airbnb-clone-2-sigma[.]vercel[.]app

This domain, airbnb-clone-2-sigma.vercel.app, is actively flagged as a high-risk phishing site impersonating Airbnb. Infrastructure analysis reveals the domain was registered on February 20, 2026, and is hosted on Vercel’s platform, resolving to the IP address 216.198.79.67. The site’s page title explicitly displays 'Airbnb,' aligning with the confirmed brand impersonation targeting the company. Detection by 14 out of 95 security vendors on VirusTotal further corroborates its malicious classification, while inclusion on a security blocklist and a Gridinsoft trust score of 0/100 reinforce the threat assessment. The domain is linked to an 'Airdrop Scam' phishing kit, a specific threat type designed to deceive users into engaging with fraudulent offers. The use of Google Trust Services for SSL certification does not mitigate the risk, as legitimate certificates are commonly exploited by threat actors to lend credibility to malicious sites. The presence of HTTP Strict Transport Security (HSTS) suggests an attempt to appear secure, though this header is often spoofed in phishing campaigns to evade detection. Defenders should prioritize blocking this domain across all security controls, including web gateways, email filters, and endpoint protection systems. The domain’s registration under Vercel Inc. and its continued activity as of July 12, 2026, indicate an ongoing threat. While the exact content and user interaction flow remain unanalyzed, the combination of brand impersonation, phishing kit association, and low trust scores from multiple sources confirms its malicious intent. Organizations should monitor for related domains or subdomains leveraging similar naming conventions or infrastructure patterns, as these may indicate further attempts at brand abuse.