# 1ike-shop.biz — SUSPICIOUS

> PhishDestroy identifies 1ike-shop.biz as a crypto drainer posing as a fake Nike shop. This domain, flagged by 3/95 scanners, tricks users into crypto wallet.

## Summary
PhishDestroy identifies 1ike-shop.biz as an active crypto drainer scam masquerading as a counterfeit Nike merchandise store. The domain follows a common phishing tactic of leveraging brand impersonation (Nike) to deceive users into connecting crypto wallets under the guise of exclusive product purchases. While no custom drainer kit has been publicly dissected, this domain aligns with known infrastructure patterns used by crypto drainer gangs such as Monkey Drainer or Inferno Drainer groups, which often reuse similar code and obfuscation techniques across campaigns.

Technical analysis of 1ike-shop.biz confirms multiple red flags: the domain was registered on October 15, 2023, by NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to IP 91.206.71.186. VirusTotal detects this domain at a 3/95 detection ratio, indicating low but not negligible detection by security vendors. It operates under a Google Trust Services SSL certificate, possibly to enhance legitimacy. According to internal blocklist data, this domain has been flagged across multiple threat intelligence feeds, though not yet widely distributed in commercial blocklists. The combination of a newly registered domain, high-risk vertical (crypto drainer), and brand impersonation elevates its threat level to elevated status.

This domain remains active as of the latest assessment, with PhishDestroy having issued an automated block recommendation. Security researchers are advised to monitor for wallet address mappings and transaction alerts tied to this domain. Users should avoid visiting the site and verify any shopping links via trusted sources. While immediate remediation actions are in effect within PhishDestroy’s database, the risk remains elevated due to the fast evolution and reuse of this infrastructure by cybercriminals. Continuous monitoring is required to prevent user exposure to evolving variants.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2023-10-15 08:25:46
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 91.206.71.186

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/e112a342-d5d6-4e40-a94c-931d61428fc2
- PhishDestroy: https://phishdestroy.io/domain/1ike-shop.biz/
- LLM endpoint: https://phishdestroy.io/domain/1ike-shop.biz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/1ike-shop.biz/
Last updated: 2026-03-24