fifa[.]city

Fifa.city is an active phishing domain that impersonates the official FIFA World Cup website, aiming to deceive fans looking for information about the 2026 tournament. The site is flagged as malicious by 11 out of 91 VirusTotal vendors, indicating a significant threat level. It is registered through GNAME.COM PTE. LTD. and hosted by Cloudflare, Inc. in the United States.

The domain's page title, "FIFA World Cup 2026™ Tickets | Host Cities, Dates, Teams, Tickets," suggests it is designed to lure users into believing they are accessing legitimate ticketing information. The SSL certificate is issued by Let's Encrypt, a common choice for phishing sites due to its ease of use and free cost. Fifa.city is publicly blocklisted by PhishDestroy, highlighting its recognition as a threat.

Despite its malicious intent, the domain remains active and operational. The platform risk score is high at 88/100, reflecting its potential danger to unsuspecting users. The domain was created in November 2025 and was first detected by PhishDestroy in June 2026, showcasing the site's rapid deployment and exploitation of major events like the FIFA World Cup to target victims. The active status and significant VirusTotal detections underscore the importance of awareness and caution when seeking information about high-profile events online.