explore4[.]wasmer[.]app

This domain, explore4.wasmer.app, is identified as a high-risk phishing site specifically targeting Navy Federal Credit Union members. The threat involves a fraudulent login portal designed to harvest credentials, financial details, and personal identification information. As of the latest assessment, the domain has been taken offline, though prior activity remains a confirmed security risk. Analysis of the domain reveals multiple technical indicators of malicious intent. The domain was registered through Squarespace Domains II LLC on April 24, 2026, and resolves to the IP address 5.78.28.109, hosted by Hetzner Online GmbH in the United States. The SSL certificate is issued by Let's Encrypt (serial number E7), a common tactic to lend superficial legitimacy to phishing infrastructure. Security vendors on VirusTotal flagged the domain as malicious, with 25 out of 95 engines detecting it as phishing. Additionally, the domain appears on one security blocklist and is explicitly blocked by PhishDestroy. Google Safe Browsing also classified this domain as a phishing threat, reinforcing its fraudulent nature. The current status of explore4.wasmer.app is offline, reducing immediate exposure to end users. However, the infrastructure and registration details suggest potential for rapid redeployment under a similar or altered domain. Organizations and individuals are advised to implement proactive measures, including updating web filtering rules to block the domain and its associated IP address. Financial institutions should alert customers to verify URLs before entering credentials and monitor for unusual login attempts. Security teams are recommended to review logs for connections to 5.78.28.109 and investigate any interactions with the domain prior to its takedown. Continuous monitoring of newly registered domains with similar patterns is strongly advised to mitigate future threats.