verifyguest8765-booking[.]com

The domain verifyguest8765-booking.com was registered on June 12, 2026 through Hello Internet Corp and is currently hosted on the nameservers ns100.webnic.cc and ns101.webnic.cc. DNS resolution points to the IP address 172.67.164.74, indicating that the site is reachable on the public internet. The domain has been added to a single security blocklist and is actively blocked by the PhishDestroy feed, demonstrating that at least one reputable sinkhole recognises it as malicious.

VirusTotal analysis shows that 15 of 91 scanned security vendors flag the domain, providing multi‑vendor consensus that the site is associated with malicious activity. No additional contextual data such as page title, SSL certificate details, or explicit brand targeting is available, so the precise phishing campaign content cannot be confirmed at this time. The observable evidence therefore supports classifying the infrastructure as an active credential‑phishing operation.

Defenders should incorporate the domain and its resolving IP address into firewall and DNS filtering rules, monitor for any related hostnames that share the same nameservers, and continue to track updates from blocklisting services. Ongoing intelligence collection is recommended to determine the exact brand or service being spoofed, to assess any payload delivery mechanisms, and to verify whether the underlying hosting provider changes its configuration, which could affect detection efficacy.