travel-planner-lw28fzgjt-devashisnaugain[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation threat targeting Aave, a decentralized finance protocol. The site mimics legitimate services by presenting an Airbnb-themed interface, likely to deceive users into divulging sensitive credentials or financial information under false pretenses. Analysis indicates the threat is active and specifically designed to exploit trust in the Aave brand, a common tactic in cryptocurrency-related fraud schemes. Infrastructure analysis reveals the domain travel-planner-lw28fzgjt-devashisnaug.vercel.app resolves to IP address 64.29.17.3 and is registered through Vercel Inc. It was created on June 03, 2026, and is currently active. The SSL certificate is issued by Google Trust Services (WR1). On VirusTotal, 17 out of 95 security vendors flag this domain as malicious. The domain appears on one security blocklist and is specifically blocked by PhishDestroy. The page title, Airbnb, further corroborates the deceptive intent, as it does not align with the impersonated brand, Aave. Mitigation steps for this type of threat include immediate domain takedown requests to the hosting provider, Vercel Inc., citing the high-risk impersonation of a financial protocol. Network-level blocking of the IP address 64.29.17.3 should be implemented to prevent access from internal systems. Organizations should also update their security blocklists to include this domain and monitor for any attempts to access it. End-user education should emphasize verifying domain authenticity, especially for financial or cryptocurrency-related services, and reporting suspicious domains to security teams for further analysis.