verifyguest72125-booking[.]com

The domain verifyguest72125-booking.com was registered through Hello Internet Corp on June 12, 2026 and is currently active. Its authoritative name servers are ns100.webnic.cc and ns101.webnic.cc, both belonging to the WebNIC hosting platform. VirusTotal records show that 15 of 91 security vendors have flagged the domain as malicious, indicating a consensus of detection across multiple engines. The domain appears on a single external blocklist and has been explicitly blocked by the PhishDestroy feed, reinforcing its classification as a credential‑phishing site.

No additional intelligence such as SSL certificate details, HTTP response codes, or page title information is available at this time. Analysis of the available indicators points to a credential‑phishing campaign that likely harvests login credentials for booking‑related services, as suggested by the domain name. The elevated risk rating reflects the combination of vendor detections, blocklist inclusion, and the recent creation date, which is typical of fast‑flux or short‑lived phishing infrastructure.

Defenders should add the domain to network and DNS blocklists, enforce outbound filtering to prevent connections to the identified name servers, and monitor for any outbound traffic to the associated IP ranges. Continuous re‑scanning on VirusTotal and periodic checks against additional threat feeds are recommended to capture any changes in the domain’s behavior or additional detections. Organizations that use corporate credentials for travel or reservation platforms should alert users to the possibility of credential‑theft attempts and encourage the use of multi‑factor authentication where possible.