airbnb-clone-lime[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation threat specifically targeting Airbnb. The infrastructure mimics legitimate Airbnb properties, including an identical page title, to deceive users into disclosing personal or financial information. Analysis indicates this is not a generic phishing attempt but a targeted impersonation of Airbnb’s branding and user interface, increasing the likelihood of successful social engineering attacks. Infrastructure analysis reveals the following technical indicators: the domain airbnb-clone-lime.vercel.app was created on January 28, 2020, and is registered through Vercel Inc. It resolves to the IP address 216.198.79.67, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The domain is flagged by 20 out of 95 security vendors on VirusTotal, appears on one security blocklist, and is actively marked as phishing by Google Safe Browsing. The SSL certificate is issued by Google Trust Services (WR1), which may lend a false sense of legitimacy to unsuspecting users. Mitigation steps for this brand impersonation threat include immediate blocking of the domain and its associated IP address (216.198.79.67) at the network perimeter. Organizations should update endpoint protection rules to detect and prevent access to the domain. Users who may have interacted with the site should be advised to reset their Airbnb credentials from a verified device and enable multi-factor authentication. Security teams should monitor for unusual login attempts or financial transactions originating from accounts that may have engaged with this domain. Given the domain’s age and persistent activity, continuous monitoring for related infrastructure or similar impersonation attempts is recommended.