login[.]pwffood[.]com

This domain is flagged as an elevated-risk credential phishing infrastructure targeting users of a Chinese sports promotion brand. Analysis indicates the site masquerades as the official platform for "ONE冠军赛·(中国)周五格斗夜," a known combat sports event, to harvest login credentials. The threat type is narrowly scoped to credential theft, with no evidence of malware distribution or secondary payload delivery at this time. Infrastructure analysis reveals the domain was registered on October 01, 2021, through Gname.com Pte. Ltd., a registrar frequently associated with phishing operations. It resolves to IP address 154.210.78.241, geolocated in Hong Kong under AS9294 (GNET INC.). The domain lacks SSL encryption, increasing exposure of transmitted credentials. Detection metrics show 21 out of 95 security vendors on VirusTotal flag the domain as malicious. It appears on two blocklists: PhishDestroy and PhishingDB. No legitimate association with the impersonated brand is confirmed, and the domain is currently offline. Mitigation steps for this credential phishing threat include immediate blocking of the domain and its resolving IP at network perimeters. Organizations should deploy email filtering rules to quarantine messages containing references to "login.pwffood.com" or the impersonated brand name. End-users should be alerted to verify domain authenticity before entering credentials, particularly for sports-related login pages. Security teams are advised to monitor for credential reuse attempts from harvested accounts, as phishing campaigns of this nature often target overlapping user bases across platforms.