trezar-io-suit-sunnu[.]wasmer[.]app

Analysis as of July 25, 2026 identifies the domain trezar-io-suit-sunnu.wasmer.app as an active generic phishing infrastructure with a high risk rating. The domain is currently listed on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, indicating that at least one reputable anti‑phishing provider has observed malicious use. DNS resolution points to the IPv4 address 62.210.172.162, and the authoritative name servers are alpha.ns.wasmernet.com and beta.ns.wasmernet.com, both belonging to the Wasmer Inc. hosting platform.

Registration data show the domain was created through Wasmer Inc., confirming the same organization that provides the name‑server service. VirusTotal has recorded six detections out of ninety‑one scanned engines, demonstrating that multiple security vendors have flagged the domain as malicious, though the majority of scanners have not yet raised an alert. The presence of detections, combined with the blocklist entry and the high‑risk classification, supports the conclusion that the domain is being used for phishing campaigns, even though the exact landing page content, TLS certificate details, HTTP response codes, and page title have not been publicly disclosed in the available intelligence.

Defenders should add trezar-io-suit-sunnu.wasmer.app to local deny lists, enforce DNS‑based blocking, and consider sinkholing the associated IP address 62.210.172.162 to disrupt traffic. Continuous monitoring of the domain’s DNS records and any future VirusTotal scans is recommended, as changes in detection counts or additional blocklist listings could indicate evolving threat activity. Given the high risk rating and confirmed activity, organizations should treat any communications referencing this domain as suspicious and advise users to avoid interacting with links or credentials that resolve to it.