airbnbclone-jrg8daobo-yusef-mohamed[.]vercel[.]app

This domain, airbnbclone-jrg8daobo-yusef-mohamed.vercel.app, is flagged as a high-risk phishing site specifically targeting the Airbnb brand. Analysis indicates the page mimics Airbnb’s official interface, likely designed to harvest user credentials, payment details, or personal information through fraudulent login or booking forms. No direct evidence of a drainer kit (e.g., Angel Drainer, Inferno) was identified in initial scans, but the site’s structure aligns with common phishing templates used for credential theft. Infrastructure analysis reveals the following technical indicators: the domain is registered through Vercel Inc. and resolves to IP address 64.29.17.131, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The SSL certificate is issued by Google Trust Services (WR1), a legitimate provider, which does not mitigate the malicious intent. VirusTotal reports 18 out of 95 security vendors detecting the domain as malicious, while it appears on one security blocklist and is actively blocked by PhishDestroy. The page title explicitly replicates Airbnb’s branding, further confirming the impersonation attempt. As of the latest assessment, the domain remains active and continues to pose a significant threat to users. No takedown actions have been confirmed, and the site’s hosting provider has not yet intervened. Users are strongly advised to avoid interacting with the domain, and organizations should update their blocklists to include this URL. Given the high detection rate and active status, the remaining risk is substantial, particularly for individuals unfamiliar with phishing tactics or those accessing the site via unsolicited links.