airbnb-clone-randilw[.]vercel[.]app

The domain airbnb-clone-randilw.vercel.app is assessed at a high risk level due to its active engagement in brand impersonation, specifically targeting YouTube. This poses a significant threat to users who may be misled into providing sensitive information or credentials, believing they are interacting with a legitimate YouTube service.

Analysis of the domain reveals that it has been flagged by 22 out of 95 security vendors on VirusTotal, indicating a notable level of suspicion among security professionals. The domain is registered through Tucows Domains Inc. and was created on February 21, 2026. It resolves to the IP address 64.29.17.3, which is located in the United States and is associated with the network of Amazon.com, Inc. (AS16509). The SSL certificate is issued by Google Trust Services, providing an additional layer of security that may be leveraged to gain user trust. Google Safe Browsing has flagged the domain as a phishing site, and it is currently listed on one security blocklist, PhishDestroy. The page title, 'Airbnb,' is incongruent with the brand target and may be a further indicator of the domain's malicious intent.

To mitigate the risk of brand impersonation, it is recommended that users avoid clicking on links or entering personal information on this domain. Security teams should consider implementing DNS-based blocking to prevent access to the domain within their networks. Additionally, regular security audits and user education on identifying phishing attempts can help reduce the likelihood of successful brand impersonation attacks.