cuddly-winner-three[.]vercel[.]app

This domain, cuddly-winner-three.vercel.app, is identified as a brand impersonation threat targeting Naver users for credential harvesting. The page title, 'Naver Sign in,' confirms the intent to deceive victims into entering login credentials on a fraudulent interface. Analysis indicates the domain is currently offline, but prior activity warrants continued monitoring. Infrastructure analysis reveals the domain was flagged by 20 of 95 security vendors on VirusTotal, indicating moderate detection coverage. It was registered through Tucows Domains Inc. and resolved to the IP address 216.198.79.131, hosted on Amazon.com, Inc. infrastructure (AS16509). The domain appears on one security blocklist, and its SSL certificate is issued by Google Trust Services (WR1). Created on February 21, 2026, the domain exhibits characteristics typical of short-lived phishing campaigns, including the use of a content delivery network subdomain. Risk assessment classifies this threat as elevated due to the combination of brand impersonation, credential theft intent, and partial detection by security engines. While the domain is currently offline, organizations should proactively block the domain and associated IP (216.198.79.131) at the network perimeter. Security teams are advised to monitor for related domains using similar naming patterns or infrastructure. End users should verify the legitimacy of any Naver login page by checking the URL and SSL certificate details before entering credentials. If credentials were entered on this domain, immediate password resets and multi-factor authentication enforcement are recommended.