Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@cosmotown.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
focus-2026worldcup[.]com
“世界杯买球(中国)官方网站 - 2026世界杯官方指定投注平台”
focus-2026worldcup.com — असत्यापित. घोटाले का प्रकार: Brand Impersonation. साक्ष्य सारांश: VirusTotal 10/91 (alphaMountain.ai, BitDefender, CRDF, Forcepoint ThreatSeeker, Fortinet); PhishDestroy score 80/100. रजिस्ट्रार: TuringSign.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
Analysis of focus-2026worldcup.com indicates a brand impersonation campaign consistent with generic phishing objectives. The observed page title presented itself as an official 2026 World Cup betting platform, a tactic commonly used to create false legitimacy and attract user interaction. No drainer kit information was identified in the available intelligence. At the time of assessment, the infrastructure had already been taken offline.
Technical indicators provide multiple signals of malicious classification. VirusTotal records detections from 9 of 95 security vendors. Registration records show the domain was created on April 02, 2026 and registered through TuringSign Inc. d/b/a Cosmotown. DNS resolution associated the domain with IP address 45.203.120.12. The site utilized a Let's Encrypt SSL certificate. Intelligence sources show appearance on 2 security blocklists, with listings attributed to PhishDestroy and OISD. Current status tracking indicates the domain has been taken offline.
Although the infrastructure is no longer active, historical indicators suggest it was used in a phishing context involving deceptive branding and misleading claims of official affiliation. Security teams should maintain block entries for the domain, preserve logs and DNS artifacts related to 45.203.120.12, and review any historical connections from managed assets. Users who interacted with the site should evaluate account activity, credentials, and submitted information for potential exposure. Continued monitoring for lookalike domains, reused hosting infrastructure, and newly registered variants is recommended because operators frequently migrate campaigns after takedown events. Residual risk remains elevated due to the possibility of infrastructure reuse and related domain registrations.
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 4 identified
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100% विश्वासHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% विश्वासBaidu Analytics (百度统计) is a free tool for tracking and reporting traffic data of users visiting your site.
tongji.baidu.com 100% विश्वासवायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of focus-2026worldcup.com · checked Jun 25, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260622-EF9F7E Recipient: abuse@cosmotown.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।