Security Scan Report: airbnblistingservice.com

Redirected to:
https://airbnblistingservice.com/checkouts/product/
Submitted: Sep 14, 2026, 9:47:28 PMCompleted: Sep 14, 2026, 9:49:12 PMpubliccompleted

This website contacted 21 IPs in 4 countries across 16 domains to perform 208 HTTP transactions. The main domain is airbnblistingservice.com and was registered 1 year 1 month ago.

Submitted URL: https://airbnblistingservice.com

Effective URL:

https://airbnblistingservice.com/checkouts/product/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Primary domain matched as 'clearfake' malware by 2 feeds plus CRITICAL IDS explode-kit/EtherHiding C2 alerts on a live card-payment checkout — confirmed malicious, do not enter payment data.

Risk Factors (6)
Primary domain matched as malware ('clearfake') by two independent threat-intel feeds
CRITICAL IDS malware/exploit-kit alerts (EtherHiding exfiltration, ErrTraffic cluster)
Exploit-kit traffic distribution system signatures present
Blockchain-based C2 (EtherHiding) via Tenderly/Polygon RPC and Ethereum contract calls
Live credit-card payment form on a domain flagged as malicious
Loads additional flagged external domains (clickzona.net, hiddenfox.shop, aleverifocation.beer)
Domain age information unavailable

Details

Page Title

Checkout – airbnblistingservice.com

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'airbnblistingservice.com' is registered with no subdomain. The registrable portion 'airbnblistingservice' spans 20 characters split between 7 vowels and 13 consonants. Breaking it apart gives five words: air, b, nb, listing, service. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://airbnblistingservice.com

Page Load Overview

80.26s
Total Load Time
6.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:12,723 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce60% confidence
Type: spa
Method: structural

All Detected Categories

e-commerce
60%

Detected Features

Search
Payment

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
28172.67.207.172Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9146.75.120.176Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
9160.153.0.116Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
923.207.210.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
954.186.23.98Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
9104.18.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.19.229.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9192.178.183.94Google · CDNUnited States
AS15169Google LLC
934.214.58.71Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
9198.137.150.111Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
20821--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14692A772E068066A7F4F576DD1D2732CE59CA605CB01E7BA70F821588B98AFB00F751D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:dEyy72L5IH4r/ZdSZUaAWkWGUKQHgf/92qyf:dp5vZdyp5zKQAf/9g

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20795:IASU8SJjCBiG0TqmA0D6CBKVwACBCmagRmknA6QUD0JAOoBIkEZjFDChCKkoKEggAkDQJywInUnoKMNF0gAQDKLnTqOAZEEm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefeffffffffffff
Perceptual Hash:d555555515aaaaaa
Difference Hash:0000000000000000
Wavelet Hash:0e0e0e0e0e0e0e0e
Color Hash:#8987c5

Other Hashes

Crop Resistant:0000000000000000

Scan History

Scan history not available

Unable to load historical scan data