airbnb-dev[.]vercel[.]app

airbnb-dev.vercel.app is a tenant hostname on Vercel, not a separately registered domain. PhishDestroy first observed the hostname on Jan 4, 2026. The hostname explicitly references Airbnb; stored content metadata identifies the same apparent target. The captured page title is “AirBnb”. Stored page analysis classifies the content as brand impersonation. Current evidence score: 100/100 (critical).

Positive findings are stored from 5 sources: VirusTotal, DNS security resolvers, Cloudflare Radar, URLQuery, and URLScan. VirusTotal recorded 19 detections among 91 engines: ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, Cluster25, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, LevelBlue, Lionic, Netcraft, Phishing Database, Sophos, VIPRE, Webroot on Jul 27, 2026 at 02:31 UTC. DNS security checks returned 7 blocking results across 14 tested policies: Adguard Default, Adguard Family, Cloudflare Family, Cloudflare Security, Control D Adblock, Control D Family, Control D Malware; no observation timestamp was retained. Cloudflare Radar classified the hostname as malicious and assigned the categories security threats and phishing; its verdict timestamp was not retained. URLQuery recorded 100 detections; no observation timestamp was retained. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Airbnb and assigned phishing as its category on Jul 29, 2026 at 02:55 UTC. Non-positive and contextual checks: ScamAdviser assigned a trust score of 1/100 (Very Likely Unsafe); no observation timestamp was retained. The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Mar 2, 2026 at 20:20 UTC. PhishStats returned no feed match on Mar 1, 2026 at 11:06 UTC.

HTTP 200 was recorded on Aug 8, 2026 at 10:00 UTC. Vercel is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 64.29.17.131 on AS16509 (AMAZON-02, US). The IP and ASN identify shared Vercel infrastructure, not the tenant operator. DOM analysis on Mar 11, 2026 at 09:20 UTC returned 93/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. The platform TLS certificate was issued by WR1 with validity through May 27, 2026; checked Mar 12, 2026 at 07:31 UTC.

The content indicators and 5 positive source findings support the current Airbnb-themed brand impersonation classification.