auth[.]fnccu[.]com

auth.fnccu.com is a subdomain of fnccu.com. PhishDestroy first observed the hostname on Feb 26, 2026. The captured page title is “Login - First Nevada City Credit Union”. Stored page analysis classifies the content as credential phishing. Current evidence score: 87/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and Spamhaus DBL. VirusTotal recorded 9 detections among 91 engines: BitDefender, CyRadar, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, SOCRadar, Sophos on Jul 26, 2026 at 03:25 UTC. Spamhaus DBL: DBL_SPAM on Jul 14, 2026 at 02:35 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 06:20 UTC. Google Safe Browsing returned no flag on Mar 2, 2026 at 20:57 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:50 UTC.

HTTP 302 was recorded on Aug 7, 2026 at 22:14 UTC. Registration records for the registrable domain fnccu.com list Private Domains, LLC as the registrar and Feb 21, 2026 as the creation date. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 172.245.14.131 on AS36352 (AS-COLOCROSSING, US). The recorded endpoint location is Buffalo, US. The stored server header is LiteSpeed. DOM analysis on Jul 9, 2026 at 02:21 UTC returned 78/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt / R12 as the certificate issuer; checked Mar 15, 2026 at 08:10 UTC.

The content indicators and 2 positive source findings support the current credential phishing classification.