amazon-clone-ten-rust[.]vercel[.]app

This domain, amazon-clone-ten-rust.vercel.app, is actively engaged in brand impersonation targeting Amazon, a major e-commerce platform. The site replicates the official Amazon.in interface, as evidenced by its page title, 'Online Shopping site in India: Shop Online for Mobiles, Books, Watches, Shoes and More - Amazon.in,' and is designed to deceive users into believing they are interacting with a legitimate Amazon property. Analysis confirms the domain remains operational and poses a high-risk threat to unsuspecting visitors. Infrastructure analysis reveals multiple indicators of malicious intent. The domain was registered on January 28, 2020, through Tucows Domains Inc. and currently resolves to the IP address 64.29.17.3, hosted under AS16509 (Amazon.com, Inc.) in the United States. Security vendors have flagged the domain, with 19 out of 95 VirusTotal engines identifying it as malicious. Additionally, the domain appears on two security blocklists, including PhishDestroy and PhishingDB. The SSL certificate is issued by Google Trust Services (WR1), which, while legitimate, does not mitigate the domain's fraudulent nature. The domain remains active and continues to present a credible facade of Amazon's official site. Users are strongly advised to avoid interaction with this domain to prevent potential credential theft or financial fraud. Organizations should update their security blocklists to include this domain and its associated IP address. Network administrators are recommended to monitor for connections to 64.29.17.3 and implement DNS-based blocking measures. Verification of any communications or transactions originating from this domain is critical to mitigating risk.