amazon-clone-zeta-bice[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation threat specifically targeting Amazon. Analysis indicates the site is designed to deceive users into believing they are interacting with the legitimate Amazon platform, likely for credential theft or fraudulent transactions. The domain exhibits multiple indicators of malicious intent, aligning with known patterns of brand abuse in phishing campaigns. Infrastructure analysis reveals the following concrete evidence: the domain resolves to IP address 216.198.79.3, hosted under AS16509 (Amazon.com, Inc.) in the United States. It is registered through Vercel Inc. and currently remains active. Security vendors on VirusTotal flag the domain at 18/95, while Google Safe Browsing explicitly classifies it as phishing. The domain appears on two security blocklists, including PhishDestroy and PhishingDB. The SSL certificate is issued by Google Trust Services (WR1), and the page title explicitly reads Amazon Clone, further confirming its impersonation purpose. Mitigation steps for this brand impersonation threat include immediate blocking of the domain and its associated IP address across all network security layers. Organizations should update endpoint protection rules to detect and prevent access to this domain. Users should be educated on recognizing brand impersonation tactics, particularly those mimicking Amazon, including verifying SSL certificates, checking domain names for subtle misspellings, and scrutinizing page titles. Security teams are advised to monitor for similar domains registered through Vercel or other hosting providers, as these may indicate broader campaign activity targeting the same brand.