booking-clone-beta[.]vercel[.]app

This domain is assessed as a high-risk instance of brand impersonation, specifically targeting the Booking brand. The threat involves a domain that is designed to deceive users into believing they are interacting with a legitimate Booking website, potentially leading to the compromise of personal and financial information.

Analysis indicates that booking-clone-beta.vercel.app is currently active and impersonates Booking. The domain has an SSL certificate issued by Google Trust Services / WR1. VirusTotal reports that 20 out of 95 security vendors flag this domain as malicious. The domain is registered through Vercel Inc. and resolves to an IP address in the United States (216.198.79.195), which is associated with AS16509 Amazon.com, Inc. The page title mimics Booking's branding, displaying 'Booking.com Book fairflights and hotels'. Additionally, the domain appears on 2 security blocklists and is blocked by PhishDestroy and PhishingDB.

To mitigate the risks associated with this brand impersonation threat, users are advised to verify the domain name and URL before entering any personal or financial information. Organizations should update their security blocklists to include this domain and educate employees about the signs of phishing and brand impersonation. Network administrators can also implement DNS filtering and web security gateways to block access to this domain and similar threats.