amazon-clone-azure-pi[.]vercel[.]app

Analysis indicates that the domain amazon-clone-azure-pi.vercel.app is actively serving content under the page title “Amazon”. The domain was registered on April 16, 2026 through Vercel Inc. and resolves to the IP address 216.198.79.195, which is geolocated to the United States and belongs to Vercel’s hosting infrastructure. The site presents a TLS certificate identified as “WR1” and enforces HTTP Strict Transport Security. An HTTP request returns status code 200, confirming that the web service is reachable. Automated scanning on VirusTotal recorded 24 detections out of 94 scanning engines, and Google Safe Browsing categorises the URL as a social‑engineering threat. The domain appears on a single public blocklist and has been added to the PhishDestroy blocklist. Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. Nameserver information could not be retrieved. While the page content has not been manually inspected, the combination of brand impersonation labeling, high‑risk rating, and multiple security vendor detections strongly suggests a credential‑harvesting operation targeting Amazon users. Defenders should block the domain at the network perimeter, update URL filtering rules, and monitor for related IP or Vercel host activity. Further investigation should include payload capture and any associated phishing communications that reference this URL.