fifaworldcup2026vancouverhotels[.]com

This domain, fifaworldcup2026vancouverhotels.com, has been identified as a phishing site engaged in brand impersonation targeting the FIFA World Cup 2026 event. Analysis confirms the domain was designed to deceive users by mimicking official FIFA-affiliated hotel booking services for the Vancouver region. The site is currently offline, but prior activity indicates a clear intent to harvest personal and financial information under false pretenses. Infrastructure analysis reveals the domain was registered on June 12, 2026, through GoDaddy.com, LLC, a widely used registrar. Security vendor assessments on VirusTotal show that 7 out of 95 engines flagged the domain as malicious, signaling a consensus among multiple detection systems. The domain appears on four distinct threat intelligence pulses in AlienVault OTX and is listed on one security blocklist. Technical indicators include the use of an SSL certificate issued by GoDaddy.com and backend technologies such as Nginx and OpenResty, which are commonly employed in both legitimate and malicious web infrastructures. The domain’s creation date aligns closely with the timeline of FIFA World Cup 2026 preparations, suggesting a premeditated attempt to exploit heightened public interest. Given the domain’s current offline status, immediate risk to users is mitigated; however, the infrastructure may be reactivated or repurposed for similar campaigns. Organizations and individuals are advised to block the domain at the network level and monitor for any resurgence. Users who may have interacted with the site should verify their accounts for unauthorized activity and report any suspicious transactions. Security teams should correlate this domain with other FIFA-themed phishing indicators to identify broader campaign patterns. Proactive measures, including domain monitoring and user education on brand impersonation tactics, are recommended to prevent future exposure.