Skip to main content
Sandfish

Verify your email address to sign in | Booking.com

https://account.booking.com/otp/email-code?op_token=EgV…

Groupde4e215a-33b2-4038-aaae-02332203d200submitted urlMember 1

Case summary

The target, observed result, and important findings.

Status
Current evaluation

Score 20: risk 25 less 5 for assurance evidence.

Limited evidence: critical response missing, identifier limit, interaction stalled

Findings
8Medium
Domain registration
spahotel.guruMore than 90 days oldRegistered 2024-08-02 · Registrar Spaceship, Inc.
Language
Detecting...
Network
435 requests across 25 hosts
Infrastructure
Loading...
Behavior
0 recorded events
Interaction
12 actions · 2 submissions · stopped: repeated state · download stage: no payload control
  1. 1. clicksucceededSelect dates
  2. 2. clicksucceededLog in or create an account
  3. 3. fillsucceededpassword | password | |
  4. 4. fillsucceededemail | username | Email address | Enter your email address
  5. 5. submitsucceededContinue with email
  6. 6. fillsucceededtext | code_0 | |
  7. 7. fillsucceededtext | code_1 | |
  8. 8. fillsucceededtext | code_2 | |
  9. 9. fillsucceededtext | code_3 | |
  10. 10. fillsucceededtext | code_4 | |
  11. 11. fillsucceededtext | code_5 | |
  12. 12. submitsucceededVerify email

Analysis metadata

How and when the analysis ran.

Input kind
url
Execution kind
capture
Duration
2.2m
Navigation
6 navigations
Engine version
0.4.0
Created
2026-10-22 15:49:20Z
Started
2026-10-22 15:49:21Z
Finished
2026-10-22 15:51:35Z
Archive
9.6 MB
Favicon source
html_link / favicon-v4
Analysis ID
45bd80de-d2a3...

Signals by severity

Detected findings grouped by risk

Request activity

Network requests grouped by resource type

Behavior

Recorded actions grouped by type

Network contacts

Requests to the most active hosts

Request ownership

First-party and third-party requests

Response MIME types

Network responses grouped by MIME type