worldcup26ticket[.]com

The domain worldcup26ticket.com was registered on June 12 2026 through the HOSTINGER operations, UAB registrar. DNS resolution points to the IPv4 address 64.29.17.65, indicating a single hosting endpoint that can be targeted for network‑level mitigation. The domain appears on one public security blocklist and has been explicitly blocked by the PhishDestroy service, reflecting active detection by at least one dedicated anti‑phishing provider. A VirusTotal scan recorded 16 of 91 security vendors flagging the domain as malicious, providing a modest but notable consensus of suspicion across multiple AV engines. The threat classification supplied is generic phishing with an elevated risk rating, and the operational status is listed as active as of the report date, July 29 2026.

Current intelligence does not include a published page title, SSL certificate details, HTTP response codes, or any observed brand‑specific lure content. Consequently, the exact phishing vector—such as credential‑harvesting pages or malicious redirects—remains unverified. Absence of additional context (e.g., Safe Browsing verdict, OTX indicator, or associated malware kits) limits the ability to attribute the infrastructure to a broader campaign.

Defenders should prioritize blocking worldcup26ticket.com at perimeter firewalls, DNS resolvers, and proxy layers. Adding the domain to internal blocklists and monitoring outbound connections to 64.29.17.65 can reduce exposure. Continuous re‑scanning on VirusTotal or similar aggregators is advised to capture any evolution in vendor detections. Given the elevated risk level and existing blocklist presence, organizations should treat any traffic to this domain as malicious until further forensic analysis confirms a false positive.