# aatomnikkwall.webflow.io — MALICIOUS

> aatomnikkwall.webflow.io is a fake Nike-themed phishing page stealing login credentials. Flagged by 14/95 VirusTotal scanners.

## Summary
PhishDestroy identifies aatomnikkwall.webflow.io as an active credential-stealing phishing site posing as a Nike wall giveaway. The page prompts users to log in with their Nike account to claim a prize, harvesting entered credentials for fraudulent use. Connected to IP 172.64.151.8 and secured by a Google Trust Services certificate, this site abuses the legitimate webflow.io platform to appear authentic while hosting its malicious form.  This domain was flagged by exactly 14 out of 95 VirusTotal security vendors as a phishing page designed to impersonate Nike and steal user credentials. The scam exploits the trust in the Webflow hosting service to bypass immediate suspicion, while leveraging the recognizable Nike brand to trick users into entering their account details. As of analysis, it remains active and continues to pose a risk to potential victims.  If you visited aatomnikkwall.webflow.io or entered any details, change your Nike account password immediately and enable two-factor authentication. Scan your device for malware in case credentials were also reused elsewhere. Report the site to Nike and your cybersecurity team to help block further abuse. Never trust unexpected login prompts from unfamiliar links, even if they appear on branded platforms.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 172.64.151.8

## Detection Status
- VirusTotal: 14 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/615196d1-2689-43de-9fd7-0a64db9ae360
- PhishDestroy: https://phishdestroy.io/domain/aatomnikkwall.webflow.io/
- LLM endpoint: https://phishdestroy.io/domain/aatomnikkwall.webflow.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/aatomnikkwall.webflow.io/
Last updated: 2026-03-24