thecreolefeast[.]com

This domain, thecreolefeast.com, is identified as a brand impersonation phishing site targeting Amazon users. Analysis confirms the site masqueraded as an outdoor cooking gear retailer while harvesting credentials or payment details through Amazon-themed lures. No specific drainer kit was conclusively linked to this infrastructure, but the page title 'Creole Feast: Premium Outdoor Cooking Gear' suggests an attempt to blend into legitimate retail traffic while exploiting Amazon's brand trust. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain was registered through Cosmotown, Inc. on March 02, 2026, and resolves to IP address 172.67.172.50, a Cloudflare-protected endpoint. Security vendors flagged the domain with a VirusTotal detection score of 2/95, while Gridinsoft assigned a trust score of 0/100. The site appears on three security blocklists, including MetaMask and PhishDestroy, and was previously served over HTTP/3 with HSTS enforcement. Let's Encrypt provided the SSL certificate, a common tactic to lend superficial legitimacy to phishing pages. As of the latest verification, thecreolefeast.com has been taken offline, likely due to hosting or registrar intervention. However, residual risk persists for users who may have interacted with the site prior to its removal. Organizations should monitor for credential reuse or unauthorized transactions linked to this campaign. Network defenders are advised to block the domain and associated IP at perimeter controls, while end users should verify retail offers directly through Amazon's official channels. The domain's recent creation date and use of Cloudflare suggest potential for rapid redeployment under a new name.