Is bunmainnf.wasmer.app a scam?

Our automated security review flags bunmainnf.wasmer.app as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Is bunmainnf.wasmer.app safe to use?

No — bunmainnf.wasmer.app scored 25/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.

Does bunmainnf.wasmer.app have a valid SSL certificate?

Yes. bunmainnf.wasmer.app presents a valid TLSv1.3 certificate issued by Let's Encrypt · E7, expiring in 48 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

How old is the bunmainnf.wasmer.app domain?

bunmainnf.wasmer.app is 7.6 years old, registered on 10/16/2018 through Squarespace Domains II LLC.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.

Is bunmainnf.wasmer.app on any phishing or malware blacklists?

Yes. The major browser blocklist feeds flagged bunmainnf.wasmer.app with the following threat categories: SOCIAL_ENGINEERING. This protects billions of browser users from visiting the site.

Where is bunmainnf.wasmer.app hosted?

bunmainnf.wasmer.app resolves to an IP operated by Hetzner Online GmbH in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the bunmainnf.wasmer.app report updated?

We cache results for 24 hours. Signed-in MalwareTips members can trigger a manual rescan at any time using the "Rescan" button on the report page, which re-runs every check from scratch and refreshes this page.

DANGEROUS

Phishing site — do not log in

Flagged on major browser safety blocklists as social engineering. This page looks designed to steal credentials. Don't log in — and if you already did, change the password anywhere you reused it and turn on two-factor authentication.

Security Review

Is bunmainnf.wasmer.app legit or a scam?

Name: Is bunmainnf.wasmer.app legit or a scam?
Item: bunmainnf.wasmer.app
Rating: 2
Author: MalwareTips

Our verdict:Dangerous· 25/100

SafeSuspiciousDangerous

Malicious wasmer.app subdomain flagged for social engineering with obfuscated PHP injection code on an empty page.

Top reasons

Browser blocklists flag the URL for social engineering.Page body contains heavily obfuscated JavaScript that decodes to PHP antibot and form-protection code.No title, description, contact details, or visible legitimate content on the page.

bunmainnf.wasmer.appScanned 9d ago

Post Facebook

Trust score

DANGEROUS

Heuristics 42·MT 15

Category tags

phishing#Phishing85% MT confidence

Technical red flags (1)

Blacklisted by Google

Positive signals (3)

Domain is 8 years old Encrypted connection Clean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

—

Data unavailable

Domain Age

8 years old

Registered Oct 16, 2018

MT Intelligence

Dangerous

High likelihood · 85% confidence

MT Intelligence

Advanced threat intelligence

MT Security Analyst

High scam likelihoodengineMT · Guardiantrust15/100

MT AgentLive web researchVisual inspection

Confidence

The page is hosted on a known legitimate WebAssembly platform but carries a direct social-engineering blocklist flag from browser feeds. Its body consists of heavily encoded JavaScript that decodes to PHP code referencing an antibot script and form protection, which is a common malware delivery pattern. No contact details, title, or visible content exist, and the domain shows zero traffic or business presence. The clean IP reputation and old parent-domain age are outweighed by the active blocklist hit and malicious code. These signals together indicate the subdomain is being abused for phishing or drive-by attacks.

Full dossier

Analysis complete

Page Content

The page has an empty title and meta description with no visible text, contact information, or legitimate content. The body contains heavily obfuscated JavaScript using multiple layers of document.write and unescape that ultimately reference PHP files for antibot protection and form handling.

Infrastructure

Hosted on wasmer.app, a legitimate serverless WebAssembly platform. The IP shows zero abuse reports and the SSL certificate is valid, yet browser blocklists explicitly flag the URL for social engineering.

Domain History

The parent domain is several years old, but this specific subdomain has no traffic ranking, no business records, and no prior mentions in searches. No clone indicators or brand impersonation were detected.

Web Reputation

Zero scam reports, complaints, or positive reviews were located for the exact subdomain across multiple sources. The lack of any footprint is consistent with a newly created malicious subdomain rather than a legitimate service.

Risk Factors

Browser blocklists flag the URL for social engineering.
Page body contains heavily obfuscated JavaScript that decodes to PHP antibot and form-protection code.
No title, description, contact details, or visible legitimate content on the page.
Zero traffic ranking and no business registration associated with the subdomain.

Positive Signals

Hosting IP has a clean 0/100 abuse score with no reports.
Valid SSL certificate issued by Let's Encrypt.
Parent domain wasmer.app is a known legitimate WebAssembly hosting service.

AI Recommendation

Do not visit the page or click any links. If you already opened it, run a full antivirus scan and avoid entering any information.

Next-gen fraud intelligence

Evidence-backedCross-checked

Website Preview

LIVE RENDER

bunmainnf.wasmer.app

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for bunmainnf.wasmer.app, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age

7.6 yrs

Registered Oct 2018

Business registration

No public record found

Could not match the site to a registered company — common for small sites.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

No scam reports found

No complaints, no negative coverage turned up in our sweep.

Key findings

6 headline facts from open-web research

bunmainnf.wasmer.app is a subdomain hosted on wasmer.app / wasmer.io, a platform for deploying WebAssembly applications and serverless apps.
Extensive web searches for the exact domain returned zero relevant results regarding scams, reviews, complaints, or business activity.
One unrelated mention in a urlquery.net report listing the domain alongside a screenshot and IP 144.76.124.123 (dated 2026-05-27).
No search hits for "bunmainnf" in connection to the domain or any brand; unrelated results point to Bunnings hardware store.
Domain age provided as 2780 days (~7.6 years); page has empty title/description and no detected brand references or scam families.
wasmer.app confirmed as legitimate WebAssembly runtime and edge deployment service via official site, GitHub, docs, and community discussions.

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

We searched scam-report databases, consumer-review sites, and general web sources for bunmainnf.wasmer.app and didn't find scam reports or complaints. For a new or low-traffic site this is expected and is not by itself a sign of trust.

Security Scans

Blacklist Check

This URL appears on threat lists

Detected threat categories: SOCIAL_ENGINEERING.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbersNone

Postal addressNot listed

Linked social profiles0

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No phone number listed on the page.
No postal address visible on the page.

Domain & Encryption

Domain History

Age8 years old

RegistrarSquarespace Domains II LLC.

RegisteredOct 16, 2018

ExpiresOct 16, 2031

Owner privacyVisible

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerLet's Encrypt · E7

ExpiresJul 15, 2026 (48d)

Self-signedNo

Hosting & Technology

HostingHetzner Online GmbH

Server locationUS

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1308http://bunmainnf.wasmer.app/
2200https://bunmainnf.wasmer.app/

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPHetzner Online GmbH

Usage typeData Center/Web Hosting/Transit

Scam-Type Likelihood

1 scam-type patterns detected

Scam-Type Likelihood

0 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Phishing

Phishing

Moderate likelihood

0/100

Google Safe Browsing flagged this as social engineering / phishing.
AI analyst tagged this as phishing.

Scam-Type Likelihood

0 of 13 categories showed signals

Top match: Phishing

Phishing

Moderate likelihood

0/100

Google Safe Browsing flagged this as social engineering / phishing.
AI analyst tagged this as phishing.

Phishing site — act fast

This page shows signs of attempting to steal credentials or impersonate a trusted brand.

Do not interact with bunmainnf.wasmer.app
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
If you already typed your password — change it now
Change the password on the legitimate site and anywhere else you re-used it. Turn on two-factor authentication. Review recent account activity.
Report the phishing URL
APWG (Anti-Phishing Working Group) accepts phishing reports at reportphishing@apwg.org. Google Safe Browsing reports help protect other users.
Open
Get help on the forum
MalwareTips members can help you assess damage and next steps.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

ListedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Safety FAQ

Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.

Our automated security review flags bunmainnf.wasmer.app as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Final Verdict

Trust / 100

Final Verdict·bunmainnf.wasmer.app

DANGEROUS

This is a suspicious subdomain on the legitimate wasmer.app platform. Browser blocklists flag it for social engineering and the page contains heavily obfuscated code that attempts to load hidden scripts. Do not visit or interact with it.

Do not visit the page or click any links. If you already opened it, run a full antivirus scan and avoid entering any information.

AV engines

—

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Dangerous reports

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.