booking-careers[.]com

The domain booking-careers.com is currently identified as a high-risk brand impersonation threat, specifically mimicking the brand Booking.com. This impersonation is indicative of a generic phishing threat designed to deceive users into providing sensitive information under the guise of a legitimate job application portal. No specific drainer kit was identified; however, the primary intent appears to be the exploitation of users through social engineering tactics.

Technical indicators reveal a VirusTotal detection score of 14/95, suggesting that 14 out of 95 security vendors have flagged this domain due to its malicious characteristics. The domain was registered through Name.com, Inc. and has a creation date of June 25, 2026, indicating a relatively recent establishment that may align with an evolving phishing landscape. The domain resolves to IP address 35.157.26.135 and has been flagged by Google Safe Browsing for social engineering, alongside being listed on one security blocklist, specifically InversionDNS, highlighting its recognized malicious potential.

The domain remains active at this time and poses a significant risk to users, particularly those seeking employment opportunities with the Booking.com brand. Response actions should include immediate social engineering awareness training for potential targets, vigilance in monitoring user reports of phishing attempts, and potentially requesting takedown of the site from appropriate authorities. Remaining risks include ongoing user exposure and the possibility of the domain evolving its tactics to evade detection, necessitating continuous monitoring and threat assessment.