hub-ledger-desktop[.]wasmer[.]app

This domain, hub-ledger-desktop.wasmer.app, was created on 16 October 2018 and is currently listed on one public security blocklist. Registration records show the domain was purchased through Squarespace Domains II LLC, a registrar commonly used for legitimate web services, which does not by itself indicate malicious intent. The infrastructure resolves to the IPv4 address 62.210.172.151; no additional hosting details are publicly disclosed. Malware and phishing detection services have flagged the domain, with 21 of 91 VirusTotal scanners marking it as malicious, indicating a moderate level of consensus among security vendors.

The domain is also blocked by PhishDestroy, reinforcing the suspicion of abuse. The threat profile is classified as a crypto drainer, an activity that typically seeks to exfiltrate cryptocurrency private keys or redirect transactions. The risk rating is elevated and the operational status is active, suggesting that the infrastructure may still be used to target victims. What remains uncertain is the exact content served at the host, the presence of SSL certificates, HTTP response codes, and any associated campaign indicators such as phishing kits or victim URLs.

Defenders should add the domain and its resolving IP address to outbound and inbound allow‑lists monitoring, ensure that any attempts to resolve or contact the address are logged, and consider blocking traffic to the IP at the network perimeter. Endpoint detection platforms should be configured to alert on processes that attempt to connect to 62.210.172.151, especially if they involve cryptocurrency wallets or blockchain interaction libraries. Continuous monitoring of threat‑intel feeds for new detections related to this domain is recommended, as additional indicators may emerge that clarify the campaign’s scope.