WatchOut #8 · Investigating
Fake Vrbo booking site looks identical to the real thing
Website Email Impersonation
Who may be targeted: Travelers looking for vacation rentals or responding to a reservation link that appears to come from Vrbo.
What we are seeing
reservation[.]holiday-vrbo[.]com copies Vrbo branding and presents a fake-looking vacation-rental booking flow. It offers a property listing, a “Book now” button, contact fields, a message-to-host form, and a large deposit. The domain is not Vrbo. Do not enter information or pay through this site.
Warning signs
- The booking page is hosted on holiday-vrbo[.]com rather than the official Vrbo domain.
- The page copies Vrbo branding and layout on a different domain.
- The booking flow asks for contact information and payment-related details on the unfamiliar site.
- The page pressures visitors to book before someone else takes the property.
- The displayed booking requires a large deposit.
Reported addresses
Written so they cannot be clicked. Do not retype them into your browser.
reservation[.]holiday-vrbo[.]comholiday-vrbo[.]com
Source and limitations — what this alert does not establish
- The operator, payment destination, and number of people targeted were not confirmed.
First observed Sep 2, 2026. Published Sep 2, 2026. Published by the Cybersecurity Reach Foundation.
Send this to someone it could protect.