nikideairtm[.]com

Analysis of the domain nikideairtm.com shows that it was created on 21 July 2026 and is registered through Cloudflare, Inc. The authoritative nameservers are itzel.ns.cloudflare.com and seamus.ns.cloudflare.com, indicating the domain is hosted on Cloudflare's network. DNS resolution points to the IP address 188.114.96.3, which is associated with Cloudflare’s edge infrastructure and therefore masks the true backend server location. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service, confirming that at least one external threat‑intel feed has classified it as malicious.

VirusTotal has processed the domain with 95 scanning engines; none have raised a detection at the time of analysis, but the absence of a flag does not constitute evidence of benign intent. No public information on SSL/TLS certificates, HTTP response codes, Safe Browsing status, or Open Threat Exchange (OTX) mentions is currently available, and the page title has not been captured. The combination of recent registration, use of Cloudflare as a registrar and DNS provider, and inclusion on a phishing‑oriented blocklist aligns with patterns observed in generic phishing campaigns that leverage reputable hosting providers to gain credibility and evade simple reputation checks.

Defenders should treat the domain as high‑risk until further forensic evidence is obtained. Recommended mitigations include adding nikideairtm.com to outbound and inbound firewall deny lists, configuring DNS filtering to block resolution, monitoring for any traffic to the associated IP address, and educating users to ignore unsolicited messages that reference the domain. Continuous re‑evaluation is advised as additional intelligence, such as payload samples or victim reports, becomes available.