fifaworldcup2026dallashotels[.]com

The domain fifaworldcup2026dallashotels.com has been identified as hosting phishing activities, specifically associated with brand impersonation. This domain appears to have been set up to mimic legitimate communication in relation to the FIFA World Cup 2026 events, potentially targeting users seeking accommodations in Dallas. The site's usage of common web technologies like Nginx and OpenResty suggests it was set up to handle significant traffic, which is typical of phishing campaigns designed to harvest personal information from unsuspecting users.

Technical analysis reveals that the domain is registered through GoDaddy.com, LLC, with a creation date of June 12, 2026. On VirusTotal, this domain has been flagged by 7 out of 95 security vendors, indicating possible malicious intent. The domain's IP address, where detected, falls within a range commonly associated with similar phishing campaigns. This domain also appears on at least one security blocklist and has been included in four threat intelligence pulses on AlienVault OTX, evidence of its recognition within the cybersecurity community.

Currently, fifaworldcup2026dallashotels.com is offline, effectively reducing its immediate threat level. However, past inclusion in a known blocklist and detection by multiple security frameworks suggest a high likelihood of similar future threats. Users are advised to remain vigilant when approached by domains offering deals related to large-scale events and to verify URLs before entering any personal information. Security teams should monitor for reactivation attempts and update blocklists accordingly to preempt any related phishing attempts.