amazon-clone-plum-eight[.]vercel[.]app

The domain amazon-clone-plum-eight.vercel.app has been identified as a high-risk brand impersonation threat, specifically targeting Amazon. The domain employs deceptive practices to mimic the legitimate Amazon website, utilizing a page title 'Amazon Clone' to mislead users into believing they are on the authentic platform. This poses significant risks as users may inadvertently disclose sensitive information.

Technical indicators reveal that the domain is currently flagged by 25 out of 95 security vendors on VirusTotal, indicating a high degree of recognition among cybersecurity tools. The domain is registered through Vercel Inc., and it resolves to the IP address 216.198.79.131, located within Amazon.com, Inc.'s autonomous system (AS16509) in the United States. The SSL certificate is issued by Google Trust Services / WR1, which may lend an appearance of credibility to unsuspecting visitors. The domain is listed on two security blocklists, including PhishDestroy and PhishingDB, and is flagged by Google Safe Browsing as a phishing site. The presence on these lists further corroborates its malicious intent.

Currently, the domain remains active, posing ongoing risks to internet users. Immediate action is recommended, such as adding this domain to additional blocklists to prevent user access. It is crucial to educate potential targets about the dangers of such impersonation domains to mitigate the risk of credential theft or financial fraud. Continued monitoring and collaboration with domain registrars and hosting providers are advised to facilitate the domain's takedown and prevent similar threats in the future.