reservation-status-id532632337[.]com

This domain, reservation-status-id532632337.com, is a phishing site designed to mimic the official Booking.com platform. The site presents a fraudulent login interface under the page title 'Booking.com | Official website | Best hotels and accommodation,' aiming to deceive users into entering their account credentials, payment details, or personal information. The threat primarily targets travelers, hotel guests, and frequent users of online booking services, exploiting trust in the Booking.com brand to facilitate credential theft, financial fraud, or identity compromise. Analysis indicates the domain was registered on November 07, 2025, through Dominet (HK) Limited, a registrar frequently associated with abusive domain registrations. The site lacks a valid SSL certificate, a critical security red flag for any legitimate login portal. Infrastructure analysis reveals the domain resolves to IP address 104.21.42.152, hosted on Cloudflare’s network (AS13335), which is commonly used to obscure malicious infrastructure. VirusTotal detection shows 17 out of 95 security vendors flag the domain as malicious, while it appears on two security blocklists, including PhishDestroy and PhishingDB. The combination of recent registration, missing encryption, and vendor detections confirms the elevated risk level. If a user visited reservation-status-id532632337.com and entered credentials or payment details, immediate action is required. First, change passwords for Booking.com and any other accounts where the same credentials were reused. Enable multi-factor authentication where available to mitigate unauthorized access. Monitor financial statements and credit reports for unauthorized transactions, as stolen payment details may be used for fraud. Report the incident to the legitimate platform’s security team and consider filing a report with local cybercrime authorities or consumer protection agencies. Users should also scan their devices for malware, as some phishing sites deploy malicious scripts to harvest additional data.