nykesmalteria[.]com[.]br

Analysis of nykesmalteria.com.br shows an active generic phishing infrastructure first observed on November 16, 2022. The domain resolves to the IPv4 address 216.172.172.172 and is served by the Brazilian registrar prodns.com.br, using nameservers ns146.prodns.com.br and ns147.prodns.com.br. The domain is currently listed on a single security blocklist and has been blocked by the PhishDestroy service, indicating that at least one reputable anti‑phishing platform has identified malicious activity associated with it.

VirusTotal reports that the domain was scanned by 91 antivirus and URL‑reputation vendors, with none of the engines generating a detection at the time of analysis; this lack of detections does not constitute a safety assurance. The domain remains active as of the report date, July 29, 2026, and its risk level is marked as "under investigation," reflecting insufficient public evidence to assign a definitive severity rating. Defenders should treat the domain as hostile: incorporate the FQDN and its resolving IP address into network‑level blocklists, enforce URL filtering rules that deny outbound connections to the domain, and monitor DNS logs for queries to the associated nameservers.

Continuous re‑scanning with multi‑vendor services is advised to capture any future changes in detection status. Given the limited visibility beyond the basic infrastructure indicators, threat‑intel teams should prioritize this indicator for further investigation, including payload capture and potential attribution of the hosting environment.