rqlh-casefb592544[.]vercel[.]app

Analysis indicates that the domain rqlh-casefb592544.vercel.app was registered on 21 February 2026 through Tucows Domains Inc. The domain resolves to the IP address 64.29.17.3, which is owned by Amazon.com, Inc. (AS16509) and geolocated in the United States. The site returns HTTP status code 451, a response that denotes “Unavailable for legal reasons,” and serves a TLS certificate issued by Google Trust Services under the WR1 label, confirming that standard HTTPS termination is in place. Examination of the page title returns “Deployment Unavailable,” suggesting that the Vercel hosting service has taken the front‑end offline. The infrastructure fingerprint includes Vercel as the application platform and the presence of HTTP Strict Transport Security (HSTS) headers, both typical of legitimate Vercel deployments.

Threat intelligence records show that the domain appears on a single public blocklist, specifically PhishDestroy, and that 13 of 93 VirusTotal scanners flagged the domain as malicious. No additional public safebrowsing or open‑threat‑exchange entries were observed in the supplied data. The classification assigned to the domain is “generic phishing,” yet the page content is not available for further behavioral analysis because the service is currently offline. Risk assessment assigns an elevated level, reflecting the recent creation date, cloud‑based hosting, and partial detection.

From a defensive perspective, the combination of a newly created domain, a cloud‑based IP address, a valid TLS certificate, and a modest detection count warrants inclusion in network‑level deny lists and monitoring of DNS queries for the domain or its resolved IP. Security operations teams should consider raising alerts for any outbound connections to IP 64.29.17.3 and for attempts to establish TLS sessions using the Google Trust Services WR1 certificate.