mmbxcdfg[.]vercel[.]app

Analysis of the domain mmbxcdfg.vercel.app reveals it to be impersonating a known email service provider, WP. The domain was created on May 27, 2026, and is currently active, resolving to the IP address 216.198.79.131. It is registered through Vercel Inc., a platform often used for legitimate web applications, which raises concerns regarding the potential misuse of its services for fraudulent activities. The page title associated with the domain, 'Poczta - Najlepsza Poczta, największe załączniki - WP', indicates a direct attempt to deceive users by mimicking a trusted brand in the email sector.

The domain has been flagged as a high-risk phishing threat, appearing on four security blocklists, including PhishDestroy, OISD, CERT-PL, and BLP-Malware. Additionally, a security analysis through VirusTotal indicates that 19 out of 95 security vendors have flagged this domain, further corroborating its malicious intent. The Gridinsoft trust score for this domain is notably low at 0/100, indicating a complete lack of trustworthiness. The technology stack detected includes Vercel and HSTS, which are legitimate technologies, but their presence in this case underscores the domain's potential for exploitation.

Defenders should take immediate action by blocking access to this domain across their networks. Continuous monitoring of all communications and user reports related to this domain is recommended to mitigate risks associated with potential phishing attempts. Given the current threat landscape, it is crucial for organizations and individuals to remain vigilant and educate users on recognizing fraudulent communications that may originate from domains like mmbxcdfg.vercel.app. The impersonation of a well-known brand adds a layer of complexity to the threat, necessitating proactive measures to safeguard sensitive information.