t4[.]gotriphotel[.]com

This investigation identifies t4.gotriphotel.com as an elevated-risk phishing domain specifically impersonating Airbnb. The page title displayed "Airbnb" and the threat type is brand impersonation, indicating a likely attempt to steal login credentials or personal information from unsuspecting users. The domain is now offline, but its prior activity posed a real danger to Airbnb customers.

Technical indicators paint a clear picture of malicious intent. VirusTotal reports 18 out of 95 security vendors flagging this domain, and it appears on at least one security blocklist. The domain was registered on February 21, 2026, through GoDaddy.com, LLC, and resolves to IP address 154.29.152.34. No SSL certificate was present, further eroding any trust in its legitimacy. These data points collectively confirm the domain was set up specifically for phishing.

To stay safe, users should never enter credentials or personal data on pages accessed via unsolicited links, especially those claiming to be from Airbnb. Always verify the URL by navigating directly to the official Airbnb website. If you encounter a similar domain, report it immediately to PhishDestroy and to Airbnb's security team. Enable multi-factor authentication on your Airbnb account and monitor for unauthorized activity. Remember, legitimate companies rarely ask for sensitive information through third-party or suspicious domains.