wamo-app[.]icu

PhishDestroy has identified wamo-app.icu as a domain engaged in credential harvesting phishing scams, with its threat status currently under investigation. This domain attempts to deceive users into divulging sensitive login credentials, potentially targeting financial or personal accounts. No specific brand impersonation has been confirmed at this time.

According to the latest intelligence, wamo-app.icu was registered on April 15, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to IP address 104.21.82.71 and utilizes an SSL certificate issued by Let’s Encrypt to appear legitimate. VirusTotal analysis shows 0 detections out of 95 antivirus vendors, indicating it has not yet been flagged by major security engines. There is no current blocklist count reported, and trust scores remain inconclusive given the ongoing investigation.

The domain remains active at present, posing an evolving risk to internet users. It is advised to avoid interacting with this site or providing any personal information. Organizations should consider implementing domain and IP blocking rules for 104.21.82.71 and maintain updated endpoint protections. Users are encouraged to verify URLs carefully and report suspicious login requests. Continuous monitoring and threat intelligence updates will be essential for mitigating potential harm from this credential harvesting operation.