amazon-clone-inceptioncodes[.]vercel[.]app

amazon-clone-inceptioncodes.vercel.app is assessed as a high-risk brand impersonation threat targeting Amazon. The infrastructure hosts a cloned login interface labeled "Amazon Clone", indicating a credential harvesting campaign designed to deceive users into submitting authentication data. The domain is currently active, increasing exposure to end users who may encounter it via phishing links or redirect chains.

Technical indicators show the domain resolves to IP 198.18.2.56 and is hosted under AS16509 Amazon.com, Inc. infrastructure attribution at the network layer, while registration and deployment are through Vercel Inc. SSL certificate is issued by Google Trust Services / WR1. The domain is flagged by 20 of 95 VirusTotal security vendors, appears on 2 security blocklists (PhishDestroy and PhishingDB), and is additionally flagged by Google Safe Browsing as phishing. Creation date and trust score metrics were not provided in the dataset.

The domain remains active, indicating ongoing phishing campaign risk. Recommended mitigations include immediate DNS and HTTP-level blocking, brand keyword filtering for "Amazon Clone" impersonation patterns, and monitoring of Vercel-hosted subdomains for similar credential harvesting pages. Security teams should implement URL reputation checks, enforce MFA on affected accounts, and alert users against entering credentials on non-official login pages. Continuous threat intelligence sharing and takedown requests are advised to reduce exposure and prevent account compromise.