reimagined-funicular-ivory[.]vercel[.]app
“Naver Sign in”
reimagined-funicular-ivory.vercel.app — 隐形 · 可达. 品牌冒充:Naver; 诈骗类型:Credential Phishing. 证据摘要: VirusTotal 22/91 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, CyRadar); URLQuery 4 alerts; URLScan malicious verdict; Google Safe Browsing flagged; CF Radar malicious; cloaking observed; PhishDestroy score 100/100. 注册商: Vercel.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain reimagined-funicular-ivory.vercel.app is currently active and resolves to the IPv4 address 64.29.17.131, which geolocates to the United States and is owned by Vercel, Inc. The domain was created on 12 May 2026 and registered through Vercel Inc., indicating rapid provisioning typical of abuse‑as‑a‑service platforms. The site presents the page title “Naver Sign in”, matching the targeted brand “naver” and confirming a brand‑impersonation credential‑phishing campaign. Google Safe Browsing classifies the URL under the SOCIAL_ENGINEERING category, and 21 of 91 VirusTotal scanners have flagged it as malicious. The page was observed returning HTTP 200 and serves content over TLS using a Google Trust Services / WR1 certificate. Detected technologies include the Vercel hosting platform, jQuery loaded from a CDN, and HSTS enforcement. The Gridinsoft trust score is 0 / 100, and the domain appears on a single security blocklist (PhishDestroy). Nameserver data is unavailable (NS_NOT_FOUND). No additional content analysis is available beyond the page title. Defenders should block the domain and its resolving IP at network perimeters, add the URL to URL‑filtering policies, and educate users that any request for Naver credentials originating from this host is fraudulent. Continuous monitoring of Vercel‑hosted infrastructure for similar impersonation patterns is recommended.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | reimagined-funicular-ivory.vercel.app |
malicious | Sinkholed |
| OpenDNS | reimagined-funicular-ivory.vercel.app |
phishing | Phishing Block |
| DNS4EU | reimagined-funicular-ivory.vercel.app |
malicious | Sinkholed |
| Quad9 DNS | reimagined-funicular-ivory.vercel.app |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 4 identified
jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.
code.jquery.com 置信度 100%jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 置信度 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 置信度 100%VirusTotal 分析
存档证据
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。