Security Scan: Booking.com scam messages: how to spot a fake

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/26897113-28cb-4ab1-a2a2-c128924b52b8 Domain and IP registration (RDAP)/api/v1/rdap/26897113-28cb-4ab1-a2a2-c128924b52b8How often this domain was scanned/api/v1/domain/stats/tapsafely.com Scan history for this domain/api/v1/domain/history/tapsafely.com?limit=15

This website contacted 22 IPs in 1 country across 11 domains to perform 65 HTTP transactions. The main domain is tapsafely.com and was registered 1 month ago.

Submitted URL: https://tapsafely.com/scams/booking-com-scam-messages

AI Security Verdict

Low Risk

Confidence: 62%

Risk Score

Legitimate-looking scam-awareness article about Booking.com phishing on a very new, unranked domain. No forms capture credentials or payment, no impersonation or malware signals; caution only due to domain youth.

Risk Factors (2)

Very new domain (16 days old) with no reputation history (Cisco Umbrella unranked)

Monetised via advertising scripts and affiliate 'Partner link' disclosure on a brand-new domain

Safety Factors (6)

No credential, password or payment form present (0 of each per verified form facts)

Article/news page (og:type=article) reporting on scams rather than imitating a brand

Site's own brand matches its domain — no impersonation of Booking.com or any other entity

No malware, phishing-kit, IDS or threat-intelligence indicators; no obfuscated or exfiltrating JavaScript

Content gives protective, standard anti-phishing guidance (password managers, two-step verification, official domains)

Verdict names no specific threat, and DOM analysis found no password field (real or disguised) or payment field and no other hard signal — elevated score unsupported; risk adjusted from 4 to 3

Domain age information unavailable

Details

Page Title

Booking.com scam messages: how to spot a fake | TapSafely

Scan Type

public

Favicon Hash

MMH3: 1622332273

MD5: 9a6434819ff13846f6eec6eb97df17ff

Domain Name Analysis

The domain 'tapsafely.com' uses the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'tapsafely' stretches across 9 characters split between 3 vowels and 6 consonants. Tokenizing the label suggests two words: tap, safely. Median word length is 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.88s

Total Load Time

1.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:10,619 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking46% confidence

Type: webapp

Method: ml+structural

All Detected Categories

finance banking

46%

phishing scam

43%

technology software

40%

social media network

40%

e-commerce shopping

37%

Detected Features

OG: article

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
23	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.20.97Google · CDN	United States	AS15169Google LLC
2	142.251.20.138Google · CDN	United States	AS15169Google LLC
2	142.251.127.154Google · CDN	United States	AS15169Google LLC
2	104.16.79.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.20.95Google · CDN	United States	AS15169Google LLC
2	142.251.110.94Google · CDN	United States	AS15169Google LLC
2	216.239.34.36Google · CDN	United States	AS15169Google LLC
2	142.251.20.155Google · CDN	United States	AS15169Google LLC
2	104.16.80.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
65	22	-	-