Security Scan Report: whitesandhimandhoo.com

Redirected to:
https://www.booking.com/searchresults.en-us.html?aid=1607597&label=esp...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 50 IPs in 1 country across 21 domains to perform 293 HTTP transactions. The main domain is whitesandhimandhoo.com and was registered 4 days ago.

Submitted URL: http://whitesandhimandhoo.com/

Effective URL:
https://www.booking.com/searchresults.en-us.html?aid=1607597&label=esp...
Redirected

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

Affiliate redirect funnel via a newly registered third-party redirector, but the final page is authentic Booking.com search results with no credential or payment forms and no threat-intel hits.

Risk Factors (2)
Cross-domain redirect chain routed through a third-party redirector (red.buiigo.com) registered only ~44 days before the scan, which is not controlled by either end brand
Entry domain is a hotel-branded site whose sole apparent purpose is to funnel visitors to an affiliate-tagged Booking.com URL
Safety Factors (4)
Final destination is the official Booking.com domain serving authentic search results for Himandhoo
No credential, login or payment form present; the only form is Booking's own search form posting to booking.com
No Indicators of Compromise, hunting rule, IDS or Safe Browsing hits
No cross-origin credential exfiltration detected
Domain age information unavailable

Details

Page Title

Booking.com: Hotels in Himandhoo . Book your hotel now!

Scan Type

public

Domain Name Analysis

You're looking at domain 'whitesandhimandhoo.com' on the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'whitesandhimandhoo' stretches across 18 characters with 7 vowels and eleven consonants. Splitting it apart reveals 5 words: whites, and, him, and, hoo. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Booking.com @ © _ Listyour property ‘> Flights ® Car rental B Activities Airport taxis {By Enter destination ich Select dates (© Select occupancy Himandhoo * | [ED check-in date — Check-out date >)...

Page Load Overview

1.50s
Total Load Time
6.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:18,110 chars
Detector Agreement:95%

All Detected Languages

🇺🇸en(100%)🇫🇷fr(0%)

Website Classification

Primary Category

real estate property43% confidence
Type: spa
Method: ml+structural

All Detected Categories

real estate property
43%
adult content
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15518.245.31.18Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4854.192.35.29Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3854.192.35.46Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3313.226.244.62Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1352.222.136.83Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1065.9.130.18Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
818.245.60.49Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
7104.18.86.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.67.220.29Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
29350--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T141552916E2015837465B42C268766FAB33ED452EFD560EA4E7EC0F7C07CAC9BB603169

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:SCUYLA43bn7SWSq0hqtP866gmbn3kANcMeXGoHDK9gdv7sOo6QIVAN4KORCbwHrk:SCd3aXhqtOgmbs78DHMeKEiVjRwz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1328909:qAIlJ2KSECUAg6chHAsJEgoIK0ikxiIBLBCKBYEK60WBoIRVA0ohAUAh7QCVkJQaVCOoCiOQaPDNzw7EJALFEQROQzAWUiAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00009fbdbdefc1cf
Perceptual Hash:994c3367cc193637
Difference Hash:c50b3233331b5b18
Wavelet Hash:00819fbdbdad818f
Color Hash:06000000180

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data