adidas-eligibility[.]com

PhishDestroy identifies the domain adidas-eligibility.com as an active generic phishing host currently engaged in credential harvesting and crypto-draining operations. The site masquerades as an Adidas-branded eligibility portal to trick visitors into surrendering wallet credentials or signing malicious transactions. No specific drainer kit fingerprint is publicly documented at this time, but the page structure and lure closely resemble known drainer templates observed in 2025–2026 campaigns targeting sneaker and sports-apparel enthusiasts.

This domain was flagged by PhishDestroy with the following technical indicators: SSL certificate issued by Let’s Encrypt, resolving to IP 188.114.97.3, registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 22, 2026. VirusTotal reports 2 out of 95 security vendors detecting the domain, and Google Safe Browsing has not yet blacklisted it. Independent threat-intel feeds show zero additional blocklist coverage as of the latest scan using seed da3dbe.

The campaign remains ACTIVE with elevated risk. Immediate user action includes blocking the domain at DNS and firewall levels, avoiding any interaction, and verifying all links via PhishDestroy before entering credentials or connecting wallets. While the registrar and hosting provider have not yet responded to takedown requests, the low VT score and absence from GSB suggest a short window remains for proactive network-level blocking. Remaining risk is elevated due to the domain’s fresh registration, active SSL, and targeted lure; users should treat any message referencing adidas-eligibility.com as malicious and report it immediately.