Steps: 1. He found apartment listing on immobiliare.it
2. Some emails were exchanged
3. He receives the link to the _real_ airbnb listing
4. He cant find it there, and the scammer sends the phishing page[1] (from @expertdesigner.eu)
5. Soon after he receives another email saying that the database is down from @airbnb.sa.com and he should meanwhile move the money using transferwise.com
6. Payment done
7. Scammer replies: Payment received
The login page was quite well made, and I think most of non technical people might get fooled
[1] The URL: https://airbnb.com-itinerary.app/rooms/762837232/files/login.php?id=572465&locale=en&sale=203&
Thoughts?