189tyesy[.]vercel[.]app

This domain is classified at an elevated risk level for credential harvesting phishing, a threat type targeting user authentication data through deceptive web interfaces. Analysis indicates the domain is actively mimicking a legitimate email service, as evidenced by its page title, 'Poczta - Najlepsza Poczta, największe załączniki - WP,' which closely resembles a known webmail provider's branding. Infrastructure analysis reveals the domain is registered through Vercel Inc. and resolves to the IP address 216.198.79.67. VirusTotal detections show 14 out of 95 security vendors flagging this domain as malicious. The SSL certificate is issued by Google Trust Services, which, while not inherently malicious, is often exploited by threat actors to lend false legitimacy to phishing sites. No specific creation date or additional blocklist entries were provided, but the combination of these indicators strongly suggests malicious intent. To mitigate risks associated with this credential harvesting phishing domain, organizations should immediately block the domain and its resolving IP (216.198.79.67) at the network perimeter. Endpoint protection solutions should be updated to include this domain in their blocklists, and users should be educated on recognizing phishing attempts, particularly those mimicking webmail services. Security teams are advised to monitor for any successful authentication attempts originating from this domain and conduct a forensic review of potentially compromised credentials. If this domain was accessed internally, initiate password resets for affected accounts and enable multi-factor authentication where possible.