booking-com-clone[.]vercel[.]app

This domain, booking-com-clone.vercel.app, presents a high-risk level due to its specific threat type of brand impersonation targeting Booking.com. The domain is actively used for fraudulent purposes, misleading users into believing it is the legitimate Booking.com site. This poses a significant risk as users may inadvertently disclose sensitive information, including login credentials and payment details.

Analysis of the domain reveals that it resolves to IP address 64.29.17.67, located in the United States and associated with AS16509, Amazon.com, Inc. The domain is registered through Tucows Domains Inc., with a creation date of February 21, 2026. Security assessments from VirusTotal indicate that 21 out of 95 vendors have flagged this domain as a threat. It is currently listed on two security blocklists and is marked as phishing by Google Safe Browsing. Additionally, the SSL certificate is issued by Google Trust Services, which might give a false sense of security to unsuspecting users.

To mitigate the risks associated with this brand impersonation, it is essential to implement DNS filtering solutions to block access to this domain at the network level. Organizations should conduct awareness training to educate users on recognizing phishing attempts and verifying website authenticity before entering sensitive information. It is also recommended to report this domain to relevant authorities and security platforms to aid in its takedown and prevent further exploitation. Continuous monitoring for similar threats should be maintained to ensure proactive defense against brand impersonation attacks.