makeup1003.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of makeup1003.vercel.app
This domain appears to host a page styled as a NAVER login portal, with the title and visible interface presenting Korean-language sign-in options and branding associated with NAVER. The page references multiple assets from official NAVER-related domains, which suggests it is attempting to imitate or reproduce the appearance of a legitimate account login experience rather than functioning as an independent service under its own brand.
The site is served from a vercel.app subdomain rather than an official NAVER-owned domain. Based on the domain structure, page metadata, and screenshot, it does not appear to represent a normal standalone business or content website. Instead, it appears to be a credential-collection page or look-alike login interface targeting users of NAVER services.
Safety Assessment for makeup1003.vercel.app
This website was flagged by 21 out of 91 security engines at the time of this scan, with repeated classifications consistent with phishing. In addition, blacklist and threat-database checks showed listing activity associated with social-engineering concerns, and the page content closely imitates a NAVER login screen while being hosted on an unrelated vercel.app subdomain. That combination is commonly associated with credential-harvesting attempts.
The screenshot, page title, and linked resources all suggest the site may be presenting itself as a NAVER sign-in page without using an official NAVER domain. The mismatch between the displayed brand and the actual host name is a significant warning sign. Although one malware scan reported no flagged files, that result does not outweigh the broader multi-engine phishing consensus and the visible impersonation pattern.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority and is hosted on Vercel infrastructure at IP address 64.29.17.3 in the United States. The certificate validity indicates encrypted transport is available, but HTTPS alone does not verify that the page is trustworthy or legitimately affiliated with the brand it displays.
DNSSEC appears to be unsigned, and the domain uses Vercel nameservers. The main technical concern is not the hosting setup itself but the apparent brand impersonation and phishing-related detections. Flagged internal paths such as /dynamickeyjssplit/ and /login/ext/help_ip3.html may warrant additional review because they were identified by the malware scan as suspicious objects.
Share your experience with this website. Was it safe? Did you encounter any issues?