louismutereeismial[.]wasmer[.]app
“Navy Federal Credit Union - Our Members are the Mission®”
louismutereeismial.wasmer.app — 内容不可用. 品牌冒充:Nfcu; 诈骗类型:Generic Phishing. 证据摘要: VirusTotal 11/91 (alphaMountain.ai, BitDefender, Forcepoint ThreatSeeker, Fortinet, G-Data); URLQuery 5 alerts; URLScan malicious verdict; CF Radar malicious; PhishDestroy score 89/100. 注册商: Squarespace Domains II.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain, louismutereeismial.wasmer.app, is flagged as a phishing site designed to impersonate Navy Federal Credit Union. The page title, 'Navy Federal Credit Union - Our Members are the Mission®,' is an exact replica of the legitimate institution's branding, indicating an intent to deceive users into entering sensitive financial or personal credentials. The domain leverages social engineering tactics to exploit trust in the targeted organization, a common technique in credential harvesting campaigns. Analysis indicates the domain is registered through Squarespace Domains II LLC and resolves to the IP address 5.161.22.175. It employs a Let's Encrypt SSL certificate, which, while providing encryption, does not validate the legitimacy of the site. VirusTotal detections stand at 0/95, suggesting the domain has not yet been widely flagged by security vendors. However, it appears on one security blocklist, and technologies such as PHP are detected on the backend, which may be used to process stolen data. The domain is currently offline, but its infrastructure remains a potential threat if reactivated. Users who visited louismutereeismial.wasmer.app should immediately revoke any entered credentials, particularly those associated with Navy Federal Credit Union accounts. Monitor financial statements for unauthorized transactions and enable multi-factor authentication on all critical accounts. If credentials were shared, consider placing a fraud alert with credit bureaus and reporting the incident to relevant financial institutions. Security teams should block the domain and associated IP (5.161.22.175) at the network level to prevent further exposure.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | javascript.write.md5:9f26981a0219c9af5bd70926ae8f11e8 |
malware | Detects file containing Telegram Bot API |
| DNS4EU | louismutereeismial.wasmer.app |
malicious | Sinkholed |
| OpenDNS | louismutereeismial.wasmer.app |
phishing | Phishing Block |
| CIRA Canadian Shield DNS | louismutereeismial.wasmer.app |
malicious | Sinkholed |
| Cloudflare DNS | louismutereeismial.wasmer.app |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
Registration: wasmer.app
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For the registrable domain wasmer.app behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of louismutereeismial.wasmer.app · checked Jun 26, 2026
证据与外部报告
PD-20260530-4A579C Recipient: abuse@scaleway.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。