airbnb-clone-farukipekcom[.]vercel[.]app

This domain, airbnb-clone-farukipekcom.vercel.app, is flagged for brand impersonation targeting both Airbnb and Argent, a cryptocurrency wallet provider. Analysis indicates the site mimics legitimate Airbnb branding while likely functioning as a credential theft or crypto drainer operation. The dual impersonation suggests an intent to exploit users familiar with either brand, increasing the likelihood of successful compromise through social engineering tactics. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 64.29.17.67, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. It was registered through Tucows Domains Inc. on February 21, 2026, though this creation date may reflect spoofed or manipulated registry data. Google Safe Browsing classifies the domain as phishing, and it appears on two security blocklists. VirusTotal detection shows 18 out of 95 security vendors flagging the domain as malicious, with SSL certification issued by Google Trust Services (WR1). The domain remains active as of the latest verification, posing an ongoing threat to users. Response actions should include immediate blocklisting at the network and endpoint levels, along with monitoring for related infrastructure reuse. The risk level is assessed as high due to the confirmed brand impersonation, active status, and multiple vendor detections. Users are advised to verify domain authenticity through official channels and avoid interacting with unsolicited links or prompts associated with this domain. Organizations should update detection rules to include this domain and its associated IP address in threat intelligence feeds.