ibm-clone-website[.]vercel[.]app

This domain, ibm-clone-website.vercel.app, poses a high-risk threat as an active Amazon brand impersonation site designed to harvest user credentials. The page mimics Amazon.in’s official interface, displaying the identical title 'Online Shopping site in India: Shop Online for Mobiles, Books, Watches, Shoes and More - Amazon.in.' Visitors are likely presented with fraudulent login forms or checkout pages that capture entered credentials, payment details, or personal information, which are then transmitted to threat actors for unauthorized access or financial fraud. Analysis indicates this infrastructure is deliberately crafted to deceive users. The domain was registered through Tucows Domains Inc. on February 21, 2026, though its creation date suggests possible backdating or administrative error, as it predates the current year. It resolves to IP address 64.29.17.195, hosted on Amazon.com, Inc.’s AS16509 network in the United States. The site is flagged by 21 out of 95 security vendors on VirusTotal and appears on two security blocklists, including PhishDestroy and PhishingDB. Google Safe Browsing also classifies it as phishing. The SSL certificate is issued by Google Trust Services, providing a false sense of security to visitors. If you have visited ibm-clone-website.vercel.app or entered any information on the site, immediate action is required. Disconnect the device from the network to prevent further data transmission. Run a full antivirus scan to detect and remove any malware. Change passwords for Amazon and any other accounts where the same credentials were used, enabling multi-factor authentication where available. Monitor financial statements and credit reports for unauthorized transactions. Report the incident to your organization’s security team or a trusted cybersecurity professional for further investigation and remediation.