cardverify4551-booking[.]com

The domain cardverify4551-booking.com was identified as a credential phishing infrastructure specifically designed to impersonate Booking.com login portals. Analysis confirms this domain targeted users by presenting fraudulent authentication pages to harvest account credentials. As of the latest verification, the domain has been taken offline, though it remains a documented threat in historical records. Infrastructure analysis reveals the domain was registered on June 19, 2025, through Hello Internet Corp. It was flagged by 15 of 95 security vendors on VirusTotal, indicating moderate to high detection confidence. The domain appeared on two independent security blocklists and was referenced in six threat intelligence pulses, suggesting active tracking by multiple security communities. No associated IP address was retained in public records at the time of this report. While cardverify4551-booking.com is currently offline, organizations and individuals are advised to treat any prior interaction with this domain as compromised. Network administrators should ensure retrospective log reviews for connections to this domain, particularly in environments where Booking.com credentials are used. Users who may have entered credentials on this site should immediately reset passwords and enable multi-factor authentication on their Booking.com accounts. Security teams are encouraged to monitor for residual phishing campaigns leveraging similar naming conventions or registrar patterns.