www-fifaworldcup[.]com
“www-fifaworldcup.com | 522: Connection timed out”
www-fifaworldcup.com — सामग्री अनुपलब्ध (HTTP 502). घोटाले का प्रकार: Generic Phishing. साक्ष्य सारांश: VirusTotal 11/91 (alphaMountain.ai, ArcSight Threat Intelligence, BitDefender, CRDF, CyRadar); URLQuery 2 alerts; Spamhaus DBL_PHISH; PhishDestroy score 98/100. रजिस्ट्रार: Metaregistrar BV.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
The domain www-fifaworldcup.com has been identified as a credential theft phishing domain, masquerading as an official FIFA World Cup website to steal login credentials and personal information from unsuspecting football fans. This brand impersonation scheme exploits the global excitement surrounding the tournament to lure victims into entering sensitive data. No specific crypto drainer kit was detected, but the phishing infrastructure is designed for identity theft rather than cryptocurrency theft. PhishDestroy categorizes this as a high-risk threat due to the trusted brand being exploited and the domain's technical indicators pointing to malicious intent.
Technical analysis reveals that VirusTotal flagged this domain with 11 out of 95 security vendors reporting it as malicious. The domain was registered through Metaregistrar BV and created on March 26, 2026, which is surprisingly recent given the phishing campaign appears to target the 2026 World Cup. It resolves to IP address 188.114.97.3, which is associated with Cloudflare's infrastructure, suggesting the attackers are using a content delivery network to obscure their true hosting location. The domain lacks an SSL certificate, a red flag for any site requesting credentials. AlienVault OTX found this domain in 4 threat intelligence pulses, and it appears on 1 security blocklist. Currently, the domain returns a 522 Connection Timed Out error, indicating the hosting server is unresponsive. Google Safe Browsing status was not explicitly provided but based on the data, it is likely flagged or blocked.
As of the latest check, www-fifaworldcup.com is offline and no longer resolving, which is a positive sign. The appropriate response actions taken include reporting the domain to security vendors and blocklist operators, and the domain registrar may have suspended it. However, users who previously visited the site may still be at risk of credential compromise. PhishDestroy recommends that anyone who entered personal information on this site should immediately change their passwords for FIFA-related accounts and any other services using the same credentials. Enable two-factor authentication where possible and monitor financial accounts for suspicious activity. Stay vigilant for similar phishing domains that may appear during major sporting events.
नेटवर्क सुरक्षा इंटेलिजेंस
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 2 identified
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% विश्वासHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% विश्वासवायरसटोटल विश्लेषण
साक्ष्य और बाहरी रिपोर्टें
PD-20260601-502624 Recipient: abuse@metaregistrar.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।