fortunate1[.]wasmer[.]app

Fortune1.wasmer.app is an active malicious domain posing as a sweepstakes or lottery platform to deceive users into providing sensitive information or downloading malware. This generic phishing site leverages social engineering tactics to trick victims into believing they have won a prize, only to harvest credentials, financial details, or install malicious payloads under the guise of claiming the fictional reward. Detonation analysis confirms redirection chains to credential harvesting forms and known phishing servers, indicative of a coordinated campaign targeting unsuspecting users seeking online rewards. This domain was flagged by 12 out of 95 security vendors on VirusTotal and is blocked by Google Safe Browsing under the SOCIAL_ENGINEERING category. The infrastructure is hosted on IP 62.210.172.151 and secured with a Let's Encrypt TLS certificate to appear legitimate. Threat intelligence shows this domain is part of a broader campaign active since at least March 2024, likely operated by a financially motivated threat actor leveraging subdomains of wasmer.app to bypass reputation filters. The high-risk classification reflects its confirmed use in active phishing operations with live lure pages and fraudulent payment forms. If you visited fortune1.wasmer.app, immediately cease any interaction with the site, do not enter personal or financial information, and close the browser tab. Scan your device with updated antivirus software to detect any compromise. Report the domain to your security team or via platforms like Google Safe Browsing to help disrupt the campaign. Avoid clicking on similar links in email, SMS, or social media messages offering unsolicited prizes.