airbnbwebsite-nine[.]vercel[.]app

PhishDestroy has identified airbnbwebsite-nine.vercel.app as a high-risk generic phishing domain specifically impersonating the Airbnb brand. This fraudulent site mimics the legitimate Airbnb platform to deceive users into divulging sensitive information or credentials. The page title, 'Airbnb | Holiday rentals, cabins, beach houses & more,' closely mirrors the official Airbnb homepage, furthering its deceptive appearance. No specific drainer kit has been identified, but the threat primarily involves credential theft through brand impersonation.

Technical analysis reveals that airbnbwebsite-nine.vercel.app has a VirusTotal score of 18 out of 95 security vendors flagging it as malicious. The domain was registered through Tucows Domains Inc. and resolves to IP address 64.29.17.67. It was created on February 21, 2026, and its SSL certificate is issued by Google Trust Services / WR1. The domain appears on one security blocklist and is not currently listed on Google Safe Browsing (GSB), indicating limited detection by mainstream browsers.

As of this report, the domain remains active and accessible, posing an ongoing risk to users. PhishDestroy recommends that users avoid interacting with this domain and report any suspicious emails or links to authorities. Organizations should update their security filters to block this domain and educate users about verifying URLs before entering credentials. Immediate takedown requests have been initiated, but vigilance is advised given the domain's continued availability.