wickbot[.]co

The domain wickbot.co was registered on February 21, 2026 and is presently taken offline, as indicated by the current status flag. Technical indicators show that the domain appears on a single security blocklist and has been referenced in one AlienVault OTX threat‑intelligence pulse. PhishDestroy also lists wickbot.co as a blocked resource, reinforcing the classification of the site as a phishing vector.

VirusTotal analysis recorded ten detections out of ninety‑three scanned security vendors, confirming that multiple independent scanners identified malicious behavior associated with the domain. The page title returned by HTTP requests is the literal string "wickbot.co," offering no additional context about the content hosted at the address. No further data on hosting infrastructure, IP address, ASN, SSL certificate, or geographic location was provided in the available intelligence.

The cumulative evidence—registration date, blocklist appearance, OTX pulse inclusion, PhishDestroy block, and multi‑vendor VirusTotal detections—supports an elevated risk rating for the domain. Defenders should ensure that wickbot.co is added to existing URL filtering and DNS blocklists, verify that any cached references are purged from security appliances, and monitor for any resurgence of the domain or associated indicators. Continuous re‑evaluation is advised in case the domain is re‑registered or the threat actors modify their infrastructure.