fifahr-careers[.]com

The domain fifahr-careers.com is currently flagged as a high-risk phishing site targeting individuals seeking employment opportunities related to the FIFA World Cup 2026. Analysis indicates this domain is actively impersonating the official FIFA brand, leveraging the upcoming event to deceive users into submitting personal or financial information under false pretenses. The threat type is classified as generic phishing, with infrastructure designed to mimic legitimate career portals associated with major sporting events. Infrastructure analysis reveals the domain was registered on June 24, 2024, through Name.com, Inc., and resolves to the IP address 35.157.26.135. Security vendor assessments on VirusTotal show that 2 out of 95 engines have flagged this domain as malicious, a low but notable detection rate that suggests emerging or evasive phishing tactics. The domain employs a Let's Encrypt SSL certificate, which, while providing encryption, is commonly used by threat actors to lend a false sense of legitimacy to phishing sites. No additional blocklist entries or trust scores were identified at the time of assessment, though the domain's recent creation and targeted impersonation of a high-profile event raise significant concerns. As of the latest verification, fifahr-careers.com remains active and accessible, indicating an ongoing threat to unsuspecting users. Organizations and individuals are advised to block this domain at the network level and refrain from interacting with its content. Users should verify employment opportunities exclusively through official FIFA channels or accredited partners. Security teams are recommended to monitor for additional indicators of compromise, such as related IP addresses or newly registered domains with similar naming conventions, and update detection rules accordingly.