amazon-clone-gray-omega[.]vercel[.]app

PhishDestroy identifies amazon-clone-gray-omega.vercel.app as a high-risk domain engaged in credential theft, masquerading as an Amazon clone. This generic phishing site attempts to deceive users into divulging login credentials, leveraging brand impersonation of Amazon to increase victim trust. No specific crypto drainer kit is detected, but the primary threat remains the theft of sensitive user credentials.

Technical analysis reveals that the domain is registered through Vercel Inc. and secured by an SSL certificate from Google Trust Services, which may lend it false legitimacy. VirusTotal reports 6 out of 95 security vendors flag this domain for malicious activity. The domain resolves to IP address 216.198.79.3. It shows an active status with no Google Safe Browsing (GSB) block mentioned, but the presence in multiple blocklists and an active state indicates ongoing risk. The domain's page title is simply "Document," which is often a tactic to evade detection by appearing generic.

Currently, amazon-clone-gray-omega.vercel.app remains active and continues to pose a significant threat to users, especially those attempting to access Amazon services. Immediate action should include blocking access to this domain at network and endpoint levels, updating phishing filters, and educating users about the risk of fake Amazon clones. Without mitigation, the risk of credential compromise remains high, facilitating potential account takeover and financial fraud.