cheyopt[.]net

This domain, cheyopt.net, is identified as a generic phishing site targeting users with a fraudulent "World Win 2026" prize scheme. Analysis indicates no direct association with cryptocurrency drainer kits or credential harvesting pages, but the site mimics legitimate promotional campaigns, likely to collect personal information or distribute malware under the guise of a fake giveaway. The page title "World Win 2026" suggests an attempt to exploit interest in the upcoming FIFA World Cup, though no official branding or trademarks are confirmed in the visible infrastructure. Infrastructure analysis reveals the domain was registered on July 11, 2023, through REG.RU LLC and currently resolves to the IP address 172.67.211.31, hosted behind Cloudflare with HTTP/3 support. Security vendor detections on VirusTotal stand at 14 out of 95, while AlienVault OTX records its presence in 50 threat intelligence pulses. The domain appears on two security blocklists, including PhishDestroy and PhishingDB, and holds a Gridinsoft trust score of 22/100. The SSL certificate is issued by Google Trust Services, a common but not exclusive indicator of legitimacy. As of the latest assessment, cheyopt.net has been taken offline, reducing immediate exposure risk. However, the domain remains registered and could be reactivated or repurposed for similar campaigns. Users who interacted with the site should monitor for unauthorized account access or identity theft attempts. Organizations are advised to maintain blocklist updates and educate users on recognizing unsolicited prize notifications, particularly those leveraging high-profile events like the World Cup.