The domain booklngstay-prearrlvalupdat.com was registered through Dynadot Inc and first observed on July 23, 2026. Its authoritative DNS is hosted on Cloudflare, using the nameservers coleman.ns.cloudflare.com and emily.ns.cloudflare.com. Resolution points to the IP address 104.21.75.28, an address that is part of Cloudflare’s edge network and therefore does not directly reveal the underlying hosting infrastructure. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, indicating that at least one reputable anti‑phishing feed has classified it as malicious.
VirusTotal analysis shows that three of ninety‑one scanned security vendors flagged the domain, confirming that independent detection engines have observed suspicious behavior associated with the host. The threat type is listed as generic phishing and the risk level is high, with the current status marked as active. No additional public intelligence such as SSL certificate details, HTTP response codes, or page titles has been disclosed, leaving those aspects of the site unverified. Defenders should treat any traffic to or from booklngstay-prearrlvalupdat.com as potentially malicious.
Recommended actions include adding the domain to outbound deny lists, monitoring DNS queries for resolution to 104.21.75.28, and correlating any internal alerts that reference the domain with the blocklist entries from PhishDestroy. Organizations using web filtering should ensure the domain is blocked across all filtering layers, and incident response teams should investigate any user reports of unexpected emails or login prompts that reference the domain. Continuous re‑evaluation is advised, as additional detections may emerge from future VirusTotal scans or other threat‑intel feeds.