www-fifaworldcup[.]com
“www-fifaworldcup.com | 522: Connection timed out”
www-fifaworldcup.com — Conteúdo indisponível (HTTP 502). Tipo de golpe: Generic Phishing. Resumo das evidências: VirusTotal 11/91 (alphaMountain.ai, ArcSight Threat Intelligence, BitDefender, CRDF, CyRadar); URLQuery 2 alerts; Spamhaus DBL_PHISH; PhishDestroy score 98/100. Registrador: Metaregistrar BV.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
The domain www-fifaworldcup.com has been identified as a credential theft phishing domain, masquerading as an official FIFA World Cup website to steal login credentials and personal information from unsuspecting football fans. This brand impersonation scheme exploits the global excitement surrounding the tournament to lure victims into entering sensitive data. No specific crypto drainer kit was detected, but the phishing infrastructure is designed for identity theft rather than cryptocurrency theft. PhishDestroy categorizes this as a high-risk threat due to the trusted brand being exploited and the domain's technical indicators pointing to malicious intent.
Technical analysis reveals that VirusTotal flagged this domain with 11 out of 95 security vendors reporting it as malicious. The domain was registered through Metaregistrar BV and created on March 26, 2026, which is surprisingly recent given the phishing campaign appears to target the 2026 World Cup. It resolves to IP address 188.114.97.3, which is associated with Cloudflare's infrastructure, suggesting the attackers are using a content delivery network to obscure their true hosting location. The domain lacks an SSL certificate, a red flag for any site requesting credentials. AlienVault OTX found this domain in 4 threat intelligence pulses, and it appears on 1 security blocklist. Currently, the domain returns a 522 Connection Timed Out error, indicating the hosting server is unresponsive. Google Safe Browsing status was not explicitly provided but based on the data, it is likely flagged or blocked.
As of the latest check, www-fifaworldcup.com is offline and no longer resolving, which is a positive sign. The appropriate response actions taken include reporting the domain to security vendors and blocklist operators, and the domain registrar may have suspended it. However, users who previously visited the site may still be at risk of credential compromise. PhishDestroy recommends that anyone who entered personal information on this site should immediately change their passwords for FIFA-related accounts and any other services using the same credentials. Enable two-factor authentication where possible and monitor financial accounts for suspicious activity. Stay vigilant for similar phishing domains that may appear during major sporting events.
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, SANs do SSL, carimbos de data e hora
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologias · 2 identified
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% de confiançaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% de confiançaAnálise do VirusTotal
Evidências e relatórios externos
PD-20260601-502624 Recipient: abuse@metaregistrar.com Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo