poly-calendar-zeta[.]vercel[.]app

This domain, poly-calendar-zeta.vercel.app, poses a high-risk brand impersonation threat targeting Amazon. Analysis indicates the site mimics legitimate Amazon properties, likely to deceive users into disclosing sensitive information or interacting with fraudulent content. The page title, 'Poly Calendar - Polymarket Prediction Market Events,' does not align with Amazon’s typical branding, suggesting an attempt to obfuscate malicious intent under the guise of a third-party service. The domain’s infrastructure and presentation are designed to exploit trust in the Amazon brand, potentially leading to credential theft or financial fraud for unsuspecting visitors.

Evidence supporting this assessment includes a detection rate of 1/95 on VirusTotal, indicating limited but present recognition by security vendors. The domain was registered on January 28, 2020, through Vercel Inc., and resolves to the IP address 64.29.17.131, hosted within Amazon.com, Inc.’s AS16509 network. It appears on three security blocklists, further confirming its malicious classification. The SSL certificate, issued by Google Trust Services (WR1), does not mitigate the risk, as encrypted connections are commonly exploited in phishing campaigns to lend an appearance of legitimacy.

Users who have visited poly-calendar-zeta.vercel.app should immediately cease all interaction with the domain. If credentials or payment details were entered, affected accounts must be secured by resetting passwords, enabling multi-factor authentication, and monitoring for unauthorized activity. System scans using updated security tools are recommended to detect potential malware or browser-based threats. Organizations should block the domain and its resolving IP (64.29.17.131) at the network level to prevent further exposure. Vigilance is advised, as brand impersonation domains often employ social engineering tactics to bypass technical controls.