Lookalike Domain Analysis

Detailed risk assessment for bookingbuilder.space

Back to Report
Domain Information
Lookalike Domain
bookingbuilder.space
Legitimate Domain (Target)
booking.com
Travel confirmation fraud
Registrar
Go Daddy, LLC
Website Status
Offline
Detection Date
February 28, 2026 03:00
Domain Creation Date
February 26, 2026
RDAP Takedown Status
Active
Discovery Method
Registrar Feed (Regex)
DNS Records
Nameservers
ns67.domaincontrol.com., ns68.domaincontrol.com.
MX Records (Mail Servers)
netorgft20169309.mail.protection.outlook.com. Dangerous Provider
SPF Record (Email Authentication)
v=spf1 include:spf.protection.outlook.com -all
Risk Score Breakdown

This risk score shows how dangerous this lookalike domain is. Higher scores indicate more active threats. Each indicator below adds points to the score (max 100).

Talos Blacklist

Not on Talos blacklist

+0
Dangerous Registrar

Registrar 'Go Daddy, LLC' not on dangerous list

+0
Dangerous Email Provider

MX record matches flagged provider: outlook

+10
MX Records Configured

Email servers configured: netorgft20169309.mail.protection.outlook.com.

+15
SPF Records

SPF authentication configured with sending directives

+15
Website is Live

Website status: Offline

+0
Website is Parked

Website status: Offline

+0
Website is Phishing

Website status: Offline

+0
Very Recent Registration

Domain registered 22 days ago (less than 30 days)

+10
Total Score: 10 / 100
4 of 9 factors active
Threat Level
10 / 100
Low Risk

Low threat level. Continue monitoring but no immediate action needed.

Risk Increase Detected
Score went from 50 to 60 · 2 weeks, 2 days ago
Dangerous Email Provider appeared (+10pts)
MX Records appeared (+15pts)
SPF Records appeared (+15pts)
Very Recent Domain appeared (+10pts)
Website Live appeared (+10pts)
Key Threat Signals
  • Talos Blacklisted No
  • Website Active No
  • Email Capability Enabled
  • Email Authentication Configured
  • Taken Down No
Related Threats

Other domains attacking booking.com

Remove This Threat

Our specialist team removes malicious domains in 24-48 hours.

Start Takedown Process
Daniel Hovasse
Need Help?
Contact our expert
Daniel Hovasse
Detect Lookalike Domains

Find domains that impersonate your brand. Scan for lookalike domains that could be used for phishing or fraud.

Scan for Lookalikes