190tyesy[.]vercel[.]app

The domain 190tyesy.vercel.app is currently classified as an elevated risk credential theft threat, with analysis indicating active impersonation of the WP webmail brand. The page title, 'Poczta - Najlepsza Poczta, największe załączniki - WP,' closely mimics legitimate WP mail services, suggesting the intent to deceive users into disclosing sensitive login credentials. This domain remains active at the time of analysis.

Technical indicators reinforce the risk assessment. The domain resolves to IP address 64.29.17.195 and is registered through Vercel Inc. Its SSL certificate is issued by Google Trust Services, ensuring encrypted communication but not validating legitimacy. VirusTotal reports show that 13 out of 95 security vendors have flagged this domain as malicious. This detection rate demonstrates a significant consensus among security platforms regarding the presence of phishing or credential theft activity. No creation date or blocklist counts beyond VirusTotal were available for this assessment.

Given its ongoing active status, WP brand impersonation, and confirmed multi-vendor detection, users are advised to avoid interacting with 190tyesy.vercel.app. Organizations should consider proactive blocking at the network level and monitor for attempted access. Individuals should not enter credentials on this site and are urged to report encounters to appropriate security teams. Continued monitoring for related domains and similar infrastructure is recommended to mitigate further credential theft risks.