amazon-clone-bay-one[.]vercel[.]app

Analysis of amazon-clone-bay-one.vercel.app reveals a confirmed brand impersonation campaign targeting Amazon, classified as an e-commerce scam. The domain, created on February 21, 2026, was hosted on Vercel infrastructure and resolved to IP address 216.198.79.3, geolocated within Amazon.com, Inc.'s AS16509 network in the United States. The site's SSL certificate was issued by Google Trust Services (WR1), and HTTP Strict Transport Security (HSTS) was enforced, indicating a baseline of technical sophistication.

At the time of assessment, the domain returned an HTTP 451 status and displayed the page title 'Deployment Unavailable,' suggesting it had been taken offline or disabled by the hosting provider. Detection data from security vendors confirms elevated risk: 13 of 93 engines on VirusTotal flagged the domain as malicious, and it appears on at least one security blocklist. The registrar, Tucows Domains Inc., provides no additional abuse context beyond registration details.

While the domain is currently offline, its prior association with known scam infrastructure and confirmed brand impersonation warrants continued monitoring. Defenders should treat any reappearance of this domain or related subdomains on Vercel or similar hosting platforms as high-risk and prioritize blocking at the network and endpoint levels. The combination of Amazon-branded impersonation, e-commerce scam classification, and detection by multiple security vendors supports a risk level assessment of elevated, despite the current offline status.