booking-com-teal[.]vercel[.]app

PhishDestroy has identified booking-com-teal.vercel.app as a high-risk generic phishing domain actively being used to impersonate the legitimate Booking.com website. This threat is particularly dangerous because the page replicates the familiar Booking.com interface, tricking users into entering sensitive information such as login credentials, payment details, or personal data. The domain is currently active and poses a direct threat to anyone who may encounter it through phishing emails, misleading ads, or social media links.

Technical analysis reveals multiple red flags. The domain was registered on February 21, 2026, through Tucows Domains Inc., and resolves to IP address 216.198.79.131. VirusTotal reports that 17 out of 95 security vendors flag this domain as malicious. It already appears on two security blocklists. Despite having an SSL certificate from Google Trust Services (WR1), which might give a false sense of security, the domain is confirmed fraudulent. The page title is "Booking.com," further demonstrating the impersonation attempt.

Users who have visited booking-com-teal.vercel.app or suspect they may have entered information should immediately change their Booking.com account password and enable two-factor authentication. Monitor financial accounts for unauthorized transactions and report any suspicious activity to Booking.com's official support. To avoid such threats in the future, always verify URLs carefully—legitimate Booking.com domains use "booking.com" and not variations like "booking-com-teal.vercel.app." Avoid clicking on links in unsolicited messages, and use security tools that block known phishing domains.