fifaworldcup2026miamihotels[.]com

Analysis shows the domain fifaworldcup2026miamihotels.com was registered on 12 June 2026 through GoDaddy.com, LLC and uses a GoDaddy‑issued DV TLS certificate signed by the GoDaddy TLS Intermediate CA. The site resolves to 15.197.148.33, an address associated with an AWS Global Accelerator endpoint located in Canada. HTTP requests return a 200 status and the server stack is identified as Nginx running OpenResty. The domain appears on one public blocklist and has been flagged by PhishDestroy. It has been cited in four AlienVault OTX pulses and eight of ninety‑one VirusTotal scanners have marked it as malicious, while Gridinsoft assigns a trust score of 0 / 100. The evidence points to an active generic phishing infrastructure targeting users of the FIFA World Cup 2026 and hotel bookings in Miami. No content details have been disclosed, so the exact lure and credential‑capture mechanisms remain unknown. Defenders should block the domain and its resolved IP at network perimeters, add the host to DNS sinkhole lists, and monitor for related traffic patterns or similar GoDaddy‑registered domains created in the same period. Continuous threat‑intel feeds should be consulted for new indicators of compromise.