amazon-clone-khaki-beta[.]vercel[.]app

Analysis as of August 03, 2026 indicates that the domain amazon-clone-khaki-beta.vercel.app is actively classified as a generic phishing threat with an elevated risk rating. VirusTotal records show that 14 of 91 security vendors flagged the domain, demonstrating a moderate but consistent level of detection across independent scanning engines. The domain is listed on one external security blocklist and has been explicitly blocked by the PhishDestroy service, confirming that at least one dedicated anti‑phishing platform regards it as malicious. Registration data reveals that the domain was provisioned through Vercel, a cloud‑hosting platform frequently used for rapid deployment of web content, which can obscure the true operator and enable quick turnover of malicious pages.

The subdomain contains the term "amazon," suggesting an attempt to lure users seeking the legitimate e‑commerce service, although no direct evidence of brand impersonation or specific page content has been captured in the current dataset. No publicly available TLS certificate details, HTTP response codes, or page‑title information have been released, leaving the exact transport security posture and page behavior unverified. Consequently, while the available indicators strongly support a phishing classification, the precise tactics, lure mechanisms, and target brand remain uncertain.

Defenders should prioritize immediate blocking of the domain at network perimeter and DNS filtering layers, incorporate the indicator into internal threat‑intel feeds, and continue monitoring for related Vercel‑hosted assets or sibling subdomains. Ongoing re‑scanning with multi‑engine services is recommended to capture any changes in detection status or payload. Organizations handling credentials for popular online services should remain vigilant for credential‑harvesting attempts that may reference this domain, even though current evidence does not disclose a specific brand impersonated.