164tyesy[.]vercel[.]app

This domain is flagged as an active phishing site specifically designed to impersonate the WP webmail login portal. Analysis indicates a brand impersonation threat targeting users of the Polish webmail service, likely aiming to harvest credentials through a fraudulent login interface. The risk level is classified as elevated due to the combination of brand spoofing, active deployment, and moderate detection rates. Infrastructure analysis reveals the following technical indicators: the domain 164tyesy.vercel.app resolves to IP address 216.198.79.195 and is registered through Vercel Inc. The SSL certificate is issued by Google Trust Services, providing a false sense of security. VirusTotal reports 14 out of 95 security vendors flagging this domain as malicious. The page title, 'Poczta - Najlepsza Poczta, największe załączniki - WP,' directly mimics the legitimate WP webmail portal, confirming the brand impersonation tactic. No historical registration data is available, suggesting the domain may have been recently deployed for this campaign. Mitigation steps for this specific threat type include immediate blocking of the domain and its resolving IP address at the network perimeter. Organizations should implement web filtering rules to prevent access to vercel.app subdomains associated with phishing activity. End users should be alerted to verify the authenticity of any WP webmail login page, particularly those hosted on third-party platforms. Security teams are advised to monitor for credential harvesting attempts originating from this domain and reset any credentials potentially exposed through this phishing site. Network logs should be reviewed for connections to 216.198.79.195 and related infrastructure.