Security Scan Report: mybooking-com.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 14 IPs in 2 countries across 9 domains to perform 47 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://mybooking-com.vercel.app/

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Booking.com clone on an unofficial vercel.app subdomain with login/register links and a single-source phishing report; no credential form captured on this page, but brand impersonation and phishing indicator make it high risk.

Risk Factors (4)
Unofficial vercel.app subdomain impersonating Booking.com branding and layout
Single-source phishing threat-intelligence match on the primary domain
Login/Register/extranet login links on a fake Booking.com clone
Page uses Booking.com title, footer copyright, and travel-booking content despite not being on booking.com
Domain age information unavailable

Details

Page Title

Booking.com

Scan Type

public

Domain Name Analysis

The domain 'mybooking-com.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'mybooking-com'. Count 6 characters in 'vercel' split between 2 vowels and 4 consonants. Segmentation suggests 2 words: ver, cel. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

</MyBooking.com> List your Property | world Easy.booking,.easy.living lem where are you going.? fH 31.10.2026 to 31.10.2026 #p Ladult - 0 children - 1 room | search | le Rome, Italy Istanbul, Tur...

Page Load Overview

0.71s
Total Load Time
4.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,056 chars
Detector Agreement:100%

Website Classification

Primary Category

real estate property74% confidence
Type: static
Method: ml+structural

All Detected Categories

real estate property
74%
travel tourism
50%
adult content
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
864.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
364.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
399.84.152.98Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
399.84.152.94Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
345.84.189.227Turkey
AS42846GNET Internet Telekomunikasyon A.S.
3104.18.4.165Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
399.84.152.80Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3104.18.5.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.20.16.167Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4714--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12F43E96271513477CF2B0696A35E1B2CB5B49587DE128D48F3FE45882FD2EF8230762A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:3UmSmemSm8mSmRmSmNXmSm4mSmkmSmewslo7BWixkgJYBkkDzmW5:ubI7BWgk5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:59861:JKA4NAWIAEykBqSqenQoqSOg8ImIINRSCaGoUA2mACIBQWJQKG4ZACSAOErGA4AAJuAINwZV4EgDcgiqEwCdDA3CwNDqUNJD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000800fffff3ff
Perceptual Hash:e51b2ca41b649be5
Difference Hash:2bd4d8489c06a627
Wavelet Hash:00000808fffff3ff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data