airbnb-clone-cp4[.]vercel[.]app

airbnb-clone-cp4.vercel.app is currently active and returns HTTP 200. The site presents the title “Em frente a Praia - Exclusividade - Apartamentos para Alugar em Santos…”, which does not reference Airbnb but the domain is flagged as an Airbnb brand impersonation campaign. SSL is issued by Google Trust Services (WR1), indicating a legitimate TLS certificate. The domain is hosted on Vercel infrastructure and resolves to 216.198.79.67, an IP owned by Cypress Communications, LLC in the United States. It has been listed on one public blocklist and is actively blocked by PhishDestroy. VirusTotal analysis shows 17 of 91 scanners detecting malicious behavior. The intelligence does not include a detailed page‑level screenshot or login form capture, so the exact user‑facing content remains unknown. Defenders should add the domain to web‑filter and DNS sinkhole policies, monitor outbound connections to the IP address, and update IDS/IPS signatures to flag traffic to the host. Continuous re‑scanning is advised to capture any payload changes, and any attempted credential submission targeting Airbnb should be treated as compromise.