amazon-clone-plum-three[.]vercel[.]app

The domain amazon-clone-plum-three.vercel.app has been identified as a generic phishing threat. While it does not explicitly impersonate a specific brand, its naming convention suggests an attempt to mimic Amazon-related services, potentially to deceive users into divulging sensitive information. There is no direct evidence of a drainer kit in use, but the generic phishing classification implies credential harvesting or similar malicious activity.

Technical analysis reveals that amazon-clone-plum-three.vercel.app currently holds a VirusTotal detection score of 22 out of 95 engines, indicating it has not yet been flagged by major antivirus vendors. The domain resolves to the IP address 216.198.79.67 and uses an SSL certificate issued by Google Trust Services, which might lend false credibility to unsuspecting users. It is registered through Vercel Inc., a legitimate hosting provider. The domain appears on one security blocklist and is actively blocked by Phishunt, confirming some level of threat recognition by security communities.

As of now, the status of amazon-clone-plum-three.vercel.app remains active and the risk level is under investigation. Despite the lack of detections on VirusTotal, the presence on a blocklist and phishing-specific blocking services indicates potential danger. Users are strongly advised to refrain from interacting with this domain or submitting any personal or login credentials. Security teams should monitor this domain for further activity and consider proactive blocking measures, given its suspicious naming and partial threat confirmation.