amazon-clone-red-seven[.]vercel[.]app

This domain, amazon-clone-red-seven.vercel.app, is flagged as an active brand impersonation threat targeting Amazon users. Analysis indicates the site replicates Amazon's login interface to harvest credentials, payment details, and personal data. The threat type is classified as brand impersonation with a high-risk level due to its operational status and direct targeting of a major e-commerce platform. Infrastructure analysis reveals concrete technical indicators: the domain resolves to IP 216.198.79.3 and is registered through Vercel Inc. with a creation date of March 02, 2026. Security vendors report a VirusTotal detection score of 21/95, while Google Safe Browsing currently lists it as active. The domain appears on one security blocklist and is blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services under the WR1 root, adding a layer of apparent legitimacy to the malicious infrastructure. Current status remains active, posing an ongoing risk to users who may mistake it for the legitimate Amazon platform. Response actions should include immediate takedown requests to the hosting provider and registrar, along with updated blocklist entries for security solutions. Despite existing detections, the domain's continued operation and SSL certificate suggest persistent evasion tactics. Users are advised to verify domain authenticity before entering credentials, while security teams should monitor for similar patterns under the Vercel hosting infrastructure.