Indicator of Compromise
Booking[.]com
A domain observed in malicious infrastructure. Block or monitor it in DNS and web proxies. Shown defanged for safe viewing; use Copy live value for the functional form.
Included in the Domains feed (live, machine-readable).
Seen in these reports
Cl0p’s South Staffs Water Case Shows SOC Coverage Must Be Proven
PDFSider: The Stealthy Backdoor Targeting Fortune 100 Financial Institutions
Prior to Cyber Attack, Russian Attackers Spent Months Inside the Ukraine Telecoms Giant
Related indicators
Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.