guestverify36141-booking[.]com

This domain, guestverify36141-booking.com, is a credential phishing site designed to harvest login credentials by impersonating the Booking.com verification process. The site presents a fraudulent login interface that mimics the legitimate Booking.com platform, targeting users attempting to access their accounts or confirm reservations. Analysis indicates the site employs social engineering tactics, including urgency prompts and cloned branding, to deceive victims into submitting their usernames and passwords. The domain specifically focuses on credential theft, with no evidence of additional payload delivery such as malware or crypto drainers at this time.

Technical indicators confirm the malicious nature of this domain. VirusTotal reports 11 out of 95 security vendors flagging guestverify36141-booking.com as malicious, while AlienVault OTX lists it in 6 threat intelligence pulses. The domain was registered on June 12, 2026, through Hello Internet Corp, a registrar frequently associated with phishing infrastructure. It appears on one security blocklist and was proactively taken offline following detection. The creation date, combined with the use of a high-risk registrar, aligns with patterns observed in credential phishing campaigns targeting travel and hospitality sectors.

Users who visited guestverify36141-booking.com or entered credentials on the site should take immediate action to mitigate risk. First, reset passwords for Booking.com and any other accounts where the same credentials may have been reused. Enable multi-factor authentication (MFA) on all critical accounts to prevent unauthorized access. Monitor financial statements and account activity for signs of fraudulent transactions or unauthorized logins. If personal or payment information was submitted, consider placing a fraud alert or credit freeze with relevant credit bureaus. Organizations should update endpoint protection rules to block the domain and its associated IP addresses, and educate users on recognizing phishing attempts targeting travel-related services.