amazon-clone-jet-eight-44[.]vercel[.]app

This domain, amazon-clone-jet-eight-44.vercel.app, is currently engaged in brand impersonation targeting Amazon, a major e-commerce platform. The threat type is specifically credential theft through fraudulent login portals designed to mimic legitimate Amazon authentication pages. As of the latest assessment, the domain remains active and continues to host malicious content intended to deceive users into disclosing sensitive account information. Analysis indicates the domain is registered through Vercel Inc. and resolves to the IP address 216.198.79.3, geolocated within the United States under the autonomous system AS16509, associated with Amazon.com, Inc. The page title displayed is 'Amazon,' reinforcing the impersonation tactic. Security vendors have flagged this domain on VirusTotal, with 22 of 95 engines detecting malicious activity. Additionally, the domain appears on two distinct security blocklists, including PhishDestroy and PhishingDB. Google Safe Browsing has also classified the site as phishing. The SSL certificate is issued by Google Trust Services, identified by the serial number WR1, which does not mitigate the inherent risk posed by the domain. The current status of amazon-clone-jet-eight-44.vercel.app remains active, with no evidence of takedown or remediation efforts. Organizations and end-users are advised to implement immediate countermeasures, including blocking the domain and IP address at the network perimeter. Security teams should update detection rules to include this domain in threat intelligence feeds and monitor for related indicators of compromise. Users who may have interacted with the site should be instructed to reset credentials on legitimate Amazon platforms and enable multi-factor authentication to prevent unauthorized account access. Proactive monitoring of similar domains registered through Vercel Inc. is recommended to identify and mitigate emerging threats.