mybooking-com[.]vercel[.]app

PhishDestroy identifies mybooking-com.vercel.app as an active credential-harvesting domain posing as a booking service to steal user credentials and payment details. The site mimics legitimate travel or accommodation portals to trick visitors into entering sensitive login or financial information, which is then exfiltrated to threat actors for fraud or identity theft. This domain resolves to IP 64.29.17.3 and is currently served over HTTPS via a Google Trust Services certificate, increasing its appearance of legitimacy. This domain was flagged by 12 out of 95 VirusTotal security vendors and is registered through Vercel Inc., a legitimate hosting provider often abused by threat actors to deploy phishing pages quickly. While the domain uses a valid SSL certificate, the combination of low detection rates, active hosting, and impersonation tactics elevates the risk. The use of Vercel’s platform allows rapid deployment and takedown evasion, complicating traditional mitigation efforts. Users who visited mybooking-com.vercel.app should immediately cease any interaction, avoid entering credentials or payment details, and scan their devices for malware. If any data was submitted, change passwords immediately, monitor financial accounts for unauthorized activity, and report the incident to relevant authorities. Avoid clicking links from unsolicited emails or messages referencing this domain. Report the site via your browser’s safe browsing tools or to PhishDestroy for further investigation.