cardverify0115-booking[.]com

Domain cardverify0115-booking.com is assessed as an active credential phishing endpoint. Analysis indicates it is designed for social engineering under a booking-themed impersonation structure, likely attempting to capture user authentication or payment-related credentials through deceptive verification flows. Risk level is high due to multi-source detections and active status.

Technical evidence shows VirusTotal detection ratio of 16/95 security vendors flagging malicious activity. The domain was registered through Dominet (HK) Limited and was created on June 12, 2026. Infrastructure telemetry includes Cloudflare Browser Insights, Cloudflare services, and HTTP/3 usage. Google Safe Browsing classifies the domain under SOCIAL_ENGINEERING. It appears on 3 security blocklists and is referenced in 6 AlienVault OTX threat intelligence pulses.

The domain remains active, increasing exposure risk to unsuspecting users. If visited, credentials entered should be considered compromised and immediate password reset across affected accounts is recommended. Users should terminate sessions, revoke active tokens where applicable, and enable multi-factor authentication. Network defenders should enforce blocklists (PhishDestroy, OISD, InversionDNS) and monitor for similar booking-themed domains using numeric suffix patterns indicative of automated phishing kit generation.