Naver

Email & webmail South Koreanaver.comRank 184 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
20
20 on phishing hosts
Registered lookalikes
169
14 listed by a source or an address list
Official domains
16
verified from Naver's own sites and records

Certificate findings for Naver

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Naver's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 21 findings, grouped by hostname

  1. yaba-naver-2026.site RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    yaba-naver-2026.site
    First seen
    2026-11-03 14:06 UTC
    First published
    2026-11-03 14:30 UTC
    DNS
    Resolves · checked 2026-11-04 14:33 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-03 13:05 UTC to 2027-02-01 13:05 UTC
    Logged 2026-11-03 14:03 UTC in IPng Networks Halloumi2027h1, entry 349,370,080
    SHA-256 347aa1037b55ebde6faaa2d24f31e0f277df187b2af8fa826058a00046161b52
    Public key SHA-256 0149e68ac88b8c4b2a64f930d9738c7e1f475041a3e3dc8dff798da748ed766f
    Brand
    Naver
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    yaba-naver-2026.site
    Registered
    2026-07-13 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:19 UTC

    Suggest a correction

  2. www.yaba-naver-2026.site RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    www.yaba-naver-2026.site
    First seen
    2026-11-03 14:06 UTC
    First published
    2026-11-03 14:30 UTC
    DNS
    Resolves · checked 2026-11-04 14:33 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-03 13:05 UTC to 2027-02-01 13:05 UTC
    Logged 2026-11-03 14:03 UTC in IPng Networks Halloumi2027h1, entry 349,370,080
    SHA-256 347aa1037b55ebde6faaa2d24f31e0f277df187b2af8fa826058a00046161b52
    Public key SHA-256 0149e68ac88b8c4b2a64f930d9738c7e1f475041a3e3dc8dff798da748ed766f
    Brand
    Naver
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    yaba-naver-2026.site
    Registered
    2026-07-13 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:19 UTC

    Suggest a correction

  3. www.thc-naver-ulsan.site RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    www.thc-naver-ulsan.site
    First seen
    2026-11-03 14:06 UTC
    First published
    2026-11-03 14:30 UTC
    DNS
    Resolves · checked 2026-11-04 14:33 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-03 13:05 UTC to 2027-02-01 13:05 UTC
    Logged 2026-11-03 14:03 UTC in IPng Networks Halloumi2027h1, entry 349,367,268
    SHA-256 322c0ebb749d2b13dcda0b8eea83418d96e3fb1f1e4d467fbb4a2bb519449f0e
    Public key SHA-256 357b4ac59e2fc0aa4d70914ddced02e4a2f3b33f39be84dc25c8916ae4663456
    Brand
    Naver
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    thc-naver-ulsan.site
    Registered
    2026-07-12 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:19 UTC

    Suggest a correction

  4. www.mayaksang-naver-gwangju.site RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    www.mayaksang-naver-gwangju.site
    First seen
    2026-11-03 14:06 UTC
    First published
    2026-11-03 14:30 UTC
    DNS
    Resolves · checked 2026-11-04 14:33 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-03 13:04 UTC to 2027-02-01 13:04 UTC
    Logged 2026-11-03 14:03 UTC in Let's Encrypt Willow2027h1, entry 914,795,339
    SHA-256 5b987837b3079a98db6e3003e37e7e0ebe8bf5ca6f10d8a9762f62c84b5718a5
    Public key SHA-256 8258174755ede61b3cc5cb04f29745c6d66c5ac7f92d2f19ce442ced2f72116c
    Brand
    Naver
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    mayaksang-naver-gwangju.site
    Registered
    2026-07-12 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:19 UTC

    Suggest a correction

  5. www.hiroppong-naver-seoul.site RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    www.hiroppong-naver-seoul.site
    First seen
    2026-11-03 14:06 UTC
    First published
    2026-11-03 14:30 UTC
    DNS
    Resolves · checked 2026-11-04 14:33 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-03 13:05 UTC to 2027-02-01 13:05 UTC
    Logged 2026-11-03 14:03 UTC in Geomys Tuscolo2027h1, entry 459,967,919
    SHA-256 72f2c555620940aac1aa18327fbccad98dddd4bdaf70333e994f6273aecf19e2
    Public key SHA-256 722f9ac84b5a265a8df7b2b818c3fcd766d0736931ec8e23b60c7644fb14cf77
    Brand
    Naver
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    hiroppong-naver-seoul.site
    Registered
    2026-07-13 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:19 UTC

    Suggest a correction

  6. thc-naver-ulsan.site RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    thc-naver-ulsan.site
    First seen
    2026-11-03 14:06 UTC
    First published
    2026-11-03 14:30 UTC
    DNS
    Resolves · checked 2026-11-04 14:33 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-03 13:05 UTC to 2027-02-01 13:05 UTC
    Logged 2026-11-03 14:03 UTC in IPng Networks Halloumi2027h1, entry 349,367,268
    SHA-256 322c0ebb749d2b13dcda0b8eea83418d96e3fb1f1e4d467fbb4a2bb519449f0e
    Public key SHA-256 357b4ac59e2fc0aa4d70914ddced02e4a2f3b33f39be84dc25c8916ae4663456
    Brand
    Naver
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    thc-naver-ulsan.site
    Registered
    2026-07-12 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:19 UTC

    Suggest a correction

  7. mayaksang-naver-gwangju.site RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    mayaksang-naver-gwangju.site
    First seen
    2026-11-03 14:06 UTC
    First published
    2026-11-03 14:30 UTC
    DNS
    Resolves · checked 2026-11-04 14:33 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-03 13:04 UTC to 2027-02-01 13:04 UTC
    Logged 2026-11-03 14:03 UTC in Let's Encrypt Willow2027h1, entry 914,795,339
    SHA-256 5b987837b3079a98db6e3003e37e7e0ebe8bf5ca6f10d8a9762f62c84b5718a5
    Public key SHA-256 8258174755ede61b3cc5cb04f29745c6d66c5ac7f92d2f19ce442ced2f72116c
    Brand
    Naver
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    mayaksang-naver-gwangju.site
    Registered
    2026-07-12 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:19 UTC

    Suggest a correction

  8. hiroppong-naver-seoul.site RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    hiroppong-naver-seoul.site
    First seen
    2026-11-03 14:06 UTC
    First published
    2026-11-03 14:30 UTC
    DNS
    Resolves · checked 2026-11-04 14:33 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-03 13:05 UTC to 2027-02-01 13:05 UTC
    Logged 2026-11-03 14:03 UTC in Geomys Tuscolo2027h1, entry 459,967,919
    SHA-256 72f2c555620940aac1aa18327fbccad98dddd4bdaf70333e994f6273aecf19e2
    Public key SHA-256 722f9ac84b5a265a8df7b2b818c3fcd766d0736931ec8e23b60c7644fb14cf77
    Brand
    Naver
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    hiroppong-naver-seoul.site
    Registered
    2026-07-13 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:19 UTC

    Suggest a correction

  9. yak-naver-korea.site RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    yak-naver-korea.site
    First seen
    2026-11-03 07:36 UTC
    First published
    2026-11-03 07:43 UTC
    DNS
    Resolves · checked 2026-11-05 07:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-03 06:33 UTC to 2027-02-01 06:33 UTC
    Logged 2026-11-03 07:32 UTC in Google ParcelYard2027h1, entry 585,972,871
    SHA-256 3cbedce831883627456dfab69e9e0a0001cbb6275841956f0deed5d34aac617a
    Public key SHA-256 e34c8a2c71560d21a50c5ae604fedabd435bce0bee5222e61844368d62a9cd09
    Brand
    Naver
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    yak-naver-korea.site
    Registered
    2026-07-13 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:36 UTC

    Suggest a correction

  10. www.yak-naver-korea.site RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    www.yak-naver-korea.site
    First seen
    2026-11-03 07:36 UTC
    First published
    2026-11-03 07:43 UTC
    DNS
    Resolves · checked 2026-11-05 07:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-03 06:33 UTC to 2027-02-01 06:33 UTC
    Logged 2026-11-03 07:32 UTC in Google ParcelYard2027h1, entry 585,972,871
    SHA-256 3cbedce831883627456dfab69e9e0a0001cbb6275841956f0deed5d34aac617a
    Public key SHA-256 e34c8a2c71560d21a50c5ae604fedabd435bce0bee5222e61844368d62a9cd09
    Brand
    Naver
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    yak-naver-korea.site
    Registered
    2026-07-13 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:36 UTC

    Suggest a correction

  11. www.liquid-extract-naver-2026.site RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    www.liquid-extract-naver-2026.site
    First seen
    2026-11-03 07:36 UTC
    First published
    2026-11-03 07:43 UTC
    DNS
    Resolves · checked 2026-11-05 07:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-03 06:33 UTC to 2027-02-01 06:33 UTC
    Logged 2026-11-03 07:32 UTC in Google ParcelYard2027h1, entry 585,974,812
    SHA-256 0f26295ffe84a3d48cd132b8251565690672b29db04c74af154ecd88631febb7
    Public key SHA-256 7945c98f722c3340274cf3d0739f8cb1b4ef896207ce4fe4a72f2703ffce80ef
    Brand
    Naver
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    liquid-extract-naver-2026.site
    Registered
    2026-07-13 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:36 UTC

    Suggest a correction

  12. liquid-extract-naver-2026.site RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    liquid-extract-naver-2026.site
    First seen
    2026-11-03 07:36 UTC
    First published
    2026-11-03 07:43 UTC
    DNS
    Resolves · checked 2026-11-05 07:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-03 06:33 UTC to 2027-02-01 06:33 UTC
    Logged 2026-11-03 07:32 UTC in Google ParcelYard2027h1, entry 585,974,812
    SHA-256 0f26295ffe84a3d48cd132b8251565690672b29db04c74af154ecd88631febb7
    Public key SHA-256 7945c98f722c3340274cf3d0739f8cb1b4ef896207ce4fe4a72f2703ffce80ef
    Brand
    Naver
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    liquid-extract-naver-2026.site
    Registered
    2026-07-13 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:36 UTC

    Suggest a correction

  13. yakjaengi-naver-korea.site RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    yakjaengi-naver-korea.site
    First seen
    2026-11-03 06:57 UTC
    First published
    2026-11-03 07:43 UTC
    DNS
    Resolves · checked 2026-11-05 07:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-03 05:56 UTC to 2027-02-01 05:56 UTC
    Logged 2026-11-03 06:54 UTC in DigiCert Sphinx2027h1, entry 339,381,494
    SHA-256 60ec79a903d389a7640099355b5e86f1b1fc286e657da720788bae2ddbd7c6b8
    Public key SHA-256 f7c148089ee747e22b9eac9e20b96b26eefb58d04a650ef75f6148327c555c70
    Brand
    Naver
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    yakjaengi-naver-korea.site
    Registered
    2026-08-01 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  14. yaba-naver-busan.site RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    yaba-naver-busan.site
    First seen
    2026-11-03 06:57 UTC
    First published
    2026-11-03 07:43 UTC
    DNS
    Resolves · checked 2026-11-05 07:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-03 05:56 UTC to 2027-02-01 05:56 UTC
    Logged 2026-11-03 06:54 UTC in IPng Networks Halloumi2027h1, entry 345,401,753
    SHA-256 62121f6c87df39b52243b68a9b46b9712d375a2146b00467f9cda94e16e16ab9
    Public key SHA-256 048b4fd202b7634bf428290cee77034facf860e9dfc29d70a2ecfa360b362293
    Brand
    Naver
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    yaba-naver-busan.site
    Registered
    2026-08-01 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  15. www.yakjaengi-naver-korea.site RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    www.yakjaengi-naver-korea.site
    First seen
    2026-11-03 06:57 UTC
    First published
    2026-11-03 07:43 UTC
    DNS
    Resolves · checked 2026-11-05 07:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-03 05:56 UTC to 2027-02-01 05:56 UTC
    Logged 2026-11-03 06:54 UTC in DigiCert Sphinx2027h1, entry 339,381,494
    SHA-256 60ec79a903d389a7640099355b5e86f1b1fc286e657da720788bae2ddbd7c6b8
    Public key SHA-256 f7c148089ee747e22b9eac9e20b96b26eefb58d04a650ef75f6148327c555c70
    Brand
    Naver
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    yakjaengi-naver-korea.site
    Registered
    2026-08-01 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  16. www.yaba-naver-busan.site RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    www.yaba-naver-busan.site
    First seen
    2026-11-03 06:57 UTC
    First published
    2026-11-03 07:43 UTC
    DNS
    Resolves · checked 2026-11-05 07:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-03 05:56 UTC to 2027-02-01 05:56 UTC
    Logged 2026-11-03 06:54 UTC in IPng Networks Halloumi2027h1, entry 345,401,753
    SHA-256 62121f6c87df39b52243b68a9b46b9712d375a2146b00467f9cda94e16e16ab9
    Public key SHA-256 048b4fd202b7634bf428290cee77034facf860e9dfc29d70a2ecfa360b362293
    Brand
    Naver
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    yaba-naver-busan.site
    Registered
    2026-08-01 · Registrar of Domain Names REG.RU LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  17. www.naver.paris FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 7 y ago
    DetailsHide
    Hostname
    www.naver.paris
    First seen
    2026-10-31 14:11 UTC
    First published
    2026-10-31 14:27 UTC
    DNS
    Resolves · checked 2026-11-04 14:35 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 87.98.154.146.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 87.98.154.146
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 13:10 UTC to 2027-01-29 13:10 UTC
    Logged 2026-10-31 14:08 UTC in IPng Networks Gouda2027h1, entry 278,609,928
    SHA-256 0b8bf1f790bf8d328f2ce792b3e0fc87ca92f71a99009434cedc6fac2a2c814b
    Public key SHA-256 92e5d2b45ce4d8a0a7b99d6e0f0a176f541fdc0efb189cda7b47b34dcd548137
    Brand
    Naver
    Addresses
    87.98.154.146 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (87.98.154.146): a cloud provider. It rents servers and addresses to its customers.
    Domain
    naver.paris
    Registered
    2019-06-16 · OVH
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  18. naver.paris FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 7 y ago
    DetailsHide
    Hostname
    naver.paris
    First seen
    2026-10-31 07:26 UTC
    First published
    2026-10-31 08:21 UTC
    DNS
    Resolves · checked 2026-11-05 08:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 87.98.154.146.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 87.98.154.146
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 06:23 UTC to 2027-01-29 06:23 UTC
    Logged 2026-10-31 07:21 UTC in Let's Encrypt Sycamore2027h1, entry 867,803,771
    SHA-256 347d97bc04162ccaa484ac6e032fe2696dfa291f0d6231e6d2e4a74dfcaab332
    Public key SHA-256 a155ca31bfb398e3a04a51b11125f812e2c5d6557b535976a2f41e1f508b9947
    Brand
    Naver
    Addresses
    87.98.154.146 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (87.98.154.146): a cloud provider. It rents servers and addresses to its customers.
    Domain
    naver.paris
    Registered
    2019-06-16 · OVH
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  19. news-naver.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 5 y ago
    DetailsHide
    Hostname
    news-naver.com
    First seen
    2026-10-30 19:16 UTC
    First published
    2026-10-30 19:38 UTC
    DNS
    Resolves · checked 2026-11-04 19:47 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 15.204.110.165.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 15.204.110.165
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-30 18:11 UTC to 2027-01-28 18:11 UTC
    Logged 2026-10-30 19:10 UTC in Google ParcelYard2027h1, entry 527,305,137
    SHA-256 ab327551fa2408b73d027ca6f9e39258ec0000b1136627555bea7580cf0cf683
    Public key SHA-256 9fabd83eb7b61eb6c0743cf5934b8297750c6d73b387af4d7446329cc278748e
    Brand
    Naver
    Addresses
    15.204.110.165 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.110.165): a cloud provider. It rents servers and addresses to its customers.
    Domain
    news-naver.com
    Registered
    2021-08-05 · GoDaddy.com, LLC
    MX
    Receives mail at news-naver.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 20:39 UTC

    Suggest a correction

  20. navercloud.camp DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…5 addresses
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    navercloud.camp
    First seen
    2026-10-30 03:31 UTC
    First published
    2026-10-30 03:51 UTC
    DNS
    Resolves · checked 2026-11-05 04:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.78.156.59.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 5.78.156.59
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-30 02:28 UTC to 2027-01-28 02:28 UTC
    Logged 2026-10-30 03:27 UTC in Let's Encrypt Sycamore2027h1, entry 849,240,952
    SHA-256 6a9612c6cc7304f26e09be4d92e86999f8ceafe333be5d9c6472ed2f65178b7f
    Public key SHA-256 e75a666dfe6f112e8d889acb870aab868a6f19474c6e65748b1fb3dfd842a249
    Brand
    Naver
    Addresses
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
    Domain
    navercloud.camp
    Registered
    2025-12-17 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:44 UTC

    Suggest a correction

  21. ava.game.naver.com.shens.my.id NL · AS49981 · WorldStream WorldStream B.V.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 13 mo ago
    DetailsHide
    Hostname
    ava.game.naver.com.shens.my.id
    First seen
    2026-10-26 13:11 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.59.170.20.
    1. Phishing-host list fetched with the address
    2. Resolved to 2.59.170.20
    3. Latest DNS check
    Certificate
    Logged in Geomys Tuscolo2027h1, entry 359,004,239
    SHA-256 5c7600cdd98e7bc0594ed42edd31d7cdfae4ebc0bb61e98c8773639d5bb96631
    Brand
    Naver
    Addresses
    2.59.170.20 · Netherlands · AS49981 WorldStream WorldStream B.V.
    Domain
    shens.my.id
    Registered
    2025-10-03 · PT Digital Registra Indonesia
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Naver when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Email & webmail

All brands →