alert-navyfederal[.]web[.]app

The domain alert-navyfederal.web.app impersonates Navy Federal Credit Union, aiming to deceive users into sharing sensitive information. This phishing site is hosted on IP 199.36.158.100 in the US, under the organization Fastly, Inc. It features a page title mimicking the credit union's slogan, "Our Members are the Mission®", to lure unsuspecting users.

Registered through Google LLC, this domain has been flagged as malicious by 12 out of 91 vendors on VirusTotal, indicating significant detection across multiple security platforms. It is listed on one public blocklist, specifically by PhishDestroy. The SSL certificate is issued by Google Trust Services, which could lend an appearance of legitimacy to the unsuspecting victim.

PhishDestroy first identified this domain on June 20, 2026, and has assigned it a high platform risk score of 93 out of 100. This suggests a well-crafted phishing attempt with a high potential for harm. The site's active status and the relatively high number of VirusTotal detections underscore the importance of timely identification and mitigation of such threats.

The exploitation of trusted brands like Navy Federal Credit Union in phishing schemes is a common tactic to gain user trust and extract personal data. The swift detection by PhishDestroy highlights the critical role of early threat identification in protecting users during the initial hours following a domain's registration, before it is widely recognized by antivirus databases.