bunkbrisbane[.]hostel[.]town

This domain, bunkbrisbane.hostel.town, is confirmed to be operating as a credential theft platform specifically targeting guests of the legitimate Bunk Brisbane Hostel. Analysis indicates the site presents itself as the official hostel booking portal to harvest login credentials, payment details, and personal information from unsuspecting travelers. The domain remains active and accessible as of the latest verification. Infrastructure analysis reveals the domain is registered through Cloudzy and currently resolves to IP address 172.86.104.14. The site employs an SSL certificate issued by ZeroSSL GmbH under the ZeroSSL ECC DV SSL CA 2 authority, which while providing encryption, does not validate legitimacy. Security telemetry shows 15 of 95 vendors on VirusTotal have flagged this domain as malicious, with PhishDestroy being the sole confirmed blocklist entry. The page title 'Bunk Brisbane Hostel - ,' contains an anomalous trailing comma, a common indicator of hastily cloned phishing templates. Current risk assessment categorizes this as a high-priority threat due to the active status, brand impersonation of a well-known travel accommodation provider, and the potential for significant financial and identity theft impact on victims. Organizations are advised to implement immediate DNS-level blocking for 172.86.104.14 and bunkbrisbane.hostel.town across all networks. End users should verify all booking communications through official channels only, checking for proper domain structure (bunkbrisbane.com.au) and SSL certificate details. Security teams should monitor for credential reuse attempts from harvested accounts, particularly those associated with travel and hospitality services.