotal Analysis
Archived Evidence
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of worldbuyyouself.com · checked Aug 4, 2026
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive