digitalomnifederalorg[.]vercel[.]app

This domain, digitalomnifederalorg.vercel.app, poses a high-risk credential phishing threat targeting users of Navy Federal Credit Union. The site mimics the official Navy Federal Credit Union login portal, using an identical page title, 'Navy Federal Credit Union - Our Members are the Mission®,' to deceive visitors into entering sensitive authentication credentials. The domain is designed to harvest login details, which may lead to unauthorized account access, financial fraud, or identity theft. Analysis indicates the site is actively serving malicious content and remains operational as of the latest verification. Infrastructure analysis reveals the domain was registered through Vercel Inc. and resolves to the IP address 64.29.17.131, located in the United States. The SSL certificate is issued by Google Trust Services (WR1), which, while legitimate, does not mitigate the malicious intent of the site. The domain was created on May 19, 2026, an anomalous future date suggesting potential obfuscation or misconfiguration. Security vendor detections on VirusTotal report 19 out of 95 engines flagging the domain as malicious. Additionally, the domain appears on one security blocklist, and it is currently blocked by at least one threat intelligence feed. Users who have visited digitalomnifederalorg.vercel.app or entered credentials on the site should immediately revoke any submitted login details by resetting their Navy Federal Credit Union account password through the official portal. Enable multi-factor authentication (MFA) if not already active. Monitor account statements for unauthorized transactions and report any suspicious activity to the financial institution. If personal or financial data was exposed, consider placing a fraud alert or credit freeze with major credit bureaus. Organizations should update their web filtering rules to block this domain and its associated IP address to prevent further access by employees or clients.