buscar[.]cloud-moringa[.]com

The domain buscar.cloud-moringa.com has been identified as a brand impersonation threat, specifically targeting Amazon. This domain was created on November 18, 2025, and registered through Squarespace Domains II LLC, resolving to IP address 34.110.177.14. The page title 'Empresas Orange Buscador' was observed, and the SSL certificate was issued by Let's Encrypt (E8). VirusTotal analysis shows 19 out of 95 security vendors flagging this domain as malicious, and it appears on two security blocklists. The domain is currently offline, indicating that response actions have been taken to mitigate the immediate threat. However, given the elevated risk level and the brand impersonation nature, users should remain cautious of similar domains and avoid interacting with any unsolicited communications referencing Amazon. PhishDestroy recommends monitoring for related domains and educating users to verify URLs before entering credentials. The seed 8909bf was used to generate this advisory.