jiks-tau[.]vercel[.]app

Analysis indicates that jiks-tau.vercel.app was associated with a fake login phishing operation. The observed page title, "Bell Business Site," suggests potential brand impersonation intended to collect user credentials through deceptive authentication workflows. No evidence of a drainer kit was identified in the available intelligence. The domain was categorized as generic_phishing and exhibited characteristics commonly associated with credential-harvesting infrastructure.

Technical indicators show a VirusTotal detection rate of 18/95 security vendors. Registration records indicate the domain was registered through Tucows Domains Inc. and created on February 21, 2026. Infrastructure analysis identified resolution to IP address 216.198.79.3, geolocated in the United States under AS16509 Amazon.com, Inc. The site presented an SSL certificate issued by Google Trust Services / WR1. The domain appeared on 1 security blocklist and was specifically blocked by PhishDestroy.

At the time of assessment, the domain status was offline, reducing immediate exposure risk. However, historical phishing attribution and multiple security detections indicate that the infrastructure should remain blocked and monitored for reactivation or migration to related assets. Organizations should review historical access logs for connections to the domain, investigate potential credential exposure, and maintain preventive controls against similar phishing infrastructure. Residual risk remains elevated due to prior malicious use and documented security detections.