potential-fishstick-six[.]vercel[.]app

This report details a credential phishing threat targeting Naver users. The site, with the page title "Naver Sign in," impersonates the legitimate Naver brand to steal user login credentials. The primary threat is the unauthorized collection of usernames and passwords, which could lead to account compromise and data theft.

Technical evidence confirms the malicious nature of the site. VirusTotal analysis shows 21 out of 95 vendors flagged the domain as malicious, with detections from ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, and CyRadar. The domain is registered under Tucows Domains Inc. and resolves to IP address 64.29.17.67 (US), hosted on AS16509 Amazon.com, Inc. The domain was created on 2026-02-21 and uses a Google Trust Services SSL certificate with the WR1 issuer.

The site is currently down or offline. Based on the high number of security vendor detections, impersonation of a known brand, and clear phishing intent, the risk level associated with this domain is high. Users should avoid any interaction with the domain and remain vigilant against similar phishing attempts.