amazonbydhruv[.]vercel[.]app

Analysis of amazonbydhruv.vercel.app (seed 14b685) shows a high‑risk brand‑impersonation site targeting Amazon customers. The domain was registered on 2026-03-02 through Vercel Inc. and resolves to IP 64.29.17.67, which belongs to ASN 16509 (Amazon.com, Inc.) in the United States. The web server presents a valid SSL certificate issued by Google Trust Services (WR1) and returns HTTP 200. Automated scans report the page title "Amazon", confirming the intended brand. Reputation services assign a Scamadviser trust score of 1/100 and a Gridinsoft score of 0/100, indicating extreme malicious confidence. The domain is listed on one security blocklist and is actively blocked by PhishDestroy. VirusTotal analysis shows 19 of 93 security vendors flag the domain as malicious. Detected technologies include Vercel hosting and HTTP Strict Transport Security (HSTS). Current evidence points to an e‑commerce fraud campaign, but the exact payload or credential‑harvest mechanism has not been publicly disclosed. Defenders should add the domain and its IP address to block lists, monitor DNS queries for the host, and enforce strict outbound filtering to prevent potential data exfiltration. Continuous re‑evaluation is recommended as further indicators may emerge.