Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/airbnb
Generated: Sat, 05 Sep 2026 11:17:38 GMT
Target Website: airbnb.com
Overall Trust Score: 89/100 (Trusted)
airbnb.com
Trusted
Scanned: Sep 5, 11:17 AMTRUST SCORE
89
CONFIDENT
Low Risk
89/100
TRUST SCORE
CONFIDENT
Low Risk
SAFETY
100/100
100/100
TRANSPARENCY
85/100
85/100
DOMAIN RISK
LowLow Tier
LowRisk
SSL SECURITY
100/100
100/100
PAYMENT RISK
YesRisk Present
YesRisk
VERDICT
Trusted
Trusted
AI Security Summary
89/100 — trusted. Long-established domain (18.1 years old), clean threat reputation, no impersonation patterns. Verdict driven by: scam-correlated payment methods mentioned: gift-card payment; large response served uncompressed — worth extra caution before trusting.
No malware/phishing on feedsGood reputationHTTPS enabled
HTTPS & SSL
SecureSecure
C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Threat Status
Threat FoundThreat Found
Threat intelligence alert
Domain Age
18.1 years18.1 years
Registered 8/5/2008
Reputation
High TrustHigh Trust
Based on 65+ verified signals
IP & Server
166.117.27.62166.117.27.62
cloudflare
Email Security
ProtectedProtected
SPF, DMARC, MX active
Performance
36 / 10036 / 100
Standard speed
Redirects
1 Hop1 Hop
Redirect chain analyzed
Top Priority RecommendationCritical
Scam-correlated payment methods mentioned: gift-card payment
Crypto-only, wire-only, gift-card, or peer-to-peer-only payment demands are hallmarks of scams. Legitimate businesses accept reversible payment methods like credit cards.
Why it matters
Addressing this signal prevents trust downgrades and potential security risks.
View Glossary GuidePositive Signals
- Site responded with 200
- HTTPS is enforced
- Served through Cloudflare
- 2 address record(s) resolved
- 8 authoritative nameservers
- Domain registered 18+ years ago
- Owner information disclosed
- Valid SSL / TLS certificate active
Warnings
- Large response served uncompressed
Critical Issues
- Scam-correlated payment methods mentioned: gift-card payment
- Registrar Name
- MarkMonitor Inc.
- Creation Date
- August 5, 2008 (18.1 years ago)
- Last Updated
- July 4, 2026
- Registry Expiry Date
- August 5, 2028
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
ICANN Status Badges
client delete prohibitedclient transfer prohibitedclient update prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited
Domain registered 18+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-Options Present
X-Content-Type-Options Present
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: Referrer Policymissing: Permissions Policy
All Response Headers (37)
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Content Security Policy is set
Restricts which scripts and resources the page can load.
+5
X-Frame-Options is set
Prevents clickjacking by disallowing framing.
+3
X-Content-Type-Options is set
Blocks MIME-sniffing browser attacks.
+2
Missing Referrer Policy
Controls what referrer information is sent with requests.
-2
Missing Permissions Policy
Restricts access to powerful browser features (camera, mic, etc.).
-2
- IPv4 Addresses (A)
- 166.117.27.62, 166.117.189.176
- IPv6 Addresses (AAAA)
- None
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 1), alt1.aspmx.l.google.com (Priority: 5), alt2.aspmx.l.google.com (Priority: 5), alt3.aspmx.l.google.com (Priority: 10), alt4.aspmx.l.google.com (Priority: 10)
- Authoritative Nameservers (NS)
- dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net, ns-1453.awsdns-53.org, ns-1932.awsdns-49.co.uk, ns-474.awsdns-59.com, ns-558.awsdns-05.net
- TXT Records Found
- 39 TXT verification records
A Records (IPv4)
166.117.27.62166.117.189.176
TXT Verification Records
DirectFedAuthUrl=https://airbnb.okta.com/app/airbnb_pwcprodnewhiddensaml_1/exk223q4dm1BiHGe81d8/sso/saml
MS=ms85621737
adobe-idp-site-verification=e68ae64c-3a65-4439-b368-0042e72c4cc8
anthropic-domain-verification-2s2h87=NaRxcN9zTtIb3insUyX7U264A
apple-domain-verification=KVJVb0VKHY0IkzDH
atlassian-domain-verification=mvMbea0qZ4IoMr8/xjkRYgjiHikXBbF04PZnZYv1Nj9UgppCnagnNaSo4T8QnCnP
bettercomp-verify=2b6685a8a6a942417057188531c867db5c85bc8aa25f038a77784e6f0f8bc84f
canva-site-verification=LTDCDSi1WalQaoEcq8B1WA
cisco-ci-domain-verification=eef9c0a839b89aed57cdd00866d163bb0660fec297c0c1e4b275baec96cfa10
datadome-domain-verify=W7kEoUrcETDB4afh6Dg5XcjzGWIxidID
docusign=1c606b88-26ef-48f9-8913-a4251a947532
docusign=d56dee1c-0384-4ffa-8801-e6bea308af97
dtm-domain-verification=pKWJVhJM8WfWtDBjyfKZjwxGurB9fiCf1TpvWO_Kvmw
ecostruxure-it-verification=5dd49b15-5fc0-4967-914f-3cc7b2fd6cdf
elevenlabs=igH15TA-6-8aXgxhsL6--iDut7kibGkXsl3Qrvth8gY
facebook-domain-verification=t3zulila9jjnrfbyt6vjamhqdxz47f
google-site-verification=A8e2zY9GYwx8D7x0aOz09Vl4gHfPmv86y_TbW1TUDqs
google-site-verification=Dz--VdnW2R_4K45T0eM8i0vNpFlip_o10WidHL5a3cg
google-site-verification=EFtD_37EY5f55YpAvM8rJ-e6Mwi1I3HF9Xuym2-ZlY8
google-site-verification=HEoQR0xvby-BYv7pNt06jkvTF44l6rvMnREUZSTyfYQ
google-site-verification=_e6Ayd8GN0S5dR116WkaM5ds5tx3ekRD5DC9-51pGrg
gradle-verification=VV7U686RA4HKV4QKVJ4L85Q6V6CJ6
lucidlink-verification=B2MS39YZ6H92VYF0X75CJHKRC4
masv=MDSVaBxDxTKiIngeAbltVvdnlTkAhnci
miro-verification=c5c6890aa37542fb59662ade09a0778c6e028b2f
neat-pulse-domain-verification-Kkvm4PN=ab046095-265e-45ae-8816-c61097444bfd
openai-domain-verification=dv-g8FeEwzIIZCUjUpPuF8szG3a
paloaltonetworks-site-verification=4df1258d8366090409f33305a49c27e5e867aa6dfd8d8d936c60bdee3396ee04
reejig-platform-domain-verification-0dc5cd=a9i760YDrujxnHMEEoXwZP5bD
rzp-site-verification=31fa3e1cd566e8d7347ed9bb16424c59
segment-site-verification=ZkxkEuKJrGI9MrWGC0qw795Xkj9ZlcBq
status-page-domain-verification=tb81t2ndk8pb
status-page-domain-verification=vxdvtv6jn2y9
stripe-verification=271cb9609512aa1a36ff5693b0a5cd9f04d19e089e8abae29dde633abc19749d
v=spf1 include:spf1.airbnb.com ip6:2c0f:fb50:4864::/56 ip6:2a00:1450:4864::/56 ip6:2800:3f0:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2404:6800:4864::/56 ip6:2001:4860:4864::/56 ip4:98.77.0.0/16 ip4:87.253.232.0/21 ip4:76.223.176.0/20 ip4:76.223.128.0/19 -all
webexdomainverification.725890277b499457e053ab06fc0a5ef4=b060825b-4db4-4ce3-a61e-debc56370fc0
webexdomainverification.=162d362c-c218-48f0-8b53-0017116e6f29
wework-site-verification=pnT3RXj0097aqZvB
yahoo-verification-key=YbxdxsyS96Uy5zQpwbZnLfjBY3tMlG2qWTSLHvVrsZ8=
2 address record(s) resolved
+4
8 authoritative nameservers
+2
- Registrable Domain
- airbnb.com
- Registrar Organization
- MarkMonitor Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- Delegated Authoritative Nameservers
- dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net, ns-1453.awsdns-53.org, ns-1932.awsdns-49.co.uk, ns-474.awsdns-59.com, ns-558.awsdns-05.net
- Registration Lifecycle
- Registered: 2008 → Expires: 2028
Nameservers (NS)
dns1.p08.nsone.netdns2.p08.nsone.netdns3.p08.nsone.netdns4.p08.nsone.netns-1453.awsdns-53.orgns-1932.awsdns-49.co.ukns-474.awsdns-59.comns-558.awsdns-05.net
Domain registered 18+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
- SPF Record
- v=spf1 include:spf1.airbnb.com ip6:2c0f:fb50:4864::/56 ip6:2a00:1450:4864::/56 ip6:2800:3f0:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2404:6800:4864::/56 ip6:2001:4860:4864::/56 ip4:98.77.0.0/16 ip4:87.253.232.0/21 ip4:76.223.176.0/20 ip4:76.223.128.0/19 -all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1;p=reject;sp=reject;pct=100;ruf=mailto:dmarc.forensic@airbnb.com;rua=mailto:dmarc.aggregate@airbnb.com;aspf=r;adkim=r;fo=1;ri=3600
- DKIM Selectors Detected
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (reject)
+6
DKIM configured (google)
+3
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
- Root Domain Label
- airbnb
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Detected Technologies by Category
js
ReactSvelte
analytics
Google Analytics
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- Airbnb: Holiday Rentals, Cabins, Beach Houses, Unique Homes & Experiences
- Meta Description
- Get an Airbnb for every kind of trip → 7 million holiday rentals → 2 million Guest Favourites → 220+ countries and regions worldwide
- Document Language
- en-GB
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width, initial-scale=1, viewport-fit=cover
- Generator Software
- —
4 technologies detected
React, Svelte, Google Analytics, Cloudflare
Mobile viewport configured
+2
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/3
QUIC-based, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
QUIC/H3
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 698 ms
- Payload Body Size
- 624.9 KB
- Compression Status
- Uncompressed
- Cache Directives
- no-store, max-age=0, private, must-revalidate
Large response served uncompressed
Enable gzip or brotli at the edge to cut transfer size dramatically.
-3
AI Content Evaluation
89/100 — trusted. Long-established domain (18.1 years old), clean threat reputation, no impersonation patterns. Verdict driven by: scam-correlated payment methods mentioned: gift-card payment; large response served uncompressed — worth extra caution before trusting.
- Payment Red Flags
- gift-card payment
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 184,281 characters verified
Scam-correlated payment methods mentioned: gift-card payment
Crypto-only, wire-only, gift-card, or peer-to-peer-only payment demands are hallmarks of scams. Legitimate businesses accept reversible payment methods like credit cards.
-18
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 166.117.27.62
- HTTP Status Code
- 200 OK
- Final Landing Destination
- https://www.airbnb.com/
- Redirect Hop Count
- 1 hop
Redirect Hop Chain
- 1.https://airbnb.com/ → https://www.airbnb.com/
Site responded with 200
Final URL: https://www.airbnb.com/. Response time 698ms.
+8
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
- Certificate Authority (Issuer)
- C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
- Subject Common Name (CN)
- global.airbnb-api.next.certs.akamai.airbnb.net
- Validity Period
- 193 days remaining (Expires: 2027-03-17T23:59:59)
- Subject Alternative Names (SANs)
- 40 domains protected
- Certificates Logged (CT)
- 896 certs recorded
Subject Alternative Names (Sample)
api.next.airbnb.comadmin.airbnb.comadmin.dev.staging.airbnb.comadmin-lite.airbnb.comadmin-lite-next.airbnb.comadmin-lite-staging.airbnb.comadmin-next.airbnb.comadmin-staging.airbnb.comapi.dev.staging.airbnb.comdev.staging.airbnb.comone.dev.staging.airbnb.comprototype.airbnb.comprototype-internal.airbnb.comprototype-internal-next.airbnb.comprototype-internal-staging.airbnb.comprototype-next.airbnb.comprototype-staging.airbnb.comstaging.airbnb.comairbnb.com.cnbeyond.airbnb.com+20 more
Valid SSL / TLS certificate active
Issued by C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1, valid for 193 remaining days.
+10
Key Legal & Transparency Pages
- Published Phone Numbers
- 72.7001344744, 1.000666778, 5823293524, 70466 100, 70466 57.5, 861453 100
Privacy policy linked from home page
+6
Terms of service linked from home page
+5
Contact page linked from home page
+5
No about page found
Reputable sites usually publish a about page.
-3
No refund/return policy found
Reputable sites usually publish a refund/return policy.
-3
No cookie policy found
Reputable sites usually publish a cookie policy.
-2
3 social profile(s) linked
twitter, facebook, instagram
+3
Phone number published
+2
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://www.airbnb.com/sitemap-master-index.xml.gz
- Disallow Rules Count
- 807 rules
View Raw robots.txt
# # /////// # // // # // // # // // /// /// /// # // // /// /// # // /// // //// /// /// /// //// /// //// /// //// /// //// # // /// /// // ////////// /// ////////// /////////// ////////// /////////// # // // // // /// /// /// /// /// /// /// /// /// /// # // // // // /// /// /// /// /// /// /// /// /// /// # // // // // /// /// /// /// /// /// /// /// /// /// # // // // // ////////// /// /// ////////// /// /// ////////// # // ///// // # // ///// // # // /// /// // # ////// ////// # # # Hello bot, engineer, or very lost layperson! Welcome to your stay on the Airbnb site, we're happy to have you as a guest. # If you're a human who likes solving interesting challenges with other humans, check out our careers page: https://careers.airbnb.com/positions/?_departments=engineering # If you're a bot who likes crawling webpages, please mind the house rules and avoid accessing any disallowed subfolders to earn a 5-star review from us. # Either way, thanks for stopping by! There's no need to collect your garbage at the end of your stay - we use Javascript for that. # See you on the next crawl! User-agent: Googlebot Allow: /calendar/ical/ Allow: /.well-known/amphtml/apikey.pub Disallow: /.well-known/assetlinks.json Disallow: /*/skeleton Disallow: /*/sw_skeleton Disallow: /500 Disallow: /account Disallow: /alumni Disallow: /api/v1/trebuchet Disallow: /associates/click Disallow: /book/ Disallow: /calendar/ Disallow: /contact_host Disallow: /disaster/lookup Disallow: /email/unsubscribe Disallow: /embeddable Disallow: /experiences/*?*scheduled_id Disallow: /experiences/*?*modal Disallow: /experiences/*/book Disallow: /external_link? Disallow: /fix-it Disallow: /fixit Disallow: /forgot_password Disallow: /google_place_photo Disallow: /api/v2/google_place_photos Disallow: /groups Disallow: /guidebooks Disallow: /help/feedback Disallow: /help/search Disallow: /help/search Disallow: /home/dashboard Disallow: /inbox Disallow: /login_with_redirect Disallow: /logout Disallow: /manage-listing Disallow: /messaging/ajax_already_messaged/ Disallow: /my_listings Disallow: /oauth_connect Disallow: /payments/book Disallow: /reservation Disallow: /rooms/*/amenities Disallow: /rooms/*/enhanced-cleaning Disallow: /rooms/*/house-rules Disallow: /rooms/*/location Disallow: /rooms/*/photos Disallow: /rooms/*/reviews Disallow: /rooms/*/safety Disallow: /rooms/*?viralityEntryPoint Disallow: /rooms/*/cancellation-policy Disallow: /rooms/*/description Disallow: /s/guidebooks Disallow: /signed_out_modal.json Disallow: /signup_modal Disallow: /stories Disallow: /trips/upcoming Disallow: /trips/v1/ Disallow: /update-your-browser Disallow: /users/*/listings Disallow: /users/show Disallow: /users/profile Disallow: /api/v3/LandingPageStaysQuery Disallow: /s/*/* Disallow: /things-to-do/places User-agent: Bingbot Allow: /calendar/ical/ Allow: /.well-known/amphtml/apikey.pub Disallow: /.well-known/assetlinks.json Disallow: /*/skeleton Disallow: /*/sw_skeleton Disallow: /500 Disallow: /account Disallow: /alumni Disallow: /api/v1/trebuchet Disallow: /associates/click Disallow: /book/ Disallow: /calendar/ Disallow: /contact_host Disallow: /disaster/lookup Disallow: /email/unsubscribe Disallow: /embeddable Disallow: /experiences/*?*scheduled_id Disallow: /experiences/*?*modal Disallow: /experiences/*/book Disallow: /external_link? Disallow: /fix-it Disallow: /fixit Disallow: /forgot_password Disallow: /google_place_photo Disallow: /ap
robots.txt published
+2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
36
This scan
Sources Checked
18
Live security feeds
Scan Duration
2.52s
Ultra-fast
Last Scan
9/5/2026
Live timestamp
Overall Risk
Low Risk