cordialcertmain[.]wasmer[.]app

The domain cordialcertmain.wasmer.app was registered through the Wasmer registrar on June 8 2026. Since its creation it has been observed on a security blocklist and flagged by PhishDestroy. The VirusTotal scans show that 17 of 91 security vendors marked the domain as malicious, indicating a consensus of detection. The risk level is elevated and the status is active, suggesting ongoing use.

No publicly available data on the hosting IP, ASN, or TLS certificate has been released, and the page title has not been recorded in open sources. The limited visibility of infrastructure details hampers full attribution, but the detection footprint across multiple vendors and inclusion on a blocklist provide sufficient confidence to treat the domain as a phishing operator. Defenders should block any outbound connections to the domain, add it to local and gateway deny lists, and monitor DNS queries for related subdomains that may be generated by the same actor.

Continuous re‑scanning with VirusTotal or similar multi‑engine services is recommended to capture any changes in detection status. Organizations employing email filters should ensure that URLs pointing to cordialcertmain.wasmer.app are quarantined, and incident response teams should treat any credential submissions to this domain as compromised. The presence of the domain on a blocklist and its detection by 17 security engines underscores the need for immediate remediation to mitigate credential theft or further exploitation.