hs4f7[.]gobookroom[.]com

Analysis of the domain hs4f7.gobookroom.com indicates it is a confirmed brand-impersonation scam targeting Airbnb users. The domain was registered on October 26, 2025, through GoDaddy.com, LLC, and currently resolves to the IP address 8.208.91.126, geolocated in Great Britain under AS45102 (Alibaba (US) Technology Co., Ltd.). Nameservers are hosted on money.dnspod.net and pollux.dnspod.net, a configuration often associated with malicious infrastructure. The site was flagged by 16 of 95 security vendors on VirusTotal, a detection rate consistent with phishing or fraudulent activity.

It appears on one security blocklist and is actively blocked by PhishDestroy. Gridinsoft assigns a trust score of 0/100, further corroborating its malicious classification. The domain lacks an SSL certificate, increasing the risk of credential interception or data exposure for visitors. The page title explicitly displays 'Airbnb,' aligning with the reported scam type of an e-commerce scam.

As of July 23, 2026, the domain is offline, though its infrastructure remains registered. The absence of SSL and the use of a hosting provider commonly leveraged for malicious campaigns suggest defenders should treat this domain as high-risk. Organizations are advised to block the domain and IP at the network level, monitor for related domains registered through the same registrar or nameserver providers, and alert users to the impersonation of Airbnb. The exact content and functionality of the site are not yet analyzed, but available evidence confirms its fraudulent intent.