amazon-clone-pink-five[.]vercel[.]app

This domain, amazon-clone-pink-five.vercel.app, was registered on 2026-03-02 and is currently active. DNS resolution points to IP 64.29.17.195, which is assigned to ASN 16509, an address block owned by Amazon.com, Inc., and geolocated in the United States. The TLS certificate is signed by a widely trusted certificate authority and includes HSTS enforcement. Reputation services assign extremely low trust scores (1/100 on one platform, 0/100 on another) and the domain appears on a single security blocklist, where it has been listed by a dedicated anti‑phishing feed. VirusTotal analysis shows that 20 of 93 scanners flag the host as malicious. The page title returned by HTTP 200 is "AMAZON", matching the declared brand target and confirming a brand‑impersonation intent classified as an e‑commerce scam. Registration was performed through a well‑known hosting provider. Evidence indicates the site is being used to deceive users by leveraging the Amazon brand, but the specific payload or credential‑harvesting mechanisms have not been publicly disclosed. Defenders should block the domain at network perimeter, add it to URL filtering lists, monitor DNS queries for the associated IP, and continue to track any changes in detection ratios or additional blocklist listings.