super-fortnight-phi[.]vercel[.]app

This domain, super-fortnight-phi.vercel.app, operates as a credential phishing site specifically targeting Naver users. The page replicates the legitimate Naver sign-in interface, presenting a fraudulent login portal designed to harvest authentication credentials. Analysis of the page title, 'Naver Sign in,' confirms the intent to deceive users into submitting sensitive account information under false pretenses. The domain’s infrastructure and design suggest a focused campaign to exploit trust in the Naver brand for unauthorized access to user accounts. Infrastructure analysis reveals multiple technical indicators supporting this assessment. The domain was registered through Tucows Domains Inc. on February 21, 2026, and is currently offline. It resolves to the IP address 64.29.17.195, hosted on Amazon.com, Inc. infrastructure (AS16509) located in the United States. Detection metrics further validate the malicious nature of this domain, with 19 out of 95 security vendors on VirusTotal flagging it as malicious. Additionally, the domain appears on one security blocklist, indicating prior identification as a threat. Users who visited super-fortnight-phi.vercel.app should immediately take corrective actions to mitigate potential risks. Those who entered credentials are advised to change their Naver passwords without delay and enable multi-factor authentication if available. Monitoring account activity for unauthorized access or transactions is critical. If financial or personally identifiable information was submitted, users should report the incident to relevant authorities and consider credit monitoring services. System scans for malware are recommended to ensure no secondary infections were introduced during the interaction with the phishing site.