adrianairbnb[.]netlify[.]app

This domain, adrianairbnb.netlify.app, is currently active and engaged in brand impersonation phishing targeting Airbnb. The page title explicitly displays 'Airbnb,' confirming the intent to deceive users into believing they are interacting with the legitimate platform. Analysis indicates the domain is designed to harvest credentials or facilitate fraudulent transactions under the guise of the targeted brand. Infrastructure analysis reveals the domain was created on May 09, 2018, and is registered through Netlify, a platform commonly used for hosting static websites. The domain resolves to the IP address 63.176.8.218, located in Germany under AS16509 (Amazon.com, Inc.). At the time of assessment, the domain appears on one security blocklist and is flagged by 19 of 95 security vendors on VirusTotal. The SSL certificate is issued by DigiCert Inc, specifically under the DigiCert Global G2 TLS RSA SHA256 2020 CA1 hierarchy, which does not mitigate the malicious nature of the domain. The domain remains active and poses a high risk to users due to its convincing impersonation of Airbnb. Organizations and individuals are advised to block access to this domain at the network level and update endpoint protection rules to include this indicator of compromise. Users who may have interacted with the domain should immediately reset credentials associated with Airbnb or any other sensitive accounts. Continuous monitoring for similar domains registered through the same platform is recommended to mitigate further risks.