fifa-hr[.]com

This domain, fifa-hr.com, is flagged as an active credential harvesting phishing site targeting users through FIFA-related branding. Analysis indicates the infrastructure is designed to mimic legitimate human resources or gaming portals, likely deploying a credential drainer kit to capture login credentials, payment details, or personal data. The domain exhibits characteristics consistent with phishing campaigns observed in the gaming and esports sectors, where attackers exploit brand recognition to deceive victims. Infrastructure analysis reveals the domain was registered on June 12, 2026, through Name.com, Inc., a registrar frequently associated with phishing domains. It resolves to the IP address 91.195.240.94, an infrastructure node with a history of hosting malicious content. Detection metrics show 18 of 95 security engines on a major scanning platform have flagged the domain as malicious. The domain appears on one security blocklist and is actively blocked by enterprise phishing detection systems. The SSL certificate, issued by DigiCert Inc under the Encryption Everywhere DV TLS CA - G2 intermediate, is used to lend an appearance of legitimacy to the fraudulent site. As of the latest assessment, fifa-hr.com remains active and poses an elevated risk to users. While the domain is blocked by some security mechanisms, its continued resolution and SSL validity suggest ongoing malicious activity. Organizations and individuals are advised to implement network-level blocking for the domain and its associated IP address. Endpoint protection systems should be updated to include this indicator of compromise. Users encountering this domain should avoid interaction, as credential submission will likely result in account compromise or financial fraud. Continuous monitoring of related infrastructure is recommended due to the domain's recent registration and active status.