Security Scan: Airbnb

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/76011aa0-e8aa-493c-971e-b438fea1be82 Domain and IP registration (RDAP)/api/v1/rdap/76011aa0-e8aa-493c-971e-b438fea1be82How often this domain was scanned/api/v1/domain/stats/airbnb-clone-a7mdmo74.vercel.app Scan history for this domain/api/v1/domain/history/airbnb-clone-a7mdmo74.vercel.app?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 31 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://www.airbnb-clone-a7mdmo74.vercel.app/

Effective URL:

https://airbnb-clone-a7mdmo74.vercel.app/

Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

Risk Score

Airbnb-branded demo clone on a free vercel.app subdomain that self-discloses it is not a real site. No forms, no credential or payment capture, no Indicators of Compromise or malware — brand misuse only, so moderate risk.

Risk Factors (4)

Use of another entity's brand (Airbnb) on a domain that is not Airbnb's official domain

Hosted on a free shared-hosting namespace (.vercel.app) where subdomains can be created anonymously at any time

Unranked domain (not in Cisco Umbrella top 1M) with no verifiable ownership

Medium IDS alerts noting vercel.app as a commonly abused cloud hosting service (generic abuse reputation, not page-specific malware)

Safety Factors (6)

No credential, login, email or payment fields — nothing is harvested from visitors

No cross-origin form submissions and no credential exfiltration detected

Page openly discloses that it is a clone and not a real site, rather than passing itself off as the official service

No threat-intelligence, hunting rule, native-hunting rule or known-kit matches against the page or its resources

Content matches an ordinary Next.js demo build ('Generated by create next app') of a travel listing UI

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 4

Domain age information unavailable

Details

Page Title

Airbnb

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'www.airbnb-clone-a7mdmo74.vercel.app' is registered, featuring subdomain 'www.airbnb-clone-a7mdmo74'. The second-level label 'vercel' is 6 characters long containing two vowels alongside four consonants. Segmentation suggests two words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

a g 2 a @ € S ie] & a (sar your search Not sure where to go? Perfect. I'm Flexible ned ee Explore Nearby York Biyork Liverpool a Manchester Manche: & Liverpoc 4.5-hour drive 4.5-hour dr...

Page Load Overview

1.02s

Total Load Time

878 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:52%

Script:Latin

Direction:ltr

Detection Details

Text Length:701 chars

Detector Agreement:100%

Website Classification

Primary Category

travel tourism41% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

travel tourism

41%

real estate property

36%

adult content

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
7	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
7	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
7	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
31	4	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13D230EF09780AC57A827A94AF145C7CCD00E1559FBC9A7E9F288CE8427DF4FB1D106A6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:uAXi9nAc0uS66KAc0uS66tPC3YNMMIw9hpHzLLK9hpHzLLM3RSgp91j/XnWp91j5:3Ti5t

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:48046:gyGd6YRwoOAKfIQEhFQADAAhUAAAKQzpQmWCMCQZnVABgAEYdYELwDCJJ0oABSYQGkGAYoSgAyVLOsIJwULAdagICQytGBkg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff003c3c3c18dfff

Perceptual Hash:9a63e51ce6c0c1e7

Difference Hash:c439f9e971b1b108

Wavelet Hash:ff003c3c1c181cff

Color Hash:N/A

Other Hashes

Crop Resistant:c439f9e971b1b108,8940cc0a4c88e884,6666981edafc308e,7d39f9e9e971b1b0

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: www.airbnb-clone-a7mdmo74.vercel.app