aibnb-1[.]com

This domain, aibnb-1.com, is currently active and flagged as an Airbnb brand impersonation credential theft site. The page title 'AI-BNB' and domain structure closely resemble the legitimate Airbnb platform, targeting users through deceptive branding to harvest login credentials or financial information. The domain remains operational, with no takedown actions observed as of the latest verification. Analysis indicates the domain was registered on February 19, 2026, through Hello Internet Corp. It resolves to the IP address 172.67.209.208, hosted on infrastructure belonging to AS13335 Cloudflare, Inc., located in the United States. The SSL certificate is issued by Let's Encrypt (serial number E8), a common choice for both legitimate and malicious sites. Despite its active status, the domain has not been flagged by any of the 95 vendors on VirusTotal, though it appears on one security blocklist. The use of Cloudflare hosting is notable, as it provides anonymity and resilience against takedowns, complicating mitigation efforts. The current risk assessment places this domain under investigation due to its active status and potential for credential theft. Users are advised to avoid interacting with aibnb-1.com and to verify the authenticity of any Airbnb-related communications through official channels. Organizations should update their blocklists to include this domain and its associated IP address. Monitoring for further detections on VirusTotal or additional blocklist entries is recommended, as this may indicate evolving threat activity. If encountered, users should report the domain to their security teams or relevant authorities for further analysis and potential takedown.