Brand Impersonation Intelligence

Fake Amazon Websites

35 domains flagged by threat-intelligence feeds for impersonating Amazon. Most recent listing: May 29, 2026.

35
Flagged Domains
30
Avg Risk Score
May 29
Last Flagged

Domains Impersonating Amazon

35 shown
Domain Last Seen
amazon-clone-zeta-nine.vercel.app May 29 gooddybucket444.s3.eu-north-1.amazonaws.com May 26 ec2-100-24-254-151.compute-1.amazonaws.com May 20 ec2-13-216-97-34.compute-1.amazonaws.com May 17 amzn-gong.s3.us-east-2.amazonaws.com May 14 amazon-clone-seven-opal.vercel.app May 13 amazon-clone-gray-psi.vercel.app May 12 s3.eu-west-1.amazonaws.com May 11 amazon-clone-pink-five.vercel.app May 11 s3-external-2.amazonaws.com May 10 s3.dualstack.us-east-1.amazonaws.com May 10 amazon-clone-teal-three.vercel.app May 7 amazon-clone-snowy-seven.vercel.app May 6 amazon-clone-ruby-eight.vercel.app May 6 amazon.pl May 5 amazon-clone-red-seven.vercel.app May 5 amazon-clone-psi-eight.vercel.app May 4 amazon-clone-azure-pi.vercel.app May 4 amazonwebservices.security-unauthorised-request.com May 3 amazon-ui-clone-pi.vercel.app May 3 amazon-clone-sigma-seven.vercel.app May 3 amazonwebsitesami2025.netlify.app May 2 amazon-clone-gold-six.vercel.app May 2 gx65uixy9flqjxo.s3-website-us-east-1.amazonaws.com Apr 28 amazon-clone-frontend-ten.vercel.app Apr 28 amazon-cloned2025.netlify.app Apr 28 new-bucket-b3bd7e78.s3.dualstack.ap-southeast-2.amazonaws.com Apr 28 amazon-clone-by-gaurav-chauhan.vercel.app Apr 27 amazon-clone-amber-nine.vercel.app Apr 27 amazon-clone-blue-nu.vercel.app Apr 27 amazon-io.vercel.app Apr 27 amazonclone-steel-two.vercel.app Apr 23 amazon-clone-rho-nine.vercel.app Apr 23 pt-pba.s3.eu-north-1.amazonaws.com Feb 26 amazon-clone-beige-three.vercel.app Feb 26

How to spot a fake Amazon site

  • Check the domain against Amazon's official address. Look-alike domains add extra words, hyphens, or unusual extensions.
  • Never log in via a link from an email or text. Navigate to the official site directly.
  • Use a password manager — it will not autofill your Amazon credentials on a look-alike domain.

Frequently Asked Questions

How do I tell a real Amazon website from a fake one?

Always check the domain in the address bar against Amazon's official domain. Impersonation sites use look-alike domains (extra words, hyphens, or unusual extensions). Never enter your Amazon login or payment details on a site you reached from an email or text link — navigate to the official site directly instead.

I entered my Amazon details on one of these sites. What should I do?

Change your Amazon password immediately from a device you trust, and change it anywhere you reused it. Enable two-factor authentication. If you entered card or banking details, contact your bank to freeze or reissue the card, and watch your statements for unauthorized charges.

How are these domains identified as impersonating Amazon?

Each domain on this page was flagged by an upstream threat-intelligence source (URLhaus, OpenPhish, or PhishTank) and contains a Amazon brand reference in a non-official domain, or was reported by that feed as targeting Amazon. See our methodology page for full detail.

How do I report a fake Amazon website?

Report phishing sites to the Anti-Phishing Working Group at reportphishing@apwg.org, to Google Safe Browsing, and to Amazon's official abuse channel. You can also submit it on RecentScam using the Report button.

🔐Security Partner

Stop the next phishing attack before you click.

NordPass autofill only triggers on real domains. Fake login pages cannot trick it into entering your credentials.

Try NordPass →