amazon-clone-khaki-eight[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation threat targeting Amazon, designed to deceive users into believing they are interacting with the legitimate Amazon platform. Analysis indicates the site employs visual and structural elements identical to Amazon’s official interface, increasing the likelihood of successful credential harvesting or fraudulent transactions. The threat type is strictly brand impersonation, with no evidence of additional payloads such as crypto drainers or malware distribution at this time. Infrastructure analysis reveals the domain resolves to IP address 216.198.79.195, geolocated within the United States under AS16509 (Amazon.com, Inc.), though this appears to be a misdirection or shared hosting artifact. The domain is registered through Vercel Inc., a legitimate hosting provider often exploited for rapid deployment of fraudulent sites. Security vendors on VirusTotal flag the domain at 24 out of 95, indicating moderate to high confidence in malicious classification. The domain appears on two security blocklists, PhishDestroy and PhishingDB, and is actively blocked by Google Safe Browsing for phishing. The SSL certificate, issued by Google Trust Services (WR1), provides encryption but does not validate legitimacy. The page title explicitly states 'Amazon Clone,' further confirming the intent to impersonate. Mitigation steps specific to this brand impersonation threat include immediate blocking of the domain and its resolving IP at the network perimeter. Organizations should update endpoint protection rules to flag or quarantine any outbound connections to this domain. Security teams are advised to monitor for credential submission attempts or unusual transaction patterns originating from internal networks. Users who may have interacted with the site should be instructed to reset passwords, enable multi-factor authentication, and review recent account activity for unauthorized changes. Given the domain’s registration under Vercel, additional scrutiny should be applied to other Vercel-hosted domains exhibiting similar naming patterns or impersonation characteristics.