airbnb-clone-theta-ten[.]vercel[.]app

This domain is classified as high-risk due to brand impersonation activity targeting YouTube. Analysis indicates the site mimics legitimate branding to deceive users into disclosing credentials or engaging with malicious content, a common tactic in credential theft campaigns.

Infrastructure analysis reveals the domain airbnb-clone-theta-ten.vercel.app was registered on February 21, 2026, through Tucows Domains Inc. It resolves to IP address 64.29.17.67, hosted on Amazon.com, Inc. (AS16509) infrastructure in the US. The SSL certificate is issued by Google Trust Services (WR1). Security vendors on VirusTotal flag the domain at 19/95 detections, while Google Safe Browsing categorizes it as phishing. The domain appears on one security blocklist and is actively blocked by PhishDestroy. The page title, "Airbnb," contradicts its impersonation of YouTube, further indicating malicious intent.

Mitigation steps for this brand impersonation threat include immediate blocking of the domain and its associated IP (64.29.17.67) at the network perimeter. Security teams should deploy indicators of compromise (IOCs) such as the domain, IP, and SSL certificate issuer into endpoint detection and response (EDR) systems. Users should be educated on recognizing brand impersonation tactics, particularly those mimicking YouTube, and encouraged to verify URLs before entering credentials. If credentials were entered, reset passwords immediately and enable multi-factor authentication (MFA) on all accounts.