airbnb-us[.]com

This domain, airbnb-us.com, is flagged as an active credential theft operation targeting Airbnb users. Analysis indicates the site mimics legitimate Airbnb login portals to harvest usernames, passwords, and payment details. No cryptocurrency drainer kit signatures were detected, but the infrastructure aligns with known credential harvesting campaigns. The domain exhibits no legitimate association with Airbnb, Inc., and its design closely replicates the company’s official branding, increasing the likelihood of successful deception. Infrastructure analysis reveals the following technical indicators: the domain was registered on December 05, 2025, through Spaceship, Inc., and currently resolves to the IP address 188.114.96.3, hosted on Cloudflare’s network (AS13335). VirusTotal reports 13 out of 95 security vendors flagging the domain as malicious, while it appears on one additional security blocklist. The domain lacks an SSL certificate, a red flag for user security, and has not been listed on Google Safe Browsing (GSB) at the time of assessment. These indicators collectively suggest a deliberately obscured and high-risk infrastructure. The domain remains active as of this assessment, with no takedown or mitigation measures observed. Users are advised to avoid interaction with airbnb-us.com and report any suspicious login prompts to Airbnb’s official security channels. Organizations should update blocklists to include this domain and its resolving IP address. Despite Cloudflare’s hosting, the lack of SSL and the domain’s recent creation underscore the need for heightened vigilance, as credential theft campaigns often exploit trusted infrastructure to evade detection.