# amazon-clone-plum-three.vercel.app — SUSPICIOUS

> amazon-clone-plum-three.vercel.app is an active generic phishing site posing risk with 1 security blocklist hit. Users should avoid sharing credentials.

## Summary
The domain amazon-clone-plum-three.vercel.app has been identified as a generic phishing threat. While it does not explicitly impersonate a specific brand, its naming convention suggests an attempt to mimic Amazon-related services, potentially to deceive users into divulging sensitive information. There is no direct evidence of a drainer kit in use, but the generic phishing classification implies credential harvesting or similar malicious activity.

Technical analysis reveals that amazon-clone-plum-three.vercel.app currently holds a VirusTotal detection score of 0 out of 95 engines, indicating it has not yet been flagged by major antivirus vendors. The domain resolves to the IP address 216.198.79.67 and uses an SSL certificate issued by Google Trust Services, which might lend false credibility to unsuspecting users. It is registered through Vercel Inc., a legitimate hosting provider. The domain appears on one security blocklist and is actively blocked by Phishunt, confirming some level of threat recognition by security communities.

As of now, the status of amazon-clone-plum-three.vercel.app remains active and the risk level is under investigation. Despite the lack of detections on VirusTotal, the presence on a blocklist and phishing-specific blocking services indicates potential danger. Users are strongly advised to refrain from interacting with this domain or submitting any personal or login credentials. Security teams should monitor this domain for further activity and consider proactive blocking measures, given its suspicious naming and partial threat confirmation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Vercel Inc.
- IP: 216.198.79.67

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["Phishunt"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/amazon-clone-plum-three.vercel.app
- PhishDestroy: https://phishdestroy.io/domain/amazon-clone-plum-three.vercel.app/
- LLM endpoint: https://phishdestroy.io/domain/amazon-clone-plum-three.vercel.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/amazon-clone-plum-three.vercel.app/
Last updated: 2026-04-04