amazon-clone-neon-ten-70[.]vercel[.]app

Analysis of the domain amazon-clone-neon-ten-70.vercel.app indicates a confirmed phishing operation targeting Amazon users. The domain was registered on March 02, 2026, through Vercel Inc. infrastructure and remains active as of July 12, 2026. The page title explicitly displays 'Amazon,' aligning with the reported brand impersonation threat type. Technical indicators reveal the domain resolves to IP address 216.198.79.67 and employs an SSL certificate issued by Google Trust Services, with HSTS enabled. Security vendor assessments further corroborate malicious intent: Scamadviser assigned a trust score of 1/100, while Gridinsoft rated it 0/100. Google Safe Browsing explicitly flags the domain under the 'SOCIAL_ENGINEERING' category. At least one security blocklist has included this domain, and it is currently blocked by PhishDestroy. While 20 out of 95 security vendors on VirusTotal detect the domain as malicious, the exact nature of the phishing content remains unverified due to the absence of direct page analysis. Defenders should treat this domain as high-risk and implement immediate blocking measures. The use of Vercel hosting infrastructure is consistent with observed patterns in brand impersonation campaigns, where legitimate cloud platforms are exploited to evade initial reputation-based filters. No evidence suggests compromise of legitimate Amazon services or infrastructure. Further investigation into associated IP ranges and certificate reuse may uncover additional related domains.