fifa-com[.]com

This domain, fifa-com.com, is actively engaged in credential theft by impersonating the official FIFA World Cup 2026 ticket sales platform. The site presents a fraudulent interface mimicking legitimate ticket purchasing workflows, targeting users seeking access to the 2026 event. Analysis indicates the infrastructure is designed to harvest login credentials, payment details, and personal information under the guise of secure ticket distribution for the upcoming tournament. Evidence supporting this assessment includes detection by 21 out of 95 security vendors on VirusTotal, registration through a major domain registrar on March 20, 2026, and presence on one security blocklist. The domain resolves to IP address 172.67.150.27 and is associated with four threat intelligence pulses in AlienVault OTX. The site employs technologies such as React, jQuery, and Cloudflare, which are commonly used in both legitimate and malicious infrastructures to enhance user experience and evade detection. Users who have visited fifa-com.com should immediately revoke any entered credentials, particularly for accounts related to email, banking, or payment services. Monitor financial statements for unauthorized transactions and consider placing a fraud alert with credit bureaus. If payment information was submitted, contact the relevant financial institution to block potential fraudulent charges. Reset passwords for any accounts accessed from the same device or network during the exposure period, prioritizing accounts with elevated privileges or sensitive data.