What Gridinsoft observed on airbnbsex.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20261021051952-cd014b3c
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Suspicious Website
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The evidence supports Suspicious Website for the reviewed referral flow because its observed destination contains exit-redirection code to another domain. This is a navigation-risk assessment, not a finding of proven malware or phishing. The independent result does not support changing the domain to Safe.
Analyst findings
Review 4 documented observations View evidence
Both airbnbsex.com and www.airbnbsex.com returned the same adult dating referral homepage. The homepage and affiliate disclosure identify third-party services and compensation; the terms leave destination pricing and conditions to those services.
-
HTTP status
200 - Public artifact URL https://airbnbsex.com/affiliate-disclosure.html
- Public artifact URL https://airbnbsex.com/terms.html
The main entry link reached cabhcgb.frdatehub.com. The displayed questionnaire promoted nearby sexual encounters and advanced after three negative answers. No account, payment or age confirmation was submitted.
-
Redirect destination
https://cabhcgb.frdatehub.com/s/ddd3f159580a5 - Page element The landing page warned of nude photos and stated that it was not a dating site.
The loaded destination contained code that adds a browser history entry and handles backward navigation by replacing the location with another domain. This is direct code evidence of exit redirection; successful execution was not reproduced in the Back test.
- Analyst observation The script uses history.pushState, popstate and location.replace with a base64-encoded destination.
-
Redirect destination
https://notphishingdomain.life/s/344694774469
The retrieved 2019-09-04 archive snapshot displayed a Namecheap parking page. It does not establish the safety of the current referral flow.
- Page element Registrar parking content, not the current dating referral site.
Scope and limitations
- Only the recorded public pages, referral entry and loaded scripts were reviewed; later registration, payment, other locations and campaign variants were not tested.
- The Back test did not reproduce the coded external redirect. No claim is made that the additional destination delivered malware.
- External searches cannot establish the absence of unindexed threats. No fresh urlscan result verdict was available; the archive is historical.
Help protect others by sharing this page on social media! The more people who know about airbnbsex.com, the fewer chances they have to deceive someone else. Help others evaluate airbnbsex.com by sharing this page on social media!