wickbot-af3ht8wyj5ed[.]vercel[.]app

The domain wickbot-af3ht8wyj5ed.vercel.app was identified as a generic phishing site posing an elevated risk. It did not impersonate a specific brand or deploy a known drainer kit. As of the latest verification, wickbot-af3ht8wyj5ed.vercel.app has been taken offline, though its prior activity targeted users with credential harvesting or other phishing tactics. Individuals searching whether wickbot-af3ht8wyj5ed.vercel.app is safe or a scam should treat it as malicious.

Technical indicators confirm the domain's suspicious nature. VirusTotal reported 1 of 95 security vendors flagged wickbot-af3ht8wyj5ed.vercel.app, while Google Safe Browsing did not detect it. The domain appeared on 1 security blocklist (PhishDestroy) and was registered through Tucows Domains Inc. on February 21, 2026. It resolved to the IP address 64.29.17.3, hosted by Amazon.com, Inc. (AS16509) in the US, and used an SSL certificate issued by Google Trust Services / WR1. The observed page title was '404: NOT_FOUND', with HTTP status 404, and technologies included Vercel and HSTS.

Users who interacted with wickbot-af3ht8wyj5ed.vercel.app should take immediate safety steps. For credential phishing, change passwords for any accounts accessed via the site, enable two-factor authentication (2FA), and monitor accounts for unauthorized activity. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in takedown efforts. If financial or crypto services were involved, revoke any token approvals and consider moving funds to a new wallet.