navietkoreeark-ctacpldztfqlksiazrxdatuf[.]pages[.]dev

This domain is flagged for hosting a credential phishing page impersonating Naver, a South Korean online platform. The threat type is classified as a fake login portal, designed to harvest user credentials through deceptive authentication interfaces. The risk level is elevated due to the domain's active impersonation of a widely used service and its presence on security blocklists. Analysis indicates the domain navietkoreeark-ctacpldztfqlksiazrxdatuf.pages.dev was registered on February 04, 2026, through Cloudflare, Inc. It resolves to the IP address 61.247.194.59, located in South Korea under AS23576 (NAVER Cloud Corp.). The page title, 회원정보 고객센터 (translated as Member Information Customer Center), aligns with typical Naver service terminology, reinforcing the impersonation attempt. As of the latest assessment, the domain appears on one security blocklist and is flagged by 14 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Google Trust Services, specifically under the WE1 intermediate, which does not mitigate the malicious intent of the page. The domain has since been taken offline, though residual risks may persist for users who interacted with it prior to its deactivation. To mitigate risks associated with this credential phishing campaign, organizations and individuals should immediately block the domain and its resolving IP (61.247.194.59) at the network perimeter. Users who may have entered credentials on this page should be instructed to reset their passwords for Naver and any other services where identical credentials were reused. Security teams are advised to monitor for indicators of compromise, including unusual login attempts or unauthorized access to accounts linked to the targeted service. Additionally, domain registrars and hosting providers should be notified of the malicious infrastructure to prevent future abuse of similar domains. Proactive measures, such as multi-factor authentication and user education on recognizing phishing attempts, are recommended to reduce susceptibility to such threats.