SafeMode - Analysis: www.amazon-clone-azure-pi.vercel.app

Visual Capture

Screenshot of www.amazon-clone-azure-pi.vercel.app

Detection Info

https://www.amazon-clone-azure-pi.vercel.app/

Detected Brand

Amazon

Country

USA

Confidence

100%

HTTP Status

200

Report ID

b01e4dc2-5ba…

Analyzed

2026-03-02 14:42

Final URL (after redirects)

https://amazon-clone-azure-pi.vercel.app/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1EC91EEB090927A3B01D383D2EF79AB9AB3D442D0FA47570502F4D3498AC9F1EED61C60
CONTENT ssdeep	96:T6NOzBJoFDOG2jV/3C5QdeQiD/jmdRqUS/JdhLLPLk+:WYBJoDGghD/JdhLjw+

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	8e19394edcd14e4e
VISUAL aHash	000b01ffb430ffff
VISUAL dHash	72dbddbc65656515
VISUAL wHash	000b01ff3030ffff
VISUAL colorHash	07207000000
VISUAL cropResistant	828262eaeae28282,dbdf99a465656555,62db1adbdbef9dde,d9e6766663697926,4c9736666d595932,6c5e5e5e7e7c7c78,7d6b5fe7e74f4dcc,3b0d040404149594,b3e7676e6e7e3e2d

Code Analysis

Risk Score 65/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Phishing
• Target: Amazon users
• Method: Impersonation through a look-alike website
• Exfil: Unspecified, likely credentials or payment details if the site was further developed.
• Indicators: Vercel hosting, Amazon logo.
• Risk: High

📊 Risk Score Breakdown

Total Risk Score

95/100

Contributing Factors

Free Hosting with Brand Logo

The use of free hosting combined with the Amazon logo is a strong indicator of a phishing attempt.

Domain Impersonation

The domain name closely resembles the real Amazon but is a clear imposter.

🔬 Comprehensive Threat Analysis

Threat Type

Banking Credential Harvester

Target

Amazon users (USA)

Attack Method

Brand impersonation

Exfiltration Channel

Form submission (backend endpoint not detected - likely JavaScript-based)

Risk Assessment

HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: Banking, Personal Info

🏢 Brand Impersonation Analysis

Impersonated Brand

Amazon

Official Website

https://www.amazon.com

Fake Service

Amazon's retail platform.

⚔️ Attack Methodology

Primary Method: Credential Harvesting

The attacker likely intends to trick users into entering their Amazon login credentials on a fake login page that mimics the real Amazon site. This allows the attacker to steal the victim's account.