pljnsad[.]vercel[.]app

This domain, pljnsad.vercel.app, is identified as a high-risk phishing resource targeting users of WP Webmail, a Polish email service provider. The page title, 'Poczta - Najlepsza Poczta, największe załączniki - WP,' directly mimics the legitimate WP Webmail portal, indicating an intent to deceive users into submitting login credentials. Analysis reveals no explicit association with known drainer kits, but the generic_phishing classification suggests a broad credential-harvesting campaign. The infrastructure and page design are consistent with opportunistic phishing attacks rather than targeted financial fraud. Technical indicators confirm the malicious nature of this domain. VirusTotal detection metrics show 19 out of 95 security vendors flagging the domain as malicious. The domain is registered through Vercel Inc. and resolves to the IP address 216.198.79.195, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The SSL certificate is issued by Google Trust Services under the WR1 intermediate. The domain appears on one security blocklist and is currently categorized as active. No historical WHOIS data or creation date is provided, but the use of Vercel’s platform suggests recent deployment to evade detection. As of the latest assessment, pljnsad.vercel.app remains active and continues to pose a significant risk to users. The domain has been blocked by at least one security provider, but the low blocklist count (1/1) indicates limited visibility or recent emergence. Organizations are advised to implement network-level blocking for the domain and its resolving IP (216.198.79.195). End-users should be alerted to the specific threat of WP Webmail credential theft via this domain. Given the high-risk classification and active status, continuous monitoring and proactive takedown efforts are recommended to mitigate further exposure.