amazon-ashen-five[.]vercel[.]app

This domain is flagged as a high-risk fake Amazon checkout phishing site, designed to deceive users into submitting sensitive credentials under the guise of legitimate e-commerce activity. Analysis indicates the domain employs exact Amazon branding, including the official tagline 'Spend less. Smile more,' to enhance credibility and lower user suspicion during the attack sequence. Infrastructure analysis reveals the domain amazon-ashen-five.vercel.app resolves to IP address 216.198.79.67, geolocated to a US-based provider. It was registered through Vercel Inc. on May 08, 2026, an anomalous future date suggesting domain spoofing or registry manipulation. The domain is currently active and appears on one security blocklist, with 17 out of 95 security vendors on VirusTotal flagging it as malicious. The SSL certificate is issued by Google Trust Services under the identifier WR1, which may provide a false sense of security to end users. Mitigation requires immediate action from network security teams. Block the domain at DNS and web proxy levels, and add the IP 216.198.79.67 to firewall deny lists. Security awareness programs should alert users to verify URLs before entering credentials, especially on domains hosted via third-party platforms like Vercel. Incident response teams should monitor for credential theft attempts linked to this campaign and reset any exposed accounts. Network logs should be reviewed for connections to the domain or IP to assess potential compromise.