aaron-rent-4g2nbrsdt-aaronmurillo01[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation threat specifically targeting Airbnb. Analysis indicates the infrastructure is designed to deceive users into believing they are interacting with the legitimate Airbnb platform, leveraging identical page titles and visual elements to facilitate credential harvesting or fraudulent transactions. The threat type, brand_impersonation, is particularly insidious due to its reliance on trusted brand recognition to lower user defenses and increase the likelihood of successful exploitation. Infrastructure analysis reveals the domain was registered through Vercel on May 09, 2026, and currently resolves to the IP address 216.198.79.3, associated with Lefkoff Industries in the United States. The SSL certificate is issued by Google Trust Services under the identifier WR1, which, while providing encryption, does not validate the legitimacy of the site. The domain appears on one security blocklist and is flagged by 19 out of 95 security vendors on VirusTotal, indicating a broad consensus on its malicious nature. The page title mirrors that of Airbnb, further corroborating the intent to impersonate the brand. Mitigation steps for this specific threat type include immediate blacklisting of the domain and its associated IP address across all network security controls. Organizations should deploy indicators of compromise (IOCs) such as the domain, IP, and SSL certificate fingerprint into endpoint detection and response (EDR) systems, web proxies, and email security gateways. User awareness training should emphasize the risks of brand impersonation, particularly the verification of domain authenticity and SSL certificate details before entering sensitive information. Additionally, monitoring for similar domains registered through Vercel or other hosting providers with slight variations in naming conventions can help preemptively identify and neutralize emerging threats.