airbnbs-clone[.]netlify[.]app

airbnbs-clone.netlify.app is currently listed as an active phishing‑hosting site. The domain is hosted on Netlify, as indicated by the registrar information, and resolves to the IPv4 address 35.157.26.135. Netlify‑provided infrastructure typically serves static content over HTTPS, but the available intelligence does not include a certificate fingerprint or TLS version, so the presence and quality of encryption cannot be confirmed. The domain is absent from DNS records for authoritative nameservers (NS_NOT_FOUND), which may indicate reliance on Netlify’s default DNS configuration.

Reputation services have flagged the site on two independent blocklists. PhishDestroy and OpenPhish have both added the domain to their phishing lists, and Google Safe Browsing classifies it under the “social engineering” category. VirusTotal reports that 14 of 91 scanned security vendors flag the domain as malicious, reinforcing the consensus that the site is being used for credential‑stealing or other fraudulent activity. No additional telemetry such as page title, SSL details, or HTTP response codes is available in the current dataset, leaving the exact content and lure technique unverified.

Consequently, analysts should treat the domain as a high‑risk indicator. Defensive actions include adding the domain to local and network‑level blocklists, updating intrusion‑prevention signatures that reference the observed IP address, and monitoring Netlify‑hosted subdomains for similar patterns. Continuous re‑scanning of the domain with sandbox and URL‑analysis tools is recommended to capture any changes in payload or hosting configuration. Organizations that employ email or web filtering should ensure that the domain is blocked across all enforcement points to prevent end‑user exposure.