Security Report: bookingkit.de - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/15be85c4-bfcc-4a83-8e69-9713748f9e62 Domain and IP registration (RDAP)/api/v1/rdap/15be85c4-bfcc-4a83-8e69-9713748f9e62How often this domain was scanned/api/v1/domain/stats/bookingkit.de Scan history for this domain/api/v1/domain/history/bookingkit.de?limit=15

This website contacted 4 IPs in 2 countries across 25 domains to perform 26 HTTP transactions. The main domain is bookingkit.de.

Submitted URL: https://bookingkit.de

Effective URL:

https://bookingkit.com/de/

Redirected

The Cisco Umbrella rank of the primary domain is #755,387 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 72%

Risk Score

Likely legitimate bookingkit site, but a critical YARA hit for a Keitaro TDS loader hidden via atob(), plus the unranked script host pleasewaitcenter.top, indicates injected malicious script. Treat as compromised; avoid entering data.

Risk Factors (2)

Critical high-precision YARA rule DeepVein_Keitaro_Hidden_Async_Loader matches page scripts (hidden Keitaro traffic-distribution loader)

Unranked external script host pleasewaitcenter.top loads JavaScript alongside the flagged loader, consistent with attacker-controlled injection into an otherwise legitimate site

Domain age information unavailable

Details

Page Title

Online Buchungssoftware für Attraktionen | bookingkit

Scan Type

public

Favicon Hash

MMH3: 916696573

MD5: de69dffa66ab2a0a4e70431fbdf15ba0

Domain Name Analysis

The domain 'bookingkit.de' uses the German country-code top-level domain (.de). Count 10 characters in 'bookingkit' split between 4 vowels and six consonants. Breaking it apart gives 2 words: booking, kit. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.32s

Total Load Time

1.8 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de-DE

Text Length:12,803 chars

Detector Agreement:80%

Website Classification

Primary Category

corporate business49% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

49%

technology software

46%

travel tourism

39%

corporate

25%

news/blog

20%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	18.195.77.244Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
6	104.16.6.65Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	18.193.151.6Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
6	52.28.254.205Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
26	4	-	-