cuddly-lamp[.]vercel[.]app

cuddly-lamp.vercel.app is actively flagged for credential phishing, impersonating the Naver login page to deceive users. With 16 out of 94 security vendors on VirusTotal marking it as malicious, this domain is a significant threat. It also appears on one public blocklist and is flagged by Google Safe Browsing.

The domain is hosted on an IP address registered in the United States under Vercel, Inc. Its cloaking score of 1/10 indicates that it serves benign content to scanners while potentially displaying malicious content to targeted users. This tactic is often used to evade detection by security systems.

Despite the high number of VirusTotal detections, the domain's active status and cloaking capabilities make it a persistent threat. The SSL certificate issued by Google Trust Services suggests an attempt to appear legitimate and secure to unsuspecting users. The domain's creation date in 2026 raises questions about its registration details, possibly indicating future-proofing or errors in registration data.

PhishDestroy's detection of this domain and its inclusion in public blocklists highlight the importance of proactive threat hunting. The phishing site targets Naver users, aiming to harvest credentials by mimicking a legitimate login page. This emphasizes the need for continuous monitoring and awareness of evolving phishing tactics.