fifa-com[.]top

Analysis of the domain fifa-com.top shows a recent infrastructure setup aligned with a generic phishing operation. The domain was registered on June 01, 2026 through Gname.com Pte. Ltd., and its authoritative name servers are a4.share-dns.com. and b4.share-dns.net. DNS resolution points to IP address 154.86.0.33, which is hosted in Hong Kong and associated with Megalayer Technology Co., Limited.

Threat intelligence from AlienVault OTX indicates the domain appears in four separate OTX pulses, confirming its inclusion in broader phishing tracking feeds. The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service. VirusTotal scans report that three out of ninety‑one security vendors flagged the domain, providing independent confirmation of malicious intent. Current operational status is offline, suggesting the hosting has been taken down or the site is no longer reachable.

No public evidence exists regarding SSL certificates, HTTP response codes, page titles, or specific brand impersonation, so those vectors remain unverified. Defenders should continue to monitor the associated IP address and name server patterns for re‑use, enforce outbound traffic controls to block resolution of the domain, and incorporate the domain hash into existing phishing detection rules. Additionally, security teams should update their blocklists with the registrar and hosting details to pre‑empt future campaigns that may reuse the same registration or hosting infrastructure.