www-fifaworldcup[.]com
“www-fifaworldcup.com | 522: Connection timed out”
www-fifaworldcup.com — Contenuto non disponibile (HTTP 502). Tipo di truffa: Generic Phishing. Riepilogo delle prove: VirusTotal 11/91 (alphaMountain.ai, ArcSight Threat Intelligence, BitDefender, CRDF, CyRadar); URLQuery 2 alerts; Spamhaus DBL_PHISH; PhishDestroy score 98/100. Registrar: Metaregistrar BV.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
The domain www-fifaworldcup.com has been identified as a credential theft phishing domain, masquerading as an official FIFA World Cup website to steal login credentials and personal information from unsuspecting football fans. This brand impersonation scheme exploits the global excitement surrounding the tournament to lure victims into entering sensitive data. No specific crypto drainer kit was detected, but the phishing infrastructure is designed for identity theft rather than cryptocurrency theft. PhishDestroy categorizes this as a high-risk threat due to the trusted brand being exploited and the domain's technical indicators pointing to malicious intent.
Technical analysis reveals that VirusTotal flagged this domain with 11 out of 95 security vendors reporting it as malicious. The domain was registered through Metaregistrar BV and created on March 26, 2026, which is surprisingly recent given the phishing campaign appears to target the 2026 World Cup. It resolves to IP address 188.114.97.3, which is associated with Cloudflare's infrastructure, suggesting the attackers are using a content delivery network to obscure their true hosting location. The domain lacks an SSL certificate, a red flag for any site requesting credentials. AlienVault OTX found this domain in 4 threat intelligence pulses, and it appears on 1 security blocklist. Currently, the domain returns a 522 Connection Timed Out error, indicating the hosting server is unresponsive. Google Safe Browsing status was not explicitly provided but based on the data, it is likely flagged or blocked.
As of the latest check, www-fifaworldcup.com is offline and no longer resolving, which is a positive sign. The appropriate response actions taken include reporting the domain to security vendors and blocklist operators, and the domain registrar may have suspended it. However, users who previously visited the site may still be at risk of credential compromise. PhishDestroy recommends that anyone who entered personal information on this site should immediately change their passwords for FIFA-related accounts and any other services using the same credentials. Enable two-factor authentication where possible and monitor financial accounts for suspicious activity. Stay vigilant for similar phishing domains that may appear during major sporting events.
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 2 identified
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confidenza al 100%Analisi di VirusTotal
Dati e relazioni esterne
PD-20260601-502624 Recipient: abuse@metaregistrar.com Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo