amazon-my[.]vercel[.]app

This domain, amazon-my.vercel.app, is flagged for high-risk brand impersonation targeting Amazon. Analysis indicates the site mimics Amazon's branding under the page title 'Amazon Project,' designed to deceive users into believing it is an official Amazon platform. No direct evidence of a crypto drainer or credential theft kit was identified, but the domain's structure and hosting align with known brand impersonation tactics. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Tucows Domains Inc. It resolves to the IP address 64.29.17.195, hosted within AS16509 (Amazon.com, Inc.) in the United States. The SSL certificate is issued by Google Trust Services (WR1). The domain appears on 2 security blocklists, and VirusTotal reports 20 out of 95 security vendors flagging it as malicious. Google Safe Browsing (GSB) status is not explicitly provided, but the domain remains active and unmitigated. Current status indicates the domain is still operational, posing an ongoing risk to users. Response actions should include immediate blacklisting, DNS sinkholing, and takedown requests to the hosting provider (Vercel) and registrar (Tucows). Remaining risk includes potential exposure to users unaware of the impersonation, particularly those directed via phishing emails or malicious advertisements. Organizations are advised to block the domain at the network level and monitor for related indicators of compromise.