onefootballclub[.]live
“OneFootball Club Pre-TGE Portal”
onefootballclub.live — Errore del server (HTTP 502). Simulazione del marchio: Across; Tipo di truffa: Fake Airdrop. Riepilogo delle prove: VirusTotal 3/94 (alphaMountain.ai, Gridinsoft, SOCRadar); URLQuery 2 alerts; 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); PhishDestroy score 78/100. Registrar: NiceNIC.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
This domain, onefootballclub.live, presents itself as a legitimate portal for a token generation event (TGE) associated with a football club. Analysis indicates it is a phishing site designed to harvest cryptocurrency wallet credentials and private keys. Visitors are prompted to connect wallets to claim tokens, a common tactic to drain funds from unsuspecting users. The fraudulent nature of the site is evident through its deceptive interface, which mimics official token sale platforms to exploit trust in blockchain projects. Infrastructure analysis reveals the domain was registered on April 12, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 45.93.101.180 and is flagged by 3 out of 95 security vendors on VirusTotal. The site appears on four security blocklists and is actively blocked by multiple browser-based security tools. Technologies detected include PHP, LiteSpeed, and Hostinger, with HTTP/3 support, suggesting a professionally hosted phishing operation rather than a hastily deployed scam. If a user has visited onefootballclub.live or interacted with its content, immediate action is required. Disconnect any connected wallets from the site and revoke permissions via blockchain explorers or wallet management tools. Scan the device for malware, as phishing sites may deploy additional payloads. Monitor linked wallets for unauthorized transactions and report the domain to relevant security platforms for further mitigation. Users should verify the legitimacy of token sales through official project channels before engaging with any TGE-related websites.
Informazioni sulla sicurezza di rete Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | onefootballclub.live |
malicious | Sinkholed |
| DNS4EU | onefootballclub.live |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-21 03:16:56 UTC
Tecnologie · 4 identified
Server-side scripting language designed for web development.
High-performance web server compatible with Apache configurations.
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of onefootballclub.live · checked Jun 26, 2026
Dati e relazioni esterne
PD-20260412-A74070 Recipient: abuse@nicenic.net, abuse@identitydigital.com Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo