WatchOut #8 · Investigating

Fake Vrbo booking site looks identical to the real thing

Website Email Impersonation

Who may be targeted: Travelers looking for vacation rentals or responding to a reservation link that appears to come from Vrbo.

A long screenshot of a vacation-rental page and booking form using Vrbo-like branding on an unfamiliar domain
The page combines Vrbo-like branding, a property listing, and a booking form on an unfamiliar domain. Details that are not needed to recognize the warning sign have been omitted from the alert text.

reservation[.]holiday-vrbo[.]com copies Vrbo branding and presents a fake-looking vacation-rental booking flow. It offers a property listing, a “Book now” button, contact fields, a message-to-host form, and a large deposit. The domain is not Vrbo. Do not enter information or pay through this site.

  • The booking page is hosted on holiday-vrbo[.]com rather than the official Vrbo domain.
  • The page copies Vrbo branding and layout on a different domain.
  • The booking flow asks for contact information and payment-related details on the unfamiliar site.
  • The page pressures visitors to book before someone else takes the property.
  • The displayed booking requires a large deposit.

Written so they cannot be clicked. Do not retype them into your browser.

  • reservation[.]holiday-vrbo[.]com
  • holiday-vrbo[.]com
Source and limitations — what this alert does not establish
  • The operator, payment destination, and number of people targeted were not confirmed.

First observed Sep 2, 2026. Published Sep 2, 2026. Published by the Cybersecurity Reach Foundation.

Send this to someone it could protect.

Get future alerts Report a scam

← All alerts