This domain, kabayanloanexpress.com, is under investigation for loan-related phishing activity as of July 28, 2026. Registered on July 24, 2026, through Fewmoretaps OU d/b/a Trustname.com, the domain remains active and resolves to IP address 64.29.17.65. Infrastructure analysis reveals it uses nameservers ns1.vercel-dns.com and ns2.vercel-dns.com, which may indicate hosting on Vercel's platform, though this is not conclusive evidence of malicious intent.
The domain appears on one security blocklist, specifically PhishDestroy, suggesting preliminary detection by at least one vendor. VirusTotal scans conducted by 91 vendors show no current detections, though the absence of flags does not confirm safety. The domain's content has not been fully analysed, and no specific brand impersonation or phishing kit has been identified in available data.
Defenders should treat this domain as potentially malicious based on its recent registration, blocklist inclusion, and loan-themed naming, which aligns with common phishing tactics targeting financial services. Network-level blocking or monitoring is recommended pending further analysis. Additional context, such as SSL certificate details or HTTP response headers, is not currently available to assess the site's technical configuration or potential evasion techniques.