Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is complaint@gname.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
chcn-2026-fifa[.]com
“chcn-2026-fifa.com”
chcn-2026-fifa.com — Gizlenmiş · ulaşılabilir. Dolandırıcılık türü: Generic Phishing. Kanıt özeti: VirusTotal 15/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar); cloaking observed; PhishDestroy score 100/100. Kayıt kuruluşu: Gname.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
The domain chcn-2026-fifa.com is currently classified as a high‑risk generic phishing site. The domain was registered on 17 May 2026 through Gname.com Pte. Ltd. and remains active as of 12 July 2026. Its sole web page returns HTTP 200 and presents the title “chcn-2026-fifa.com”, matching the observed landing‑page behavior used in phishing campaigns that impersonate FIFA‑related services.
Infrastructure analysis reveals that the domain resolves to the IPv4 address 23.176.40.163, which is hosted in Japan under AS18526 DDPS Networks, LLC. The authoritative nameservers are a.share-dns.com, a6.share-dns.com, b.share-dns.net, and b6.share-dns.net, a pattern frequently observed in fast‑flux or disposable hosting services. The site serves a TLS certificate issued by Let’s Encrypt (certificate profile YR2), indicating that encryption is in place but does not mitigate the underlying credential‑stealing intent.
Threat intelligence correlates the domain with multiple detection sources. VirusTotal reports 17 of 95 scanners flagging the domain as malicious, and Gridinsoft assigns a trust score of 0 out of 100. PhishDestroy has already blocked the host, and the domain appears on one public blocklist. AlienVault OTX references the domain in two separate threat‑intel pulses, reinforcing its association with phishing activity.
Defenders should immediately add chcn-2026-fifa.com to URL filtering and DNS block policies, and consider blacklisting the resolved IP address 23.176.40.163 to prevent further client connections. Continuous monitoring of the four shared nameservers is advised, as they may be reused for additional malicious payloads. Logging of TLS handshake attempts can provide early warning of re‑use, and incident response teams should treat any credential submissions to this site as compromised.
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analizi
Site Yapılandırma Analizi
Kanıtlar ve Dış Raporlar
PD-20260622-24728D Recipient: complaint@gname.com Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin