klng-casefb466398[.]vercel[.]app

The domain klng-casefb466398.vercel.app was registered on February 21, 2026 through Tucows Domains Inc. and points to the Amazon-owned address 64.29.17.67, which resides in the United States under ASN AS16509 (Amazon.com, Inc.). The site presents a TLS certificate issued by Google Trust Services under the WR1 branding, indicating that HTTPS is correctly terminated. HTTP probing returns status code 451, and the page title returned is "Deployment Unavailable," suggesting that the Vercel‑hosted application is presently offline. The infrastructure exhibits Vercel platform signatures and enforces HTTP Strict Transport Security (HSTS). Multiple threat‑intelligence sources have flagged the domain.

Google Safe Browsing classifies it as a social engineering threat, and VirusTotal reports 15 detections out of 95 security vendors, confirming a notable level of malicious reputation. The domain appears on one public security blocklist and has been actively blocked by the PhishDestroy collective. The risk rating assigned is high, and the current operational status is taken offline. Evidence indicates that the domain is being used for generic phishing, but no further details on the specific campaign, lure content, or target brand have been disclosed. Consequently, analysts cannot confirm the exact phishing vector or victim profile.

The lack of visible content beyond the generic "Deployment Unavailable" title limits the ability to attribute a particular phishing kit or template. Defenders should immediately block DNS resolution to klng-casefb466398.vercel.app and deny any outbound traffic to its associated IP address (64.29.17.67). Monitoring for related subdomains under the same Vercel account may reveal additional payloads. Continuous re‑evaluation of VirusTotal and Google Safe Browsing scores is advised, as the domain could be re‑activated.