Skip to main content
Sandfish

Verify your email address to sign in | Booking.com

https://account.booking.com/otp/email-code?op_token=EgV…

Groupdbe2b6ec-019e-4e6b-b7d4-6a70cae1fc08submitted urlMember 1

Case summary

The target, observed result, and important findings.

Status
Current evaluation

Limited evidence: critical response missing, function fingerprint limit, identifier limit, interaction stalled

Findings
6Medium
Domain registration
hostel.townMore than 90 days oldRegistered 2026-04-21 · Registrar Spaceship, Inc.
Language
Detecting...
Network
422 requests across 25 hosts
Infrastructure
Loading...
Behavior
0 recorded events
Interaction
12 actions · 2 submissions · stopped: repeated state · download stage: no payload control
  1. 1. clicksucceededSelect dates
  2. 2. clicksucceededLog in or create an account
  3. 3. fillsucceededpassword | password | |
  4. 4. fillsucceededemail | username | Email address | Enter your email address
  5. 5. submitsucceededContinue with email
  6. 6. fillsucceededtext | code_0 | |
  7. 7. fillsucceededtext | code_1 | |
  8. 8. fillsucceededtext | code_2 | |
  9. 9. fillsucceededtext | code_3 | |
  10. 10. fillsucceededtext | code_4 | |
  11. 11. fillsucceededtext | code_5 | |
  12. 12. submitsucceededVerify email

Analysis metadata

How and when the analysis ran.

Input kind
url
Execution kind
capture
Duration
1.7m
Navigation
7 navigations
Engine version
0.4.0
Created
2026-10-22 17:48:19Z
Started
2026-10-22 17:59:22Z
Finished
2026-10-22 18:01:05Z
Archive
9.1 MB
Favicon source
html_link / favicon-v4
Analysis ID
422ed649-cd0e...

Signals by severity

Detected findings grouped by risk

Request activity

Network requests grouped by resource type

Behavior

Recorded actions grouped by type

Network contacts

Requests to the most active hosts

Request ownership

First-party and third-party requests

Response MIME types

Network responses grouped by MIME type