worldcup26kc[.]com

This domain, worldcup26kc.com, operates as a credential theft scam specifically targeting individuals seeking FIFA World Cup 2026 tickets, hotels, or VIP packages. The site impersonates official World Cup 2026 branding to harvest login credentials, payment details, and personal information from victims under false pretenses of legitimate ticket sales. Analysis of the page title, 'World Cup 2026 | Tickets, Hotels & VIP Packages,' confirms the domain’s intent to exploit high-demand event interest through social engineering tactics. Infrastructure analysis reveals multiple technical indicators supporting malicious classification. The domain resolves to IP address 216.198.79.67 and was registered through GoDaddy.com, LLC on March 10, 2024, indicating recent creation for short-term malicious use. It appears on two security blocklists and is flagged by 7 out of 95 security vendors on VirusTotal, including detection by PhishDestroy and OISD. The SSL certificate, issued by GoDaddy.com, Inc., does not mitigate the risk, as the domain has since been taken offline following detection. Users who visited worldcup26kc.com should immediately revoke any entered credentials, particularly for email, banking, or payment platforms. Monitor financial statements for unauthorized transactions and report suspicious activity to relevant institutions. Reset passwords for any accounts accessed from the same device or network during the exposure window. Consider implementing additional authentication measures, such as hardware tokens or biometric verification, for sensitive accounts. If payment details were submitted, contact financial institutions to dispute potential fraudulent charges and request card replacement.