itxs2[.]gobookroom[.]com

This domain, itxs2.gobookroom.com, poses a significant threat as a brand impersonation scam targeting Airbnb users. The site is designed to deceive visitors into believing they are interacting with a legitimate Airbnb service, potentially leading to the theft of personal information, financial data, and account credentials.

Analysis indicates that the domain was created on October 26, 2025, and is registered through GoDaddy.com, LLC. It has been flagged by 17 out of 95 security vendors on VirusTotal, suggesting a high level of suspicion. The domain resolves to the IP address 8.208.91.126, which is located in the United Kingdom and is associated with AS45102 Alibaba (US) Technology Co., Ltd. Additionally, the site appears on one security blocklist and is blocked by PhishDestroy, further confirming its malicious intent. Notably, the domain lacks an SSL certificate, which is a common indicator of a phishing site.

If a user has visited this site, it is crucial to take immediate action to protect their information. First, the user should change their Airbnb account password and enable two-factor authentication. It is also recommended to monitor financial statements for any unauthorized transactions. Users should report the incident to Airbnb's support team and consider running a full security scan on their device to ensure it has not been compromised. Staying vigilant and avoiding suspicious links or emails is essential to prevent future incidents.