amazon-clone-nine[.]vercel[.]app

This domain, amazon-clone-nine.vercel.app, is flagged as a high-risk brand impersonation threat specifically targeting Amazon. Analysis indicates the site mimics Amazon's branding and interface to deceive users into entering sensitive credentials or financial information. The page title, 'Create Next App,' suggests the use of Next.js framework, commonly exploited for rapid deployment of fraudulent sites. No crypto drainer kit signatures were detected, but the domain's structure and hosting align with credential theft campaigns. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP 216.198.79.67, hosted on Amazon.com, Inc.'s AS16509 network in the United States. It was registered through Vercel Inc. on March 02, 2026, though this date may reflect a falsified or manipulated registration record. The SSL certificate is issued by Google Trust Services (WR1), providing a false sense of legitimacy. VirusTotal reports 19 out of 95 security vendors flagging the domain as malicious, while only one security blocklist currently includes it. The domain remains unlisted in Google Safe Browsing databases, indicating limited detection coverage. Current status shows the domain remains active and operational, posing an ongoing risk to users. Response actions by security vendors appear limited, with only a single blocklist (PhishDestroy) currently mitigating exposure. The remaining risk is classified as high due to the domain's active status, low detection rate, and direct targeting of a major e-commerce brand. Users are advised to avoid interaction with the domain, verify website authenticity through official channels, and employ browser-based security extensions or enterprise-grade web filtering to block access. Organizations should monitor for connections to 216.198.79.67 and AS16509 in network logs, as these may indicate compromised endpoints.