airbnb-clone-theta-ruddy[.]vercel[.]app

This domain, airbnb-clone-theta-ruddy.vercel.app, is identified as a high-risk phishing site actively impersonating Airbnb. The threat type is classified as generic phishing, with the primary objective of harvesting user credentials and financial information through counterfeit login and payment interfaces. As of the latest assessment, the domain remains operational and unmitigated. Analysis indicates the domain was registered through Vercel on June 08, 2026, and is currently flagged by 21 out of 95 security vendors on VirusTotal. It appears on one security blocklist, and Google Safe Browsing has explicitly marked it as a phishing threat. Infrastructure analysis reveals the domain leverages Vercel’s hosting platform, which is frequently abused for rapid deployment of fraudulent clones. No associated IP addresses or subdomains have been disclosed in public threat feeds, but the domain’s structure—using the term 'airbnb-clone'—strongly suggests intent to deceive users into believing it is an official Airbnb service. The domain’s current status is active, posing an immediate risk to users who may encounter it through phishing emails, social media links, or malvertising campaigns. Organizations and individuals are advised to block this domain at the DNS or proxy level and update endpoint protection rules to prevent access. Security teams should monitor for connections to this domain in network logs and investigate any associated user activity. Users who may have interacted with the site should reset credentials immediately and review financial statements for unauthorized transactions. Proactive threat hunting for similar patterns (e.g., '*-clone-*.vercel.app') is recommended to identify additional malicious infrastructure.