amazon-clone-ochre-three[.]vercel[.]app

This domain amazon-clone-ochre-three.vercel.app is currently active and hosts a page whose HTML title is “amazon”, indicating an attempt to impersonate the Amazon brand. The site was registered on March 2 2026 through Vercel Inc. and resolves to the IPv4 address 216.198.79.195, which belongs to AS16509 (Amazon.com, Inc.) and is located in the United States. The server returns HTTP 200 and presents a TLS certificate issued by Google Trust Services under the WR1 certificate authority, confirming the use of valid HTTPS. Automated reputation services rate the site extremely low: Scamadviser assigns a trust score of 1 / 100, Gridinsoft scores 0 / 100, and VirusTotal reports 20 of 93 scanned security vendors flagging the domain. The site is classified as an E‑Commerce scam, has been blocked by PhishDestroy, and appears on one external blocklist. Detected technologies include Vercel hosting and HTTP Strict Transport Security (HSTS). No additional page content has been publicly disclosed, so the exact credential‑collection mechanisms remain unknown. Defenders should immediately block DNS resolution and HTTP(S) traffic to this domain and its associated IP address, add the host to URL filtering and threat‑intel feeds, and monitor for any related subdomains or infrastructure reuse. Continuous re‑evaluation is advised as further analysis of the page content may reveal additional malicious vectors.