Is airbnb.com safe?
Very Likely Safe
No major red flags found. This looks like a legitimate, established website.
Why: Main reasons: domain registered 18+ years ago; not flagged by Google Safe Browsing; popular website — ranked #864 worldwide. Minor issues: large response served uncompressed.
Positive highlights
- Domain registered 18+ years agoLong-established domains are far less likely to be disposable scams.
- Not flagged by Google Safe BrowsingNo malware, phishing, or unwanted-software match in Google's live threat database.
- HTTPS is enforcedAll redirects stayed on HTTPS. Traffic is encrypted end-to-end.
- Valid SSL / TLS certificate activeIssued by C=US, O="DigiCert, Inc.", CN=DigiCert Verified Mark RSA4096 SHA256 2021 CA1, valid for 180 remaining days.
- Popular website — ranked #864 worldwideListed in the Tranco top 1 million websites. Scam sites are almost never this popular.
- Site responded with 200Final URL: https://www.airbnb.com/. Response time 752ms.
- No impersonation patterns detectedDomain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
- Not listed on URLhaus malware blocklist
- Not present in PhishStats phishing feed
- HSTS is setTells browsers to only use HTTPS for this domain.
Negative highlights
- Scam-correlated payment methods mentioned: gift-card paymentCrypto-only, wire-only, gift-card, or peer-to-peer-only payment demands are hallmarks of scams. Legitimate businesses accept reversible payment methods like credit cards.
- Large response served uncompressedEnable gzip or brotli at the edge to cut transfer size dramatically.
Note: Registered via MarkMonitor Inc..
Note: 4 technologies detected. React, Svelte, Google Analytics, Cloudflare
Key facts about airbnb.com
- Website
- airbnb.com
- Popularity
- #864 worldwide (Tranco top 1M)
- Domain created
- Aug 5, 2008 (18.3 years old)
- Domain expires
- Aug 5, 2028
- Registrar
- MarkMonitor Inc.
- Owner details
- Public in WHOIS
- IP address
- 166.117.27.62
- Hosting / CDN
- Cloudflare
- SSL certificate
- "DigiCert · valid until May 12, 2027
- Email security
- SPF ✓ · DMARC ✓ (reject)
- Threat blocklists
- Not listed (clean)
- Technology
- React, Svelte, Google Analytics, Cloudflare
Summary
91/100 — trusted. Long-established domain (18.3 years old), clean threat reputation, no impersonation patterns.
Full technical report
Domain Information
Registration timeline, age calculation, registrar details, and ICANN status.
- Registrar Name
- MarkMonitor Inc.
- Creation Date
- August 5, 2008 (18.3 years ago)
- Last Updated
- July 4, 2026
- Registry Expiry Date
- August 5, 2028
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
HTTP Headers & Security
Full HTTP response headers, HSTS, Content Security Policy (CSP), and security baselines.
accept-ch: Sec-CH-Device-Memory, Sec-CH-DPR, ECT, Sec-CH-UA-Platform-Version, Sec-CH-Viewport-Width akamai-request-bc: [a=184.30.41.11,b=7707587,c=g,n=US_IL_MOUNTPROSPECT,o=20940],[c=c,n=US_IL_CHICAGO,o=20940],[c=c,n=US_VA_ASHBURN,o=20940],[a=76,c=o] alt-svc: h3=":443"; ma=93600 cache-control: no-store, max-age=0, private, must-revalidate cachestatus: on cf-cache-status: DYNAMIC cf-ray: a59ede2a2d8db86e-CMH connection: close content-security-policy: child-src blob:; connect-src 'self' https: wss://ws.airbnb.com wss://ws.airbnb.com https://netverify.com https://*.netverify.com wss: *.amap.com https://*.mapbox.com; default-src 'self' https: blob:; font-src 'self' data: https://*.muscache.com fonts.gstatic.com https://use.typekit.net https:; frame-src * https://*.cardinalcommerce.com; img-src 'self' https: data: https://*.mapbox.com blob:; media-src 'self' https: blob:; script-src 'self' 'unsafe-eval' https://a0.muscache.com https://cdn.siftscience.com https://ss.musthird.com https://t1.musthird.com https://bat.bing.com https://connect.facebook.net https://www.google-analytics.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.googletagmanager.com https://maps.googleapis.com https://ajax.googleapis.com https://*.g.doubleclick.net https://www.google.com https://www.gstatic.com https://smartlock.google.com https://accounts.google.com https://app.link https://cdn.branch.io https://api.branch.io https://bam.nr-data.net https://js-agent.newrelic.com https://ethn.io https://s.yimg.jp https://api.geetest.com https://monitor.geetest.com https://api.geevisit.com https://cdn.ampproject.org https://storage.googleapis.com/workbox-cdn/ https://tagmanager.google.com https://pay.google.com https://songbird.cardinalcommerce.com/ https://www.recaptcha.net https://www.gstatic.cn https://airbnb-api.arkoselabs.com https://h.online-metrix.net 'sha256-rAm9O8JPZLtQmd84zMDzhsG5q35JscESxxcaFL7+DDc=' 'sha256-UyK/XBtZoFyQQOBAr1hmw2FP2Qaybdf4IyhWW0l2X+g=' 'sha256-9jboJcALeftUTV/MuGjkJB5HDvqsPbm7/gTjfpkHiYc=' 'sha256-hBwLRkfdEtkEOoOVa52xEJQQCRJ0qPPJ8MRI3fhejrE=' 'sha256-dEQLydru3z2yuRGS/8VzaalU2wY48xuXdoO1zDPmT/A=' 'sha256-jhpHTyypc46kfr10/bvvFfjxyJNZcDvM0XsDAD5PJ2k=' 'sha256-sM4TCqADHMBZKYgE9fgtWACAry8C6tqaPljxMeTJ+w4=' https: 'sha256-5Tl1cMvpowm216MNWitZcm6dh1Ufik1QFyA6KadNiAY=' 'sha256-rvARxjbuUxilxb9RkOEv8RtqGIsmGYKyxv2IIH4MsrA=' 'sha256-hlaumtWL6YXbATpvURLyKaWUWs/apEDvcs19lYsGwsU=' 'sha256-WN2aiDPIBwBxhoVjMemOYgECjT6LzuFTAdA/DMR7T3A=' 'sha256-QrtzfXzemhvC/0Mz4p5MTgyHZ11cOMx/iKBQ2QfQoYU=' 'sha256-hVPsqt8jazJS/0O76JubiA90S0KG9ImECF/df+CNljI=' 'sha256-RAgBnM0wf+EU6GLC4DAwrlPlxaWbSFOv9fEZHb22Zqc=' 'sha256-q7LfTX8CemAjvalJEQZ5S+i7nuNEVbFaU6xkHvEAOeQ=' 'sha256-Hn02be8UsaO1J728ZDxGZlZGXBd85lEw3JklFYpfGPQ=' 'sha256-69KvOim8N1PE+6rP6TRe0P6GgFBZdTuNV9Lrr9y8KMc=' 'sha256-AcTLk9SPBTCpOP4TyHDG+Id7/GS/5o3fNLVi6oMU5NM=' https://netverify.com https://*.netverify.com https://icm.aexp-static.com https://qicm.americanexpress.com https://qwww435.americanexpress.com https://checkout.americanexpress.com https://www.paypalobjects.com https://c.paypal.com https://www.paypal.com https://*.klarnacdn.net blob: https://vdata.amap.com https://webapi.amap.com https://restapi.amap.com https://*.mapbox.com https://cardinaltrusted.com https://songbird.cardinalcommerce.com https://songbirdstag.cardinalcommerce.com https://includes.ccdc02.com https://includestest.ccdc02.com https://client-api.arkoselabs.com https://cdn.plaid.com/link/v2/stable/link-initialize.js https://js.stripe.com https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js https://pagead2.googlesyndication.com; style-src 'self' https: 'unsafe-inline' https://*.mapbox.com; worker-src 'self' https: blob:; report-uri /tracking/csp?controller=core-guest-loop&action=%2F&req_uuid=0d181f6c-1590-4c8c-e29a-1b9f4f27cc59&version=sha%3D2e47a53fd26b&report_only=false; report-to /tracking/csp?controller=core-guest-loop&action=%2F&req_uuid=0d181f6c-1590-4c8c-e29a-1b9f4f27cc59&version=sha%3D2e47a53fd26b&report_only=false content-type: text/html;charset=utf-8 date: Fri, 13 Nov 2026 15:39:12 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT link: <https://a0.muscache.com/airbnb/static/packages/web/common/frontend/core-guest-spa/entrypoints/client.3d1f7fe0e5.css>;rel=preload;as=style;crossorigin=anonymous;media=print,<https://a0.muscache.com/airbnb/static/airbnb-dls-web/build/fonts/cereal-variable/AirbnbCerealVF_W_Wght.8816d9e5c3b6a860636193e36b6ac4e4.woff2>;rel=preload;as=font;type=font/woff2;crossorigin=anonymous,<https://a0.muscache.com/airbnb>;rel=preconnect;crossorigin=anonymous server: cloudflare server-timing: ingress;dur=61, upstream;dur=57, cdn-cache; desc=MISS, edge; dur=169, origin; dur=78 set-cookie: cdn_exp_7c70f21947e0396b3=control; expires=Tue, 12-Jan-2027 15:39:12 GMT; path=/; domain=.airbnb.com strict-transport-security: max-age=63072000; includeSubDomains; preload transfer-encoding: chunked vary: accept-encoding x-airbnb-client-tls-version: tls1.3 x-airbnb-everest-device-id: 1794584352.EANTM4MjU2MDMyMzI0Zm.MXXAOa2Xu3NYGE8KCNpEKkUBo0eyhXkQpwyknTASwiM x-airbnb-internal-trace-id: wNpJZLe_GYlFSKtwP6KiBg== x-airbnb-sureride: c1a1o.0.0b291eb8.1794584352.759bc3%%e1f1o.E2IHEUl1BAgKPBBSCSsDHwckSUYAMkJPFQ%%t1d1o.wNpJZLe_GYlFSKtwP6KiBg==%%h1 x-browser-type: unknown x-content-type-options: nosniff x-envoy-upstream-service-time: 57 x-erf-bev-bev: 1794584352_EAZDEyN2RlYjU5Mj x-erf-bev-bev-is-generated: 1 x-frame-options: SAMEORIGIN x-kraken-loop-name: core-guest-loop x-server-name: www.airbnb.com x-xss-protection: 1; mode=block
DNS Records
Encrypted DoH resolution: A, AAAA, MX mail servers, authoritative NS, and TXT verification.
- IPv4 Addresses (A)
- 166.117.27.62, 166.117.189.176
- IPv6 Addresses (AAAA)
- None
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 1), alt1.aspmx.l.google.com (Priority: 5), alt2.aspmx.l.google.com (Priority: 5), alt3.aspmx.l.google.com (Priority: 10), alt4.aspmx.l.google.com (Priority: 10)
- Authoritative Nameservers (NS)
- dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net, ns-1453.awsdns-53.org, ns-1932.awsdns-49.co.uk, ns-474.awsdns-59.com, ns-558.awsdns-05.net
- TXT Records Found
- 40 TXT verification records
WHOIS & Identity Lookup
Domain ownership status, registry lifecycle, nameservers, and privacy redaction.
- Registrable Domain
- airbnb.com
- Registrar Organization
- MarkMonitor Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- Delegated Authoritative Nameservers
- dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net, ns-1453.awsdns-53.org, ns-1932.awsdns-49.co.uk, ns-474.awsdns-59.com, ns-558.awsdns-05.net
- Registration Lifecycle
- Registered: 2008 → Expires: 2028
Email Security & Deliverability
SPF record validation, DMARC policy enforcement, DKIM selectors, and MX reputation.
- SPF Record
- v=spf1 include:spf1.airbnb.com ip6:2c0f:fb50:4864::/56 ip6:2a00:1450:4864::/56 ip6:2800:3f0:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2404:6800:4864::/56 ip6:2001:4860:4864::/56 ip4:98.77.0.0/16 ip4:87.253.232.0/21 ip4:76.223.176.0/20 ip4:76.223.128.0/19 -all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1;p=reject;sp=reject;pct=100;ruf=mailto:dmarc.forensic@airbnb.com;rua=mailto:dmarc.aggregate@airbnb.com;aspf=r;adkim=r;fo=1;ri=3600
- DKIM Selectors Detected
Threat Intelligence & Blocklists
Multi-source malware feeds (URLhaus), phishing checks (PhishStats, Safe Browsing), and typosquats.
- Root Domain Label
- airbnb
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
Technology Stack & Metadata
Detected CMS, JavaScript frameworks, analytics tags, CDN providers, and page metadata.
- HTML Title
- Airbnb: Holiday Rentals, Cabins, Beach Houses, Unique Homes & Experiences
- Meta Description
- Get an Airbnb for every kind of trip → 7 million holiday rentals → 2 million Guest Favourites → 220+ countries and regions worldwide
- Document Language
- en-GB
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width, initial-scale=1, viewport-fit=cover
- Generator Software
- —
Page Performance & Compression
Server response time, content payload size, Brotli/Gzip compression, and caching rules.
- HTTP Response Time
- 752 ms
- Payload Body Size
- 655.2 KB
- Compression Status
- Uncompressed
- Cache Directives
- no-store, max-age=0, private, must-revalidate
AI Content Safety & Red Flags
High-pressure language, payment gateway safety, disposable domain analysis, and deceptive tactics.
91/100 — trusted. Long-established domain (18.3 years old), clean threat reputation, no impersonation patterns. Main reasons: domain registered 18+ years ago; not flagged by Google Safe Browsing; popular website — ranked #864 worldwide. Minor issues: large response served uncompressed.
- Payment Red Flags
- gift-card payment
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 164,822 characters verified
Server & Hosting Infrastructure
Primary IP address, web server software, CDN edge network, and redirect hop chain.
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 166.117.27.62
- HTTP Status Code
- 200 OK
- Final Landing Destination
- https://www.airbnb.com/
- Redirect Hop Count
- 1 hop
- 1.https://airbnb.com/ → https://www.airbnb.com/
SSL / TLS Certificate
Active Certificate Authority, Common Name, validity period, expiration countdown, and SANs.
- Certificate Authority (Issuer)
- C=US, O="DigiCert, Inc.", CN=DigiCert Verified Mark RSA4096 SHA256 2021 CA1
- Subject Common Name (CN)
- Airbnb, Inc.
- Validity Period
- 180 days remaining (Expires: 2027-05-12T23:59:59)
- Subject Alternative Names (SANs)
- 40 domains protected
- Certificates Logged (CT)
- 923 certs recorded
Content & Transparency Policies
Linked privacy policy, terms of service, about page, social channels, and published contacts.
- Published Phone Numbers
- 138566025676, 401626263, 860636193, 000000 16, 000000 10, 000000 18
Robots.txt & Sitemap Discoverability
Search engine crawler directives, indexability, and declared XML sitemaps.
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://www.airbnb.com/sitemap-master-index.xml.gz
- Disallow Rules Count
- 687 rules
View Raw robots.txt
# # /////// # // // # // // # // // /// /// /// # // // /// /// # // /// // //// /// /// /// //// /// //// /// //// /// //// # // /// /// // ////////// /// ////////// /////////// ////////// /////////// # // // // // /// /// /// /// /// /// /// /// /// /// # // // // // /// /// /// /// /// /// /// /// /// /// # // // // // /// /// /// /// /// /// /// /// /// /// # // // // // ////////// /// /// ////////// /// /// ////////// # // ///// // # // ///// // # // /// /// // # ////// ////// # # # Hello bot, engineer, or very lost layperson! Welcome to your stay on the Airbnb site, we're happy to have you as a guest. # If you're a human who likes solving interesting challenges with other humans, check out our careers page: https://careers.airbnb.com/positions/?_departments=engineering # If you're a bot who likes crawling webpages, please mind the house rules and avoid accessing any disallowed subfolders to earn a 5-star review from us. # Either way, thanks for stopping by! There's no need to collect your garbage at the end of your stay - we use Javascript for that. # See you on the next crawl! User-agent: Googlebot Allow: /calendar/ical/ Allow: /.well-known/amphtml/apikey.pub Disallow: /.well-known/assetlinks.json Disallow: /*/skeleton Disallow: /*/sw_skeleton Disallow: /500 Disallow: /account Disallow: /alumni Disallow: /api/v1/trebuchet Disallow: /associates/click Disallow: /book/ Disallow: /calendar/ Disallow: /contact_host Disallow: /disaster/lookup Disallow: /email/unsubscribe Disallow: /embeddable Disallow: /experiences/*?*scheduled_id Disallow: /experiences/*?*modal Disallow: /experiences/*/book Disallow: /external_link? Disallow: /fix-it Disallow: /fixit Disallow: /forgot_password Disallow: /google_place_photo Disallow: /api/v2/google_place_photos Disallow: /groups Disallow: /guidebooks Disallow: /help/feedback Disallow: /help/search Disallow: /help/search Disallow: /home/dashboard Disallow: /inbox Disallow: /login_with_redirect Disallow: /logout Disallow: /manage-listing Disallow: /messaging/ajax_already_messaged/ Disallow: /my_listings Disallow: /oauth_connect Disallow: /payments/book Disallow: /reservation Disallow: /rooms/*/amenities Disallow: /rooms/*/enhanced-cleaning Disallow: /rooms/*/house-rules Disallow: /rooms/*/location Disallow: /rooms/*/photos Disallow: /rooms/*/reviews Disallow: /rooms/*/safety Disallow: /rooms/*?viralityEntryPoint Disallow: /rooms/*/cancellation-policy Disallow: /rooms/*/description Disallow: /s/guidebooks Disallow: /signed_out_modal.json Disallow: /signup_modal Disallow: /stories Disallow: /trips/upcoming Disallow: /trips/v1/ Disallow: /update-your-browser Disallow: /users/*/listings Disallow: /users/show Disallow: /users/profile Disallow: /api/v3/LandingPageStaysQuery Disallow: /s/*/* Disallow: /things-to-do/places User-agent: Bingbot Allow: /calendar/ical/ Allow: /.well-known/amphtml/apikey.pub Disallow: /.well-known/assetlinks.json Disallow: /*/skeleton Disallow: /*/sw_skeleton Disallow: /500 Disallow: /account Disallow: /alumni Disallow: /api/v1/trebuchet Disallow: /associates/click Disallow: /book/ Disallow: /calendar/ Disallow: /contact_host Disallow: /disaster/lookup Disallow: /email/unsubscribe Disallow: /embeddable Disallow: /experiences/*?*scheduled_id Disallow: /experiences/*?*modal Disallow: /experiences/*/book Disallow: /external_link? Disallow: /fix-it Disallow: /fixit Disallow: /forgot_password Disallow: /google_place_photo Disallow: /ap
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
User reviews of airbnb.com
No reviews yet. Be the first to share your experience.