booking[.]truth-verif8990134[.]com

The domain booking.truth-verif8990134.com is currently under scrutiny due to its involvement in credential theft phishing activities. This domain is not associated with any recognizable brand or known drainer kit, but employs deceptive tactics to mislead users into divulging sensitive information. The page displays a title labeled 'Web Information Platform', which may be intended to elicit trust or appear authoritative to unsuspecting visitors.

Technical analysis reveals several indicators of malicious activity. VirusTotal reports that 14 out of 95 security vendors have flagged this domain for suspicious behavior. The domain is registered through Dynadot LLC and was created on November 16, 2025. The hosting infrastructure resolves to the IP address 104.21.52.204, located in the United States and linked to AS13335, which is associated with Cloudflare, Inc. The domain lacks an SSL certificate, which is a common trait among phishing sites seeking to avoid detection. Additionally, it currently appears on one known security blocklist.

Despite being blocked by PhishDestroy, the domain remains active, posing a significant risk to users who may be targeted by its phishing schemes. Organizations and individuals are advised to update their security systems and ensure that any communications resembling this domain are treated with caution. Regularly monitoring domain reputation databases and employing email filtering solutions can help mitigate the risk posed by this and similar threats.