0888naveankorea-oneinamillion-class[.]vercel[.]app

This domain, 0888naveankorea-oneinamillion-class.vercel.app, was identified as a phishing site targeting Korean users through a Naver login imitation, based on the page title '네이버 로그인' observed in available data. Analysis indicates the domain was hosted on Vercel infrastructure and resolved to IP 64.29.17.131, associated with Amazon.com, Inc. (AS16509) in the United States. The SSL certificate was issued by Google Trust Services, and HSTS was enabled, though these do not mitigate the phishing risk. At the time of assessment, the domain returned an HTTP 451 status, suggesting it was taken offline or restricted, and nameservers were not found.

Security vendor detections on VirusTotal flagged the domain as malicious, with 16 of 95 engines identifying it as a threat. The domain appears on one security blocklist and was blocked by PhishDestroy. Scamadviser assigned a trust score of 1 out of 100, reinforcing its classification as an investment scam. While the exact content and functionality of the site remain unconfirmed due to its offline status, the combination of the Naver-themed page title, detection by multiple security vendors, and low trust score provides sufficient evidence for defenders to treat this domain as a confirmed phishing threat.

Defenders should ensure this domain is blocked at the DNS and proxy levels, and monitor for related infrastructure reuse, particularly under Vercel or similar hosting providers. Given the investment scam classification, security teams may also investigate potential links to financial fraud campaigns targeting Korean-speaking users. No further brand or kit details are available, and the domain’s current offline status limits additional analysis.