Punycode Homograph Bridewell

Daniel Jeremiah@daniyyell

•updated Feb 25, 2026•0•43

Detects Booking.com partner phishing kit artifacts described by Bridewell (op_token complaint lures, tpo_token sign-in flow, booklng subdomain, punycode homograph infra).