Respond to 'Patricia's' enquiry - from Airbnb but leads to a Phishing site - BEWARE

[Helen267]

I just got this message via the Airbnb messaging system - HOSTS BEWARE - the link leads to a phishing site

[Jim472]

I reported for you. Would suggest others do as well. Thanks for posting this. 

[Helen267]

I've reported it to Airbnb, who told me to report and block the user, but it turns out this account no longer exists. What I find more worrying is that this link to an external site was permitted on an initial enquiry via my trusted Airbnb messaging system.

[Ange2]

@Helen267    That is odd usually all urls are blocked by Airbnb until a booking is confirmed. Maybe because this one starts with airbnb.com it was missed.  But it is troubling that a third party can hijack Airbnb's bona fide url and redirect it to a malicious site.

[Jim472]

I mean i reported to hosting site.

Homabnb.Top

Domain Name: homabnb.top

Registry Domain ID: D20190819G10001G_16804263-top

Registrar WHOIS Server: whois.namesilo.com

Registrar URL: https://www.namesilo.com

Updated Date: 2019-08-19T08:31:25Z

Creation Date: 2019-08-19T08:28:30Z

Registry Expiry Date: 2020-08-19T08:28:30Z

Registrar: NameSilo

Registrar IANA ID: 1479

Registrar Abuse Contact Email: abuse@namesilo.com

Registrar Abuse Contact Phone: +1.4805240066

Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited

Domain Status: addPeriod https://icann.org/epp#addPeriod

Registry Registrant ID: C20190819C_43742293-top

Registrant Name: 

Registrant Organization: 

Registrant Street: 

Registrant City: 

Registrant State/Province: 

Registrant Postal Code: 

Registrant Country: 

Registrant Phone: 

Registrant Phone Ext: 

Registrant Fax: 

Registrant Fax Ext: 

Registrant Email: 

Registry Admin ID: C20190819C_43742293-top

Admin Name: 

Admin Organization: 

Admin Street: 

Admin City: 

Admin State/Province: 

Admin Postal Code: 

Admin Country: 

Admin Phone: 

Admin Phone Ext: 

Admin Fax: 

Admin Fax Ext: 

Admin Email: 

Registry Tech ID: C20190819C_43742293-top

Tech Name: 

Tech Organization: 

Tech Street: 

Tech City: 

Tech State/Province: 

Tech Postal Code: 

Tech Country: 

Tech Phone: 

Tech Phone Ext: 

Tech Fax: 

Tech Fax Ext: 

Tech Email: 

Name Server: ns101.strongserverdns.com

Name Server: ns100.strongserverdns.com

DNSSEC: unsigned

URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/

>>> Last update of WHOIS database: 2019-08-20T12:45:48Z <<<

[Helen267]

Oh wow thank you. I am clearly waaaay out of my technological depth! 🙂

[Stephanie]

Hiya @Helen267 ,

Thanks for sharing this fraudulent attempt. I've shared this info with my colleagues in the CS team who can inspect it closer. If you are ever unsure about a message, it's always safest to not open it and report it right away. 

Thanks again,

Stephanie