footballpro[.]fun

This domain, footballpro.fun, operates as a credential harvesting phishing site targeting users of sports-related services. Analysis indicates the site masquerades under the page title 'Sport.Fun,' presenting itself as a legitimate sports platform to deceive visitors into submitting login credentials, payment details, or other sensitive information. The infrastructure and content are designed to exploit trust in sports entertainment brands, increasing the likelihood of successful social engineering attacks. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with phishing and fraudulent domains. It resolves to the IP address 188.114.97.3, hosted on AS13335 (Cloudflare, Inc.), a network commonly used to obfuscate malicious infrastructure. At the time of assessment, 18 out of 95 security vendors on VirusTotal flagged footballpro.fun as malicious, while four distinct security blocklists, including Google Safe Browsing, have listed the domain for phishing activity. The absence of an SSL certificate further undermines user security, exposing submitted data to interception. Users who visited footballpro.fun should take immediate remedial action to mitigate potential compromise. Those who entered credentials or financial information should assume their data has been exposed and initiate password resets across all accounts where identical or similar credentials were used. System scans using updated security tools are recommended to detect any secondary payloads or malware introduced during the visit. Browser caches and saved form data should be cleared to remove any residual traces of interaction with the site. Given the domain’s high-risk classification and offline status, affected users should monitor associated accounts for unauthorized activity and report any suspicious transactions to relevant financial institutions.