Phishing sites impersonating Nfcu

PhishDestroy has recorded 47 phishing domains impersonating Nfcu since 2026-04-03, 0 of them in the last 30 days. The most used registrars are Squarespace Domains II and Wasmer; the most common TLDs are .app and .com. Open Nfcu only from its official app or a saved bookmark.

47
Domains, all time
0
Last 30 days
3
Online at last check
25
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 12026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Nfcu phishing domains detected per day: 1 from 2026-07-25 to 2026-10-22; peak 1.

How to tell a fake Nfcu site

Words most often added to the brand in reported domains: wasmer, apr, alert, navyfederal, migratecertificate, reformmembershipcert, digitalomninavyfederalorg, membersercivemain, cert, moment.

  • Type the address yourself or use a bookmark; phishing links for Nfcu arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Nfcu does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Nfcu phishing domains

The 47 most recently detected domains impersonating Nfcu
DomainFirst detectedStatus at last checkRegistrar
alert-navyfederal.firebaseapp.com2026-09-04OnlineGoogle
cloud11.wasmer.app2026-07-14OfflineSquarespace Domains II
kjh-fdsz.wasmer.app2026-07-11OfflineSquarespace Domains II
ntx-juisq.wasmer.app2026-07-10OfflineSquarespace Domains II
hfd-ngvcx.wasmer.app2026-07-10OfflineSquarespace Domains II
ubx-cdewq.wasmer.app2026-07-09OfflineSquarespace Domains II
kmj-nbvfre.wasmer.app2026-07-06OfflineSquarespace Domains II
perhaps.wasmer.app2026-07-06OfflineSquarespace Domains II
jub-ytfde.wasmer.app2026-07-03OfflineSquarespace Domains II
administration1.wasmer.app2026-06-22OfflineWasmer
alert-navyfederal.web.app2026-06-20OnlineGoogle
insertmaincore.wasmer.app2026-06-15OfflineWasmer
jvr-nvzwq.wasmer.app2026-06-14OfflineSquarespace Domains II
seemvertcertified.wasmer.app2026-06-13OfflineWasmer
cerberrtecrossmein.wasmer.app2026-06-10OfflineWasmer
bdi-mfghs.wasmer.app2026-06-10OfflineWasmer
recent1.wasmer.app2026-06-09OfflineWasmer
uhj-zgfcsa.wasmer.app2026-06-09OfflineSquarespace Domains II
navyfederall.com.pinnacletrustbank.com2026-06-02OfflineDynadot
ufzwqk.wasmer.app2026-06-01Taken downWasmer
guajuchinmain.wasmer.app2026-06-01Taken downSquarespace Domains II
especially.wasmer.app2026-06-01Taken downSquarespace Domains II
hcxr-42552.wasmer.app2026-06-01Taken downSquarespace Domains II
dimrestomsgmain.wasmer.app2026-06-01Taken downSquarespace Domains II
media2.wasmer.app2026-06-01Taken downSquarespace Domains II
elevation.wasmer.app2026-06-01Taken downSquarespace Domains II
faduan.wasmer.app2026-05-30Taken downWasmer
louismutereeismial.wasmer.app2026-05-30Taken downSquarespace Domains II
magrigereposmain.wasmer.app2026-05-29Taken downSquarespace Domains II
gosmainretrog8t.wasmer.app2026-05-29Taken downSquarespace Domains II
on-notification-emessage.wasmer.app2026-05-28Taken downWasmer
itw-dzwe.wasmer.app2026-05-28Taken downSquarespace Domains II
mission.wasmer.app2026-05-28Taken downSquarespace Domains II
scale.wasmer.app2026-05-21Taken downSquarespace Domains II
maintaincereminder.wasmer.app2026-05-04Taken downSquarespace Domains II
armanycorpmember.wasmer.app2026-05-02OfflineSquarespace Domains II
mandatery04apr.wasmer.app2026-04-30Taken downSquarespace Domains II
trustcert.wasmer.app2026-04-27Taken downSquarespace Domains II
memberremember11mch-c56a1.wasmer.app2026-04-24Taken downSquarespace Domains II
mout07aprmain.wasmer.app2026-04-24Taken downSquarespace Domains II
marinamessage07apr.wasmer.app2026-04-15Taken downSquarespace Domains II
moment.wasmer.app2026-04-15Taken downSquarespace Domains II
membersercivemain.wasmer.app2026-04-15Taken downSquarespace Domains II
cert04apr.wasmer.app2026-04-15Taken downSquarespace Domains II
digitalomninavyfederalorg.vercel.app2026-04-13Taken downVercel
reformmembershipcert.wasmer.app2026-04-03OfflineSquarespace Domains II
migratecertificate.wasmer.app2026-04-03OfflineSquarespace Domains II

All 47 Nfcu reports

Where they are registered and hosted

Registrars

  1. Squarespace Domains II34
  2. Wasmer9
  3. Google2
  4. Vercel1
  5. Dynadot1

Top-level domains

  1. .app45
  2. .com2

Hosting networks

  1. Scaleway SAS18
  2. HETZNER-CLOUD3-AS Hetzner Online GmbH, DE9
  3. AS12876 Scaleway SAS, FR8
  4. HETZNER-CLOUD2-AS Hetzner Online GmbH, DE7
  5. Amazon.com, Inc.1
  6. AS62068 SpectraIP B.V.1
  7. AS12876 Scaleway SAS1
  8. FASTLY - Fastly, Inc., US1

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Nfcu; share of all PhishDestroy reports: 0.02%.