airbnbclone-haris[.]vercel[.]app

This domain is flagged as a high-risk phishing infrastructure specifically designed to impersonate Airbnb’s authentication portal. Analysis indicates the site employs social engineering tactics to harvest user credentials, likely for account takeover or financial fraud. The threat type is classified as a generic phishing attack with a focus on brand impersonation, as evidenced by the page title "Airbnb" and the domain’s deceptive naming convention. Infrastructure analysis reveals the following technical indicators: The domain airbnbclone-haris.vercel.app is registered through Vercel and resolves to IP address 64.29.17.195, hosted under AS16509 (Amazon.com, Inc.) in the United States. It was created on March 12, 2026, though this date may reflect spoofed registration metadata. Security vendor detections on VirusTotal report 20/95 flags, while the domain appears on one security blocklist, specifically PhishDestroy. The SSL certificate is rated WR1, indicating weak or untrusted encryption standards. The site remains active as of the latest verification. Mitigation steps for this threat type include immediate blocking of the domain and its associated IP (64.29.17.195) at the network perimeter. Organizations should deploy indicators of compromise (IOCs) to endpoint detection systems and web gateways to prevent access. Users who may have interacted with the domain should be instructed to reset credentials for Airbnb and any accounts where password reuse occurred. Security teams are advised to monitor for follow-on attacks, such as phishing emails or SMS messages directing traffic to this domain, and to correlate logs for connections to the IP or domain within the last 30 days. Given the high-risk classification, incident response protocols should be initiated if any internal systems accessed the site.