nikeadidad1779100089305[.]0191838[.]meusitehostgator[.]com[.]br

This domain, nikeadidad1779100089305.0191838.meusitehostgator.com.br, is identified as a high-risk generic phishing threat actively targeting users through credential harvesting tactics. Analysis indicates the domain impersonates major sportswear brands, likely Nike and Adidas, to deceive victims into submitting login credentials, payment details, or personal information. The domain remains operational as of the latest verification, with no takedown or deactivation observed. Infrastructure analysis reveals the domain was registered through NEWFOLD on March 14, 2025, and currently resolves to the IP address 172.64.145.200, hosted on Cloudflare's network (AS13335). The domain is flagged by 6 of 95 security vendors on VirusTotal, indicating moderate detection but persistent evasion techniques. It appears on one security blocklist and is blocked by at least one anti-phishing service. The SSL certificate is issued by Let's Encrypt, a common tactic to lend superficial legitimacy to malicious domains. The page title, 'Access denied | nikeadidad1779100089305.0191838.meusitehostgator.com.br used Cloudflare to restrict access,' suggests the use of Cloudflare's security features to obscure backend infrastructure and deter analysis. Current risk assessment classifies this domain as high due to its active status, brand impersonation, and use of evasion techniques. Organizations and users are advised to block the domain and its resolving IP (172.64.145.200) at the network level. Security teams should monitor for related subdomains or newly registered domains under the same registrar (NEWFOLD) or hosting provider (HostGator). End-users should be educated to recognize phishing indicators, such as mismatched URLs, urgent calls to action, and requests for sensitive information. If credentials were entered on this domain, immediate password resets and multi-factor authentication enforcement are recommended for affected accounts.