snapchat-login-clone[.]vercel[.]app

The domain snapchat-login-clone.vercel.app is currently classified as a high‑risk credential phishing site targeting Snapchat users. The site returned HTTP 200 on the day of analysis (2026‑07‑12) and remains active. Its page title is reported as “Snapchat”, confirming the intended brand context.

Infrastructure analysis shows the domain resolves to IP 64.29.17.3, hosted on the Amazon.com, Inc. network (AS16509) and physically located in the United States. The domain was registered on 2026‑02‑21 through Tucows Domains Inc., indicating a recent registration timeline. TLS is provided by a Google Trust Services certificate issued to “WR1”, and the site employs HSTS.

Detection platforms have flagged the domain extensively. VirusTotal recorded 20 of 95 security vendors as malicious, and the URL appears on two public blocklists (PhishDestroy and PhishingDB). Gridinsoft assigned a trust score of 0 / 100, reinforcing the malicious assessment. The underlying hosting platform is identified as Vercel.

Publicly available intelligence does not include a detailed content snapshot beyond the page title, so the exact login flow and data capture mechanisms remain unverified. Continuous monitoring is required to detect any changes to the payload or redirection behavior that could affect mitigation strategies.

Defenders should enforce network‑level blocking of both the domain and its resolved IP address, add the host to threat‑intel feeds, and monitor for related subdomains hosted on the same Vercel account. End‑users should be reminded to verify URLs before entering Snapchat credentials and to report any suspicious login prompts to the official channel.