niike[.]vercel[.]app

Analysis of the domain niike.vercel.app indicates an active high-risk phishing campaign impersonating the Nike brand, as evidenced by the page title 'Nike' and its classification as generic_phishing. The domain was registered on April 15, 2026, through Vercel Inc. and currently resolves to the IP address 216.198.79.67. Infrastructure analysis reveals the use of Vercel hosting services and HTTP Strict Transport Security (HSTS), alongside an SSL certificate issued by Google Trust Services, which may lend a superficial appearance of legitimacy. As of July 12, 2026, the domain is flagged by 15 of 95 security vendors on VirusTotal and appears on at least one security blocklist, including PhishDestroy. Trust assessment platforms assign low scores, with Gridinsoft and Scamadviser both rating it 0/100 and 1/100, respectively. The domain remains active, and no takedown or mitigation actions have been observed. The exact content and functionality of the site have not been fully analyzed, but the presence of the Nike page title suggests an attempt to deceive users into believing they are interacting with an official Nike storefront. Defenders should treat this domain as malicious and prioritize blocking or sinkholing it at the network level. Organizations are advised to monitor for connections to 216.198.79.67 and review logs for any user interactions with niike.vercel.app, particularly in environments where Nike-related communications or transactions are expected. Further investigation into the hosting infrastructure and associated domains registered through Vercel may reveal additional related threats.