Skip to main content
Sandfish

Verify your email address to sign in | Booking.com

https://account.booking.com/otp/email-code?op_token=EgV…

Group9618571b-25c7-4f15-8e0b-282bc8533216submitted urlMember 1

Case summary

The target, observed result, and important findings.

Status
Current evaluation

Limited evidence: critical response missing, function fingerprint limit, identifier limit, interaction stalled

Findings
6Medium
Domain registration
hostel.townMore than 90 days oldRegistered 2026-04-21 · Registrar Spaceship, Inc.
Language
Detecting...
Network
420 requests across 26 hosts
Infrastructure
Loading...
Behavior
0 recorded events
Interaction
12 actions · 2 submissions · stopped: repeated state · download stage: no payload control
  1. 1. clicksucceededSelect dates
  2. 2. clicksucceededLog in or create an account
  3. 3. fillsucceededpassword | password | |
  4. 4. fillsucceededemail | username | Email address | Enter your email address
  5. 5. submitsucceededContinue with email
  6. 6. fillsucceededtext | code_0 | |
  7. 7. fillsucceededtext | code_1 | |
  8. 8. fillsucceededtext | code_2 | |
  9. 9. fillsucceededtext | code_3 | |
  10. 10. fillsucceededtext | code_4 | |
  11. 11. fillsucceededtext | code_5 | |
  12. 12. submitsucceededVerify email

Analysis metadata

How and when the analysis ran.

Input kind
url
Execution kind
capture
Duration
1.8m
Navigation
7 navigations
Engine version
0.4.0
Created
2026-10-24 19:05:04Z
Started
2026-10-24 19:05:05Z
Finished
2026-10-24 19:06:55Z
Archive
8.7 MB
Favicon source
html_link / favicon-v6
Analysis ID
de2ae638-77aa...

Signals by severity

Detected findings grouped by risk

Request activity

Network requests grouped by resource type

Behavior

Recorded actions grouped by type

Network contacts

Requests to the most active hosts

Request ownership

First-party and third-party requests

Response MIME types

Network responses grouped by MIME type