exact-2026worldcup[.]com

This domain, exact-2026worldcup.com, is flagged for credential theft targeting users seeking information about the 2026 FIFA World Cup. Analysis indicates the site was designed to harvest login credentials, likely leveraging the upcoming event's popularity to deceive victims. No crypto drainer kit or payment redirection was observed, but the domain exhibits characteristics of a large-scale phishing campaign impersonating official FIFA branding and event-related content. Infrastructure analysis reveals the domain was registered on February 02, 2026, through NameMart Pte. Ltd. and resolved to the IP address 177.210.113.220. VirusTotal detection shows 9 out of 95 security vendors flagged the domain as malicious, while it appears on one additional security blocklist. The domain was not listed in Google Safe Browsing at the time of assessment, suggesting either recent takedown or evasion of initial detection layers. The domain is currently offline, having been taken down following detection and blocking by security systems. Despite its inactive status, residual risk remains due to potential cached pages or secondary distribution channels (e.g., phishing emails, social media links). Users who interacted with the domain prior to takedown should immediately reset credentials for any accounts accessed during that period, particularly those tied to email, financial services, or FIFA-related platforms. Organizations are advised to monitor for indicators of compromise (IOCs) associated with this domain and IP, including network logs for connections to 177.210.113.220.