amazon-clone-xi-eight[.]vercel[.]app

This domain, amazon-clone-xi-eight.vercel.app, is actively flagged as a high-risk brand impersonation site targeting Amazon. Analysis indicates the domain was registered on February 27, 2026, through Vercel Inc., and remains operational as of July 12, 2026. The page title, 'Your Souq is now Amazone!!', directly references Amazon's rebranding efforts in certain regions, suggesting an intent to deceive users familiar with the legitimate transition. Infrastructure analysis reveals the domain resolves to IP address 64.29.17.3 and employs an SSL certificate issued by Google Trust Services, a common tactic to appear legitimate. Technologies detected include Vercel hosting and HTTP Strict Transport Security (HSTS), which may be leveraged to enhance perceived credibility. Security vendors have flagged this domain, with 20 out of 95 engines in a recent scan identifying it as malicious. It is currently blocked by at least one security provider and appears on a security blocklist. Google Safe Browsing has classified the domain under 'SOCIAL_ENGINEERING', further corroborating its fraudulent nature. Trust scores from Gridinsoft and Scamadviser are 0/100 and 1/100, respectively, indicating negligible legitimacy. Defenders should prioritize this domain for immediate blocking at the network and endpoint levels. Given its active status and clear impersonation of a high-profile brand, it poses a significant risk for credential harvesting or financial fraud. While the exact content of the site has not been analyzed, the combination of infrastructure, registration details, and security vendor detections provides sufficient evidence to classify this as a confirmed threat. Monitoring for related domains or IPs associated with this infrastructure is recommended to preempt further campaigns.