admin[.]pwffood[.]com

The domain admin.pwffood.com has been confirmed as a brand impersonation phishing site targeting ONE Championship, a prominent mixed martial arts organization. Analysis indicates the site masquerades as the official Chinese platform for ONE Championship’s Friday Fight Night events, as evidenced by the page title 'ONE冠军赛·(中国)周五格斗夜_官网.' The domain is currently offline, though prior activity suggests intent to harvest credentials or distribute malicious payloads under the guise of legitimate sports content. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered on October 01, 2021, through Gname.com Pte. Ltd., a registrar frequently associated with suspicious registrations. It resolves to the IP address 154.210.78.241, located in Hong Kong under autonomous system AS9294 (GNET INC.), a network with a history of hosting malicious infrastructure. The domain lacks an SSL certificate, a critical omission for any site handling user data. Security vendors have flagged the domain as malicious, with 21 of 95 VirusTotal engines detecting it as phishing-related. Additionally, the domain appears on two security blocklists, further corroborating its malicious classification. Current status indicates the domain has been taken offline, though residual risk remains for users who may have interacted with it prior to deactivation. Organizations and individuals are advised to block the domain and its associated IP address at the network level. Users who accessed the site should assume potential credential exposure and initiate password resets for any accounts linked to the impersonated brand. Monitoring for unusual activity on financial or personal accounts is strongly recommended. Network administrators should review logs for connections to 154.210.78.241 and investigate any related outbound traffic for signs of compromise.