onefootballclub[.]live
“OneFootball Club Pre-TGE Portal”
onefootballclub.live — 服务器错误 (HTTP 502). 品牌冒充:Across; 诈骗类型:Fake Airdrop. 证据摘要: VirusTotal 3/94 (alphaMountain.ai, Gridinsoft, SOCRadar); URLQuery 2 alerts; 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); PhishDestroy score 78/100. 注册商: NiceNIC.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain, onefootballclub.live, presents itself as a legitimate portal for a token generation event (TGE) associated with a football club. Analysis indicates it is a phishing site designed to harvest cryptocurrency wallet credentials and private keys. Visitors are prompted to connect wallets to claim tokens, a common tactic to drain funds from unsuspecting users. The fraudulent nature of the site is evident through its deceptive interface, which mimics official token sale platforms to exploit trust in blockchain projects. Infrastructure analysis reveals the domain was registered on April 12, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 45.93.101.180 and is flagged by 3 out of 95 security vendors on VirusTotal. The site appears on four security blocklists and is actively blocked by multiple browser-based security tools. Technologies detected include PHP, LiteSpeed, and Hostinger, with HTTP/3 support, suggesting a professionally hosted phishing operation rather than a hastily deployed scam. If a user has visited onefootballclub.live or interacted with its content, immediate action is required. Disconnect any connected wallets from the site and revoke permissions via blockchain explorers or wallet management tools. Scan the device for malware, as phishing sites may deploy additional payloads. Monitor linked wallets for unauthorized transactions and report the domain to relevant security platforms for further mitigation. Users should verify the legitimacy of token sales through official project channels before engaging with any TGE-related websites.
网络安全情报 Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | onefootballclub.live |
malicious | Sinkholed |
| DNS4EU | onefootballclub.live |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-21 03:16:56 UTC
所用技术 · 4 identified
Server-side scripting language designed for web development.
High-performance web server compatible with Apache configurations.
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of onefootballclub.live · checked Jun 26, 2026
证据与外部报告
PD-20260412-A74070 Recipient: abuse@nicenic.net, abuse@identitydigital.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。