kledai[.]app

This domain poses an elevated risk level due to its specific threat type of brand impersonation, targeting the Kled.ai brand. The domain kledai.app is designed to deceive users by mimicking the legitimate Kled.ai service, potentially leading to credential theft or malware distribution. Its status as offline indicates active disruption, but the threat remains significant given its registration and detection metrics.

Technical indicators from the intelligence data show that VirusTotal flags this domain with 5 out of 95 security vendors detecting it as malicious. The domain was registered through NiceNIC International Group Co., Limited, a registrar known for minimal oversight, and resolves to IP address 104.21.34.111. It was created on February 21, 2026, and currently appears on two security blocklists, including ScamSniffer and PhishDestroy. The Gridinsoft trust score is 0 out of 100, confirming a high-risk profile. The page title found was Kled.ai, further confirming the impersonation attempt.

Mitigation steps specific to this brand impersonation threat include verifying the authenticity of any communications or websites claiming to be Kled.ai by checking the URL for exact spelling and domain extensions. Users should avoid entering credentials or personal data on suspicious domains like kledai.app and report such domains to security teams or registrars. Organizations should implement domain monitoring to detect similar impersonation attempts and enforce strict email and web filtering policies to block known malicious IPs and domains.