airbnb-clone-theta-nine[.]vercel[.]app

The domain airbnb-clone-theta-nine.vercel.app has been identified as a generic phishing threat impersonating the Airbnb brand. This phishing site attempts to deceive users into revealing sensitive information by mimicking the legitimate Airbnb login page. No specific drainer kit has been identified, but the page title confirms it is designed to look like Airbnb.

Technical analysis reveals that the domain was created on April 28, 2026, and is registered through Vercel Inc. It resolves to IP address 64.29.17.3 and uses an SSL certificate issued by Google Trust Services (WR1). VirusTotal flags this domain with 19 out of 95 security vendors marking it as malicious, and it appears on one security blocklist. Notably, the domain is not listed on Google Safe Browsing (GSB), which means it may evade some browser warnings.

As of the latest check, this phishing site remains active and operational. PhishDestroy recommends that users avoid visiting the domain and never enter credentials or personal information on such pages. If you have already interacted with this site, change your Airbnb password immediately and monitor your accounts for suspicious activity. The risk level is assessed as high due to the active status, high VT detection rate, and the popularity of the targeted brand.