view[.]hotelsverifying[.]org

view.hotelsverifying.org is a subdomain of hotelsverifying.org. PhishDestroy first recorded this hostname on Feb 22, 2026. The stored content classification is banking phishing. The assembled evidence scores 97/100 (critical).

Three independent sources are positive: VirusTotal, Spamhaus DBL, and Cloudflare Radar. VirusTotal recorded 14 detections among 91 engines: ADMINUSLabs, BitDefender, Chong Lua Dao, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, Sophos, VIPRE, Webroot on Jul 26, 2026 at 03:02 UTC. Spamhaus DBL: DBL_PHISH on Jul 14, 2026 at 06:38 UTC. Cloudflare Radar classified the hostname as malicious and assigned the categories security threats and phishing; its verdict timestamp was not retained. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Mar 2, 2026 at 20:19 UTC. URLScan completed without a malicious verdict on Feb 22, 2026 at 12:26 UTC. PhishStats returned no feed match on Mar 1, 2026 at 02:41 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 02:15 UTC; content was unavailable. Registration records for the registrable domain hotelsverifying.org list Dynadot LLC as the registrar and Feb 15, 2026 as the creation date. Registration preceded first observation by 6 days. At collection time, the hostname resolved to 62.60.226.85 on AS214351 (FEMO IT SOLUTIONS LIMITED). The associated network metadata labels the endpoint as AS214351 FEMO IT SOLUTIONS LIMITED in Frankfurt am Main, DE. The stored server header is nginx/1.28.1. Captured page title: “Booking Confirmation | Enter your reservation”. DOM analysis completed on Jul 10, 2026 at 18:20 UTC; stored DOM score 0/100. The evidence archive retains 3 visual captures from PhishDestroy and URLScan. IoC extraction completed on Aug 2, 2026 at 04:00 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists R12 as the certificate issuer with validity through Jan 6, 2027; checked Mar 15, 2026 at 05:59 UTC.

No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. The 0/100 DOM score means that the DOM pass stored no scored indicators; it does not negate the independent source findings. Taken together, the page content and independent findings support classifying this hostname as banking phishing.