xghjc[.]wasmer[.]app

This domain, xghjc.wasmer.app, is currently under investigation for brand impersonation targeting Google. The site has been identified as a phishing attempt designed to deceive users by mimicking Google’s branding and services. At the time of analysis, the domain is offline, though it previously displayed a page titled 'Navy Federal Credit Union - Our Members are the Mission®,' which is inconsistent with the claimed impersonation target and suggests potential misdirection or secondary fraud objectives. Infrastructure analysis reveals the domain was registered through Wasmer, a platform known for hosting ephemeral or disposable web applications. VirusTotal scanning reports 0 detections out of 95 security vendors, indicating the domain has not yet been widely flagged by automated detection systems. The domain appears on a single security blocklist, suggesting limited but existing awareness of its malicious nature. The SSL certificate is issued by Let’s Encrypt, a common provider for both legitimate and malicious sites, and the backend technology includes PHP, which is frequently exploited in phishing campaigns for dynamic content delivery. No additional technical indicators, such as IP addresses or creation dates, were provided in the available intelligence. The current status of xghjc.wasmer.app is offline, reducing immediate risk to end users. However, the domain’s infrastructure and registration details indicate a high likelihood of re-emergence under a similar or altered guise. Organizations and users are advised to monitor for re-activation and treat any future appearances of this domain as malicious. Security teams should update blocklists to include this domain and its associated indicators, such as the Wasmer registrar and any linked IP addresses, if identified. End users who may have interacted with the domain should be alerted to potential credential compromise and advised to reset passwords for any accounts accessed during the exposure window. Proactive monitoring of domains registered through Wasmer and similar platforms is recommended to detect and mitigate similar threats.