amazon-clone-umber-three[.]vercel[.]app

This domain, amazon-clone-umber-three.vercel.app, is flagged as a high-risk brand impersonation threat targeting Amazon. The domain was created on March 02, 2026, and has been identified as active and operational as of July 12, 2026. Analysis indicates that the domain is currently being used to impersonate Amazon, leveraging social engineering tactics to deceive users. The page title of the site is 'Amazon,' which further contributes to the confusion and potential risk for unsuspecting visitors. The domain is registered through Vercel Inc. and resolves to the IP address 64.29.17.195. It also employs an SSL certificate from Google Trust Services and implements HSTS, which may give a false sense of security to users. Despite these security features, the domain is flagged by Google Safe Browsing for social engineering, and it appears on one security blocklist, specifically PhishDestroy. Additionally, the domain has a very low trust score of 0/100 from Gridinsoft and 1/100 from Scamadviser, indicating a high level of suspicion and risk. Defenders should be aware that the exact content of the site has not been fully analyzed, but the available evidence strongly suggests that the domain is part of a sophisticated brand impersonation campaign. Security teams are advised to block this domain and educate users on the risks of visiting untrusted sites that claim to be Amazon. Regular monitoring and updates to blocklists are recommended to ensure ongoing protection against this threat.