177tyesy[.]vercel[.]app

Analysis of the domain 177tyesy.vercel.app indicates that it poses a significant threat as a generic_phishing site, specifically designed to mimic legitimate web services and steal user credentials. The domain is currently active and has been observed to impersonate the login page of WP Poczta, a Polish email service, with the page title 'Poczta - Najlepsza Poczta, największe załączniki - WP'. This impersonation is intended to deceive users into entering their login credentials, which can then be harvested by the attackers.

Infrastructure analysis reveals that the domain 177tyesy.vercel.app resolves to the IP address 64.29.17.3 and is registered through Vercel Inc., a popular cloud platform. According to VirusTotal, 13 out of 95 security vendors have flagged this domain as malicious, indicating a moderate level of consensus among threat intelligence sources. The creation date of the domain is not provided, but the current status suggests that it is still being used for phishing activities. The relatively low detection rate, despite the domain being active, suggests that it may be part of a targeted campaign or that the attackers are employing techniques to avoid broader detection.

If users have visited 177tyesy.vercel.app, they should immediately change the passwords for their WP Poczta accounts and any other accounts where the same or similar credentials were used. Users should also monitor their accounts for any unauthorized activity and consider enabling two-factor authentication (2FA) for an additional layer of security. Reporting the incident to the respective email service provider and any relevant security authorities is recommended to further mitigate potential damage and assist in tracking the threat actors.