amazon-clone-alpha-nine[.]vercel[.]app

PhishDestroy identifies the domain amazon-clone-alpha-nine.vercel.app as a high-risk generic phishing campaign impersonating Amazon. This domain employs social engineering tactics to deceive users into divulging sensitive information under the guise of a legitimate e-commerce platform. No specific drainer kit or brand impersonation kit was detected in this campaign, but the fraudulent domain structure and naming convention clearly target Amazon users.

This domain resolves to IP address 216.198.79.67 and is registered through Vercel Inc. via its hosting platform. VirusTotal analysis reveals a detection score of 23/95 security vendors, indicating widespread suspicion of malicious activity. Google Safe Browsing has formally flagged the domain with the SOCIAL_ENGINEERING classification, categorizing it as a deceptive site designed to trick users. The SSL certificate is issued by Google Trust Services, which does not validate the domain’s legitimacy but only secures its HTTPS connection. While the exact registration date is not provided, the active status and high detection rate suggest recent deployment.

The domain remains active and poses an ongoing threat to users who may encounter it through phishing emails, malicious ads, or typo-squatting tactics. PhishDestroy recommends blocking this domain at the network level and instructing users to verify URLs manually before entering credentials. Immediate takedown requests should be submitted to Vercel Inc. and Google Safe Browsing to mitigate further exposure. Despite these actions, residual risk remains due to the domain’s potential replication under different subdomains or hosting providers. Users are advised to report any encounters with this domain and avoid interaction entirely.