blacko-lake[.]vercel[.]app

This domain, blacko-lake.vercel.app, is identified as a credential phishing site impersonating Bell Business services. The page title, 'Bell Business Site,' suggests targeting of corporate users or telecommunications customers, likely aiming to harvest login credentials or sensitive account details. Analysis indicates the absence of a known drainer kit, but the infrastructure aligns with generic phishing frameworks commonly deployed on abused hosting platforms. Infrastructure analysis reveals the domain is registered through Vercel, a legitimate hosting provider frequently exploited for phishing due to its free tier and rapid deployment capabilities. As of the latest scan, 21 out of 95 security vendors on VirusTotal flag the domain as malicious. The domain resolves to the IP address 64.29.17.131, which has been associated with other phishing campaigns. The SSL certificate is issued by Google Trust Services (WR1), a common certificate authority for both legitimate and malicious sites. The domain appears on one security blocklist, and no Google Safe Browsing (GSB) detections are currently recorded. The phishing infrastructure remains active and operational, with no evidence of takedown or mitigation efforts. While one security vendor has blocked access, the domain continues to resolve and serve content. The high-risk designation is justified by the active impersonation of a trusted brand and the potential for credential theft or financial fraud. Organizations are advised to block the domain and IP at the network level, monitor for related indicators, and educate users on recognizing phishing attempts targeting telecommunications providers. Continuous monitoring is recommended due to the persistent nature of such threats.