wickedkitchenfoods[.]wickedkitchenfoods[.]com

PhishDestroy identifies wickedkitchenfoods.wickedkitchenfoods.com as an active credential theft portal masquerading under the 'Wicked Kitchen' brand. The domain currently remains unblocked by security vendors despite its fraudulent nature, prompting a high-priority investigation.

The domain wickedkitchenfoods.wickedkitchenfoods.com was registered through GoDaddy.com, LLC, with a creation date of November 07, 2018. It resolves to IP address 188.114.97.3 and utilizes a Google Trust Services SSL certificate to enhance its deceptive legitimacy. VirusTotal currently flags the domain with 0 detections out of 95 vendors, indicating it has evaded automated detection mechanisms. No confirmed presence on major threat intelligence lists has been recorded at this time, though active monitoring remains critical.

Given the domain’s active status and its deployment of credential theft tactics under a food brand guise, immediate action is advised. Security teams should block wickedkitchenfoods.wickedkitchenfoods.com at the network and DNS levels. Users interacting with spoofed 'Wicked Kitchen' domains should be instructed to change credentials and monitor for unauthorized access. Enhanced email filtering rules targeting impersonation patterns involving food brands are also recommended to prevent further exploitation.