thesportsschool[.]net

On July 22, 2026, the domain thesportsschool.net was observed as an offline site that had previously hosted a brand‑impersonation campaign targeting Shopify merchants. The site resolved to the IPv4 address 162.0.209.243, which is allocated to the United States and belongs to ASN 22612 operated by Namecheap, Inc. Registration records show the domain was created on 28 July 2024 through the Namecheap registrar. The TLS certificate presented by the server was issued by Sectigo RSA Domain Validation Secure Server CA, indicating a valid‑looking HTTPS endpoint at the time of operation. The only visible artifact on the site was the page title “MAXWIN5000 🧡 Link Alternatif Terbaru Gampang Bocor”, a title that does not reference Shopify directly but was linked to the campaign’s impersonation of the Shopify brand.

VirusTotal scanned the domain and recorded a single positive detection out of 93 AV engines, and the domain appears on one external security blocklist. Gridinsoft assigned a trust score of 0 / 100, reflecting a high confidence of malicious intent. The site has been taken down and is currently listed as offline by monitoring services, and it is also flagged by the PhishDestroy blocklist.

While the exact phishing landing page content has not been publicly released, the combination of brand impersonation labeling, the low trust score, and the presence on multiple blocklists provides sufficient evidence for defensive operators to treat the domain as malicious. Recommended actions include adding thesportsschool.net to network deny lists, updating web‑proxy and DNS filtering rules, and monitoring for any re‑registration or similar domains that resolve to the same Namecheap infrastructure. Continuous observation of the associated IP address and ASN for future abuse is also advised.