generous-cyan-ec1rj7rf[.]edgeone[.]app

The domain generous-cyan-ec1rj7rf.edgeone.app was identified as a generic phishing threat, specifically impersonating the Naver login page to steal user credentials. This domain was registered through Tencent EdgeOne and targeted South Korean Naver users with a fraudulent login interface. No drainer kit was detected, but the fake login page poses a significant risk of credential theft.

Technical analysis reveals that the domain resolved to IP address 101.33.10.57 and was flagged by 8 out of 95 security vendors on VirusTotal, indicating moderate detection coverage. The page title was confirmed as '네이버 : 로그인', and the domain appeared on 1 security blocklist. The domain was registered through Tencent EdgeOne, a lesser-known registrar often abused for phishing campaigns. Google Safe Browsing status was not provided, but the domain's presence on a blocklist suggests prior malicious activity.

Currently, the domain has been taken offline, mitigating immediate risk. However, users who may have visited the site before takedown are advised to change their Naver passwords and enable two-factor authentication. PhishDestroy recommends verifying any unexpected login prompts and reporting suspicious domains. Remaining risk is low due to takedown, but similar domains remain a threat.