nike-tailwind-ivanscarsella[.]vercel[.]app

PhishDestroy analysts have identified a malicious domain impersonating Nike's Tailwind store to steal user credentials and payment details. The fraudulent site, nike-tailwind-ivanscarsella.vercel.app, is hosted on Vercel's platform but leverages deceptive naming to appear legitimate at a glance. This domain was designed to mimic Nike's design language and product pages, tricking visitors into entering personal or financial information under false pretenses.

This threat was flagged by 11 out of 95 security vendors on VirusTotal, indicating elevated risk. The domain resolves to IP address 216.198.79.67 and uses a valid SSL certificate issued by Google Trust Services, which may further enhance its credibility to unsuspecting users. While the threat was active at the time of discovery, its presence underscores the sophistication of modern phishing campaigns, particularly those abusing legitimate hosting services to evade detection.

If you have visited this site, avoid entering any personal information or payment details. Check your accounts for unauthorized transactions and consider changing passwords if you reused credentials. Report the domain to your IT security team or through your organization's phishing reporting tool. Always verify URLs carefully and use official Nike channels for purchases.