inpost-przesylki-pl[.]com

This domain, inpost-przesylki-pl.com, is identified as a phishing site impersonating InPost, a logistics and parcel delivery service. Analysis indicates the threat type is brand impersonation, specifically designed to mimic the official InPost login portal. The page title, "Błąd dostępu | InPost," suggests an attempt to deceive users into believing they are interacting with a legitimate InPost error page, likely to harvest credentials or personal information. No crypto drainer kit signatures were detected in initial scans, but the domain exhibits characteristics consistent with credential theft campaigns targeting Polish-speaking users.

Technical indicators confirm elevated risk: the domain was registered on February 21, 2026, via Hosting Concepts B.V. d/b/a Registrar.eu, an entity frequently associated with malicious registrations. It resolves to the IP address 180.178.160.59, hosted under AS213441 (SLAYER GROUP LIMITED) in Germany. VirusTotal reports 22 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and was blocked by at least one threat intelligence feed. SSL certificate analysis reveals a Let's Encrypt R12-issued certificate, a common tool used by threat actors to lend superficial legitimacy to phishing sites. No Google Safe Browsing (GSB) entries were found at the time of analysis, though this may reflect a lag in GSB updates rather than a clean status.

As of the latest verification, inpost-przesylki-pl.com has been taken offline, reducing immediate exposure risk. However, the infrastructure remains a concern: the IP address and autonomous system have been linked to other malicious domains in recent months. Organizations are advised to block the domain and IP at the perimeter, monitor for credential reuse attempts, and alert users who may have interacted with the site. Given the domain's recent creation date and the use of a high-risk registrar, continuous monitoring for resurfacing or similar domains is recommended. Users should verify all InPost communications via official channels and enable multi-factor authentication to mitigate credential theft risks.