fifacollectrecovery[.]pages[.]dev

Fifacollectrecovery.pages.dev is currently active and poses a threat by masquerading as a FIFA-related recovery hub. The site was detected by PhishDestroy on June 20, 2026, and has already garnered attention with two VirusTotal vendors flagging it as malicious. This domain is hosted by Cloudflare, Inc. and operates from an IP address based in the US.

The site leverages the popularity of FIFA to lure unsuspecting users into divulging personal information. Despite its recent creation, the domain has quickly been identified as a threat, with a platform risk score of 81 out of 100. This high score indicates a significant potential for harm, aligning with its presence on public blocklists like PhishDestroy and ScamSniffer.

The use of Cloudflare's infrastructure and a Google Trust Services SSL certificate suggests an attempt to appear legitimate and secure. However, these elements are part of a sophisticated phishing strategy designed to exploit users' trust. The domain's activity underscores the importance of timely detection, as phishing domains often exploit the initial hours post-registration before antivirus databases update. PhishDestroy's proactive detection highlights the site's threat level, even with minimal VirusTotal detections.