amazon-clone-pi-nine[.]vercel[.]app

This domain, amazon-clone-pi-nine.vercel.app, is currently flagged as an active brand impersonation threat targeting Amazon. Analysis indicates the site replicates Amazon's branding and interface to deceive users into disclosing credentials or financial information. The domain remains operational as of the latest verification, posing a high risk to unsuspecting visitors seeking legitimate Amazon services. Infrastructure analysis reveals the domain resolves to the IP address 216.198.79.67, geolocated within the United States under AS16509, an autonomous system associated with Amazon.com, Inc. The SSL certificate is issued by Google Trust Services (WR1), a common provider for both legitimate and malicious domains. The domain is registered through Vercel Inc., a platform frequently exploited for hosting phishing pages due to its ease of deployment. Detection metrics show the domain is flagged by 23 of 95 security vendors on VirusTotal, with one confirmed entry on a security blocklist, specifically PhishDestroy. The page title, 'amazon,' further corroborates the intent to mimic the legitimate Amazon portal. Current status confirms the domain remains active, continuing to host the impersonation content. Users are advised to exercise extreme caution and avoid interaction with this domain. Organizations should update web filtering rules to block access to amazon-clone-pi-nine.vercel.app and monitor for similar patterns, such as Vercel-hosted subdomains impersonating major brands. Network administrators are recommended to review logs for connections to 216.198.79.67 and implement indicators of compromise (IOCs) for proactive threat mitigation. Affected individuals should immediately reset credentials associated with Amazon or other sensitive accounts accessed from potentially compromised devices.