kmj-nbvfre[.]wasmer[.]app

This domain, kmj-nbvfre.wasmer.app, is currently flagged as an active credential harvesting phishing site. Analysis indicates it employs social engineering tactics to deceive users into disclosing sensitive authentication credentials, likely impersonating a legitimate service to facilitate unauthorized access. The domain remains operational and poses a high-risk threat to individuals and organizations. Infrastructure analysis reveals the domain resolves to the IP address 5.78.28.109, hosted under the wasmer.app subdomain infrastructure. It is flagged by 12 of 95 security vendors on VirusTotal, with Google Safe Browsing specifically categorizing it under SOCIAL_ENGINEERING. The domain employs a Let's Encrypt SSL certificate, which, while providing encryption, does not validate the legitimacy of the underlying phishing operation. No historical registration data or creation date is publicly available for this subdomain, limiting further attribution. Detection counts and trust scores indicate a moderate but persistent threat level. As of the latest assessment, kmj-nbvfre.wasmer.app remains active and continues to resolve to its designated IP address. Organizations and individuals are advised to block traffic to 5.78.28.109 and implement network-level restrictions for the domain. Endpoint protection systems should be updated to include this domain in phishing blocklists. Users encountering this domain should refrain from interacting with it and report it to relevant security teams for further mitigation. Continuous monitoring of related subdomains under wasmer.app is recommended to identify potential emerging threats.