fifaworldcup2026seattlehotels[.]com

This domain is flagged as an elevated-risk phishing site specializing in brand impersonation, specifically targeting the FIFA World Cup 2026 event. Analysis indicates the domain was designed to deceive users seeking official event-related accommodations, likely harvesting credentials or payment details under the guise of legitimate booking services. Infrastructure analysis reveals the domain was registered on June 12, 2026, through GoDaddy.com, LLC, and hosted on a server running Nginx with OpenResty. The SSL certificate was issued by GoDaddy.com, Inc. At the time of detection, the domain was flagged by 6 out of 95 security vendors on VirusTotal and appeared on 1 security blocklist. AlienVault OTX recorded the domain in 4 threat intelligence pulses, further corroborating its malicious nature. The domain has since been taken offline, though historical DNS records may still pose residual risks. Mitigation steps for this specific threat type include blocking the domain across all network security controls and monitoring for residual DNS queries. Organizations should alert employees and customers about fake event-related booking sites, particularly those impersonating major sporting events. Security teams are advised to review logs for connections to the domain between June 12, 2026, and its takedown date, focusing on credential submission or payment processing endpoints. If user interactions are suspected, initiate password resets and enable multi-factor authentication for affected accounts.