amazon-clone-psi-eight[.]vercel[.]app

This domain is classified as a high-risk phishing site targeting user credentials under the guise of an Amazon login portal. Analysis indicates a deliberate attempt to harvest sensitive account information through fraudulent page replication, leveraging brand impersonation to deceive victims. Infrastructure analysis reveals the domain amazon-clone-psi-eight.vercel.app was registered on April 04, 2026, through Vercel Inc. hosting services. It resolves to IP address 216.198.79.3, geolocated in the United States under Lefkoff Industries. The SSL certificate is issued by Google Trust Services (WR1), and the domain appears on one security blocklist, specifically PhishDestroy. Google Safe Browsing has flagged it as phishing, while VirusTotal reports 25 out of 95 security vendors detecting malicious activity associated with this domain. Mitigation requires immediate blocking of the domain and its resolving IP (216.198.79.3) at the network perimeter. Security teams should deploy indicators of compromise (IOCs) to endpoint detection systems, including the domain, IP, and SSL certificate issuer details. Users who may have interacted with the site should be instructed to reset Amazon credentials from a trusted device and enable multi-factor authentication. Monitoring for subsequent login attempts from unusual geolocations or devices is recommended to identify potential account compromise.