reimagined-funicular-jmjb[.]vercel[.]app

This domain presents a high risk as a credential theft site specifically designed to steal Naver login credentials. The site impersonates the legitimate Naver sign-in page, aiming to trick users into entering their usernames and passwords. PhishDestroy assesses this as a severe threat due to its active status and high detection rate.

Technical analysis shows the domain resolves to IP 64.29.17.67 and was registered through Vercel on May 18, 2026. VirusTotal reports 11 out of 95 security vendors flagging this domain as malicious. Google Safe Browsing also flags it for phishing. The SSL certificate is issued by Google Trust Services / WR1, which lends a false sense of legitimacy despite the malicious intent. The domain currently appears on one security blocklist and remains active, with the page title "Naver Sign in" confirming the brand impersonation.

To mitigate this threat, users should avoid visiting the domain entirely. If credentials were entered on this fake Naver page, passwords must be changed immediately and multi-factor authentication enabled on the actual Naver account. Organizations should add this domain to blocklists and educate users on verifying login URLs before entering sensitive information. Reporting the domain to Google Safe Browsing and Naver's security team can help protect others.