amazon-clone-sable-nu[.]vercel[.]app

This domain, amazon-clone-sable-nu.vercel.app, is actively flagged as a high-risk brand impersonation site targeting Amazon users. Registered on September 1, 2025, through Vercel Inc., the domain resolves to IP 64.29.17.3 and presents a page title of 'amazon.com,' directly mimicking the legitimate Amazon brand. Analysis indicates the site is hosted on Vercel infrastructure and employs HSTS, a security feature that may complicate user warnings but does not mitigate the underlying threat. The domain is currently listed on two security blocklists (PhishDestroy and PhishingDB) and is flagged by Google Safe Browsing for SOCIAL_ENGINEERING. Of 95 security vendors on VirusTotal, 22 detect this domain as malicious, reinforcing its classification as active phishing infrastructure. Trust scores from Scamadviser and Gridinsoft are 1/100 and 0/100, respectively, further confirming its fraudulent nature. Defenders should treat this domain as confirmed malicious and prioritize blocking or sinkholing it. The exact phishing kit or payload delivery mechanism remains unconfirmed, as no additional technical artifacts (e.g., JavaScript frameworks, redirect chains) have been analyzed. Given the domain's persistence and brand alignment, users encountering it should assume credential theft or financial fraud intent. No evidence suggests takedown efforts have succeeded as of July 12, 2026.