yalem-amazon-project[.]netlify[.]app

This domain, yalem-amazon-project.netlify.app, is an active brand impersonation threat targeting Amazon. Analysis of the page title, which explicitly reads 'amazon clone,' confirms the intent to deceive users into believing the site is affiliated with the legitimate Amazon platform. No crypto drainer kit signatures were detected, but the site employs a classic phishing framework designed to harvest login credentials or financial information under false pretenses.

Technical indicators reveal the following: the domain is flagged by 22 out of 95 security vendors on VirusTotal, with Google Safe Browsing categorizing it as phishing. It was registered through Netlify on May 11, 2026, and resolves to the IP address 35.157.26.135, hosted on AWS EC2 in the eu-central-1 region (Germany). The domain appears on one security blocklist, and its SSL certificate is issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1). The creation date is anomalous, suggesting potential domain spoofing or a placeholder for future malicious activity.

As of the latest verification, the domain remains active and unmitigated. No takedown requests or registrar suspensions have been observed, and the hosting provider has not intervened. The remaining risk is classified as high due to the domain's operational status, confirmed phishing classification, and the potential for credential theft or financial fraud. Users are advised to block the domain at the network level, and organizations should update their email and web filtering rules to prevent access. Monitoring for related infrastructure, such as newly registered domains under the same registrar or IP range, is recommended to preempt further abuse.