usaworldcup2026shop[.]com

The domain usaworldcup2026shop.com has been observed in multiple phishing mitigation feeds. PhishDestroy recorded a block on the domain, and it currently appears on a single public security blocklist. A full VirusTotal scan was performed, engaging 91 independent scanners; none reported a malicious finding, yet the lack of detections is not evidence of benign intent. No public Safe Browsing, Open Threat Exchange, or similar reputation services have published a verdict for the domain at this time.

Registrar information, registration date, and hosting IP address have not been disclosed in the available data set, and no SSL certificate details or HTTP response codes have been captured. The page title retrieved from the site has not been analyzed, and no direct evidence links (e.g., screenshots or payload samples) have been released. Consequently, the operational profile of the site remains limited to its inclusion in phishing‑related blocklists. Analysis indicates that the domain is being leveraged as a generic phishing vector, likely intended to harvest credentials related to the 2026 FIFA World Cup merchandise market, given the inclusion of “worldcup2026” and “shop” in the hostname.

The lack of visible brand references in the known metadata prevents confirmation of a specific impersonated target. Defenders should add usaworldcup2026shop.com to URL filtering and web gateway deny lists, monitor DNS queries for the domain, and enforce strict email authentication to reduce the risk of lure emails reaching end users. Continuous re‑scanning with VirusTotal and periodic checks against emerging blocklists are recommended to capture any future changes in the domain’s behavior.