nyworldcup26[.]com

The domain nyworldcup26.com has been identified as a generic phishing site targeting individuals seeking FIFA World Cup 2026 tickets, hotels, and VIP packages. Analysis confirms this domain was actively impersonating official FIFA services to deceive users into disclosing personal and financial information. As of the latest assessment, the domain is reported offline, though its infrastructure remains a documented threat. Infrastructure analysis reveals the domain was flagged by 6 of 95 security vendors on VirusTotal, indicating moderate detection but persistent risk. Registered through GoDaddy.com, LLC on March 10, 2024, the domain resolved to the IP address 216.198.79.67 and utilized an SSL certificate issued by GoDaddy.com, Inc. It appeared on one security blocklist, suggesting limited but confirmed malicious activity. The page title, 'World Cup 2026 | Tickets, Hotels & VIP Packages,' directly mirrors legitimate FIFA promotional content, increasing its deceptive potential. Current status indicates the domain has been taken offline, likely due to enforcement actions or hosting suspension. However, the underlying threat remains elevated due to the domain's recent creation, targeted impersonation of a high-profile event, and prior malicious classification. Organizations and users are advised to block the domain and associated IP at the network level, monitor for related phishing campaigns, and verify all FIFA 2026 ticket purchases through official channels only. Security teams should treat any residual traffic to this domain as a potential compromise indicator and investigate accordingly.