fifacollectcashback[.]pages[.]dev

The domain fifacollectcashback.pages.dev has been identified as an ongoing high-risk generic phishing threat, currently active and impersonating the FIFA brand. The website uses the title 'Fifa Collect Recovery Hub' to deceive visitors into believing it is associated with legitimate FIFA customer service or account recovery functions. Its primary objective appears to be harvesting sensitive user information through fraudulent means.

Technical analysis reveals that this domain is flagged by 1 out of 95 security vendors according to VirusTotal, indicating limited current detection but clear malicious intent. The domain is registered through Cloudflare, Inc. and resolves to IP address 172.66.47.39. The SSL certificate is issued by Google Trust Services, and at present, there is no substantial blocklist presence or broad detection across threat intelligence sources. The targeted impersonation of FIFA, combined with the low detection rate, increases the threat posed by this domain.

Given the domain's ongoing active status and its use of trust-building infrastructure, immediate caution is recommended. End users and organizations should block traffic to fifacollectcashback.pages.dev, monitor for related indicators, and educate users to avoid interaction with recovery or cashback websites of unverified origin. Further investigation and escalation to relevant authorities may be warranted to mitigate risk.