{
  "type": "Domain",
  "indicator": "testnet.chainugo.com",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/testnet.chainugo.com",
    "alexa": "http://www.alexa.com/siteinfo/testnet.chainugo.com",
    "indicator": "testnet.chainugo.com",
    "type": "domain",
    "type_title": "Domain",
    "validation": [],
    "base_indicator": {},
    "pulse_info": {
      "count": 0,
      "pulses": [],
      "references": [],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 1,
  "pulses": [
    {
      "id": "6a16d67df4a69d07c59516be",
      "name": "The GHOST STADIUM Score: Billions At Stake At The World\u2019s Largest Football Tournament",
      "description": "Researchers uncovered a massive fraud ecosystem targeting the 2026 FIFA World Cup, identifying over 4,300 fraudulent domains impersonating FIFA's official website since August 2025. At the center operates GHOST STADIUM, a Chinese-speaking threat actor running a sophisticated phishing campaign across 300+ domains using a pixel-perfect clone of FIFA's authentication system. The operation harvests credentials, sells fake tickets, and processes payments through five distinct channels including cryptocurrency. Estimated losses from premium ticket fraud alone range from $71 million to $474 million, with total campaign losses potentially reaching billions. Six distinct fraud schemes operate in parallel: credential phishing, fake ticket sales, counterfeit merchandise, fake streaming platforms, fraudulent betting sites, and infostealer-driven credential theft. Over 2,513 FIFA account credentials are already circulating on dark-web markets. The campaign exploits Facebook advertising as its primary distribution chann...",
      "author_name": "AlienVault",
      "modified": "2026-05-27T14:08:56.635000",
      "created": "2026-05-27T11:33:17.668000",
      "revision": 2,
      "tlp": "white",
      "public": 1,
      "adversary": "GHOST STADIUM",
      "indicators": [
        {
          "id": 2258431364,
          "indicator": "fifa.gold",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 2967590311,
          "indicator": "fifa.black",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 3004978850,
          "indicator": "fifa.tax",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 3390589325,
          "indicator": "fifaweb.com",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 3455772833,
          "indicator": "fifa.red",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 3464673865,
          "indicator": "fifa.fund",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4114218014,
          "indicator": "148.178.22.16",
          "type": "IPv4",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": "2026-06-26T11:00:00",
          "is_active": 1,
          "role": null
        },
        {
          "id": 4278547065,
          "indicator": "fifa-com.shop",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4278547066,
          "indicator": "fifa-com.site",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4278547067,
          "indicator": "fifa-com.store",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4290607964,
          "indicator": "fifa-com.website",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4314810065,
          "indicator": "fifa.city",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4371624280,
          "indicator": "3b8bb7631b39f455d31544b55ba97b49ab1888c1",
          "type": "FileHash-SHA1",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4371624284,
          "indicator": "148.178.16.48",
          "type": "IPv4",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": "2026-06-26T11:00:00",
          "is_active": 1,
          "role": null
        },
        {
          "id": 4371624286,
          "indicator": "154.86.0.33",
          "type": "IPv4",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": "2026-06-26T11:00:00",
          "is_active": 1,
          "role": null
        },
        {
          "id": 4371624292,
          "indicator": "fifa-com.vip",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308752,
          "indicator": "84ecdca915f1af822ccc8a04479f5179104f353c",
          "type": "FileHash-SHA1",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308753,
          "indicator": "9bd164dd3f50d196c7dff4f6c1b0f1345ac96d9a",
          "type": "FileHash-SHA1",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308754,
          "indicator": "137.220.224.67",
          "type": "IPv4",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": "2026-06-26T11:00:00",
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308755,
          "indicator": "148.178.16.5",
          "type": "IPv4",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": "2026-06-26T11:00:00",
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308756,
          "indicator": "148.178.18.23",
          "type": "IPv4",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": "2026-06-26T11:00:00",
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308757,
          "indicator": "148.178.18.60",
          "type": "IPv4",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": "2026-06-26T11:00:00",
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308758,
          "indicator": "207.56.1.93",
          "type": "IPv4",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": "2026-06-26T11:00:00",
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308759,
          "indicator": "85.121.242.41",
          "type": "IPv4",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": "2026-06-26T11:00:00",
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308760,
          "indicator": "http://fifa-tickets.vip/authorize.html",
          "type": "URL",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308761,
          "indicator": "http://fifa-tickets.vip/pay/FWC20260418A3230F12AC",
          "type": "URL",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308762,
          "indicator": "http://fifa-tickets.vip/tickets_shop",
          "type": "URL",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308763,
          "indicator": "http://www.billplz.com/bills/6e88393d1b82ede9",
          "type": "URL",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308764,
          "indicator": "fifa-26-worldcup.com",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308765,
          "indicator": "fifa-com.co",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308766,
          "indicator": "fifa-com.com",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308767,
          "indicator": "fifa-com.top",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308768,
          "indicator": "fifa-com.xyz",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308769,
          "indicator": "fifa-tickets.vip",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308770,
          "indicator": "fifa-web.co",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308771,
          "indicator": "fifa.bio",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308772,
          "indicator": "fifa.cash",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308773,
          "indicator": "fifa.center",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308774,
          "indicator": "fifa.market",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308775,
          "indicator": "fifa.party",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308776,
          "indicator": "fifa.sale",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308777,
          "indicator": "fifa.shopping",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308778,
          "indicator": "fifa.show",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308779,
          "indicator": "fifa.ski",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308780,
          "indicator": "fifa2026tickets-streamlive.com",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308781,
          "indicator": "football-game.shop",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308782,
          "indicator": "football-ticket.shop",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308783,
          "indicator": "football-ticket.top",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308784,
          "indicator": "football-tickets.top",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308785,
          "indicator": "mm-fifa.top",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308786,
          "indicator": "unitycup2026.com",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308787,
          "indicator": "wc26-fifa.com",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308788,
          "indicator": "www-fifa.co",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308789,
          "indicator": "www-fifa.com",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308790,
          "indicator": "www-fifa.com.co",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308791,
          "indicator": "www-fifa.me",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308792,
          "indicator": "www-fifaworldcup.com",
          "type": "domain",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308793,
          "indicator": "pay.zfxupi.net",
          "type": "hostname",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308794,
          "indicator": "testnet.chainugo.com",
          "type": "hostname",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        },
        {
          "id": 4380308795,
          "indicator": "www.fifa.show",
          "type": "hostname",
          "created": "2026-05-27T11:33:18",
          "content": "",
          "title": "",
          "description": "",
          "expiration": null,
          "is_active": 1,
          "role": null
        }
      ],
      "tags": [
        "ticket fraud",
        "cryptocurrency fraud",
        "ghost stadium",
        "credential phishing",
        "facebook advertising exploitation",
        "fifa world cup 2026",
        "phishing-as-a-service"
      ],
      "targeted_countries": [
        "United States of America",
        "Argentina",
        "Brazil",
        "Canada",
        "Colombia",
        "Mexico"
      ],
      "malware_families": [
        "Vidar",
        "Lumma"
      ],
      "attack_ids": [
        "T1056.001",
        "T1539",
        "T1588.004",
        "T1566.002",
        "T1598.003",
        "T1586.002",
        "T1583.001",
        "T1185",
        "T1555.003",
        "T1003.001",
        "T1102",
        "T1566",
        "T1078",
        "T1585.001",
        "T1027",
        "T1573",
        "T1598",
        "T1189",
        "T1071.001",
        "T1590.001"
      ],
      "references": [
        "https://www.group-ib.com/blog/ghost-stadium-football-fraud/"
      ],
      "industries": [
        "Hospitality",
        "Media",
        "Finance"
      ],
      "extract_source": [],
      "more_indicators": false,
      "indicator_count": 60
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "testnet.chainugo.com",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "testnet.chainugo.com",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780173551.7570853
}