com-kaanihotels[.]com

This domain, com-kaanihotels.com, was designed to impersonate legitimate hotel booking platforms in an attempt to steal payment details and personal information. Visitors would likely encounter fake reservation forms or login pages requesting credit card data, passwords, or other sensitive credentials under the pretense of completing a booking. The site masqueraded as a hospitality service but operated as a credential-harvesting phishing page targeting travelers and online bookers. Analysis indicates the domain was registered on June 12, 2026, through Dominet (HK) Limited, a registrar frequently associated with suspicious domains. Despite its recent creation, the site had not yet been flagged by antivirus engines, showing 0 detections out of 95 on VirusTotal. It resolved to the IP address 104.21.90.85 and was served via Cloudflare using HTTP/3, a common tactic to obscure hosting infrastructure and evade detection. The page title 'Just a moment...' suggests the use of Cloudflare anti-bot challenges to filter out security scanners while allowing real users to proceed to the malicious content. If you visited com-kaanihotels.com, immediately cease all interaction and do not enter any personal or financial information. Check your browser history for any submitted data and monitor your accounts for unauthorized transactions. Consider resetting passwords for any accounts accessed while on the site, especially if credentials were reused. Report the domain to your organization’s security team or a national cybersecurity authority to support takedown efforts. Avoid clicking on links or downloading files from unexpected travel-related emails, and verify the legitimacy of booking sites by cross-checking official contact details before making reservations.