projectamazonpr1[.]vercel[.]app

projectamazonpr1.vercel.app is a tenant hostname on Vercel, not a separately registered domain. PhishDestroy first recorded this hostname on Feb 27, 2026. The hostname explicitly references Amazon; stored content metadata identifies the same apparent target. Content analysis also recorded brand signals for Celer, Facebook, and Instagram. The stored content classification is e commerce scam. The assembled evidence scores 100/100 (critical).

Four independent sources are positive: VirusTotal, Cloudflare Radar, URLQuery, and URLScan. VirusTotal recorded 22 detections among 91 engines: ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, Certego, Chong Lua Dao, CyRadar, Ermes, ESET, Emsisoft, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, LevelBlue, Lionic, Netcraft, SafeToOpen, Sophos on Jul 27, 2026 at 02:33 UTC. Cloudflare Radar classified the hostname as malicious and assigned the categories security threats and phishing; its verdict timestamp was not retained. URLQuery recorded 3 threat-system alerts on Apr 30, 2026 at 14:21 UTC. URLScan returned a malicious verdict with score 100. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 18:20 UTC. Google Safe Browsing returned no flag on Mar 2, 2026 at 20:48 UTC. PhishStats returned no feed match on Mar 1, 2026 at 02:41 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 10:02 UTC. Vercel is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 64.29.17.67 on AS16509 (Amazon.com, Inc.). The associated network metadata labels the endpoint as AS16509 Amazon.com, Inc. in Walnut, US. This is shared platform infrastructure; the IP and ASN are hosting context, not attribution to unrelated tenants. The stored server header is Vercel. Captured page title: “Amazon”. DOM analysis completed on Mar 23, 2026 at 23:11 UTC; stored DOM score 93/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. IoC extraction completed on Jul 29, 2026 at 02:27 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. The platform TLS certificate was issued by Google Trust Services with validity through May 27, 2026; checked Mar 15, 2026 at 05:50 UTC.

Taken together, the page content and independent findings support classifying this hostname as Amazon-themed e commerce scam.