studious-disco-kkmi[.]vercel[.]app

This domain, studious-disco-kkmi.vercel.app, poses a credential theft threat by impersonating Naver, a major South Korean web platform. The site displays a fake 'Naver Sign in' page designed to harvest login credentials from unsuspecting users. Such attacks can lead to account takeovers, unauthorized access to personal data, and potential financial fraud if the compromised credentials are reused across other services. The page title explicitly mimics Naver's legitimate login interface, increasing the likelihood of successful deception. Analysis indicates this domain was registered through Vercel Inc. and is flagged by 21 out of 95 security vendors on VirusTotal. The SSL certificate, issued by Google Trust Services (WR1), resolves to an IP address (198.18.2.58) hosted on Amazon Web Services (AS16509). The domain appears on two security blocklists, including PhishDestroy and PhishingDB, and was taken offline following detection. The use of a legitimate hosting provider and SSL certificate is a common tactic to lend credibility to fraudulent sites. If you visited studious-disco-kkmi.vercel.app or entered credentials on a page resembling Naver's login, immediate action is required. First, change your Naver password and enable multi-factor authentication if available. Review your account for unauthorized activity, such as unfamiliar logins or transactions. Monitor linked accounts, including email and financial services, for signs of compromise. Consider using a password manager to generate and store unique credentials for each service. Report the incident to Naver's security team and local cybercrime authorities to aid in tracking and mitigating further threats.