Security Review

Is hotels.com legit or a scam?

Our verdict:Safe· 97/100

Hotels.com is a legitimate global travel booking platform with over 30 years of history and an A+ rating from the Better Business Bureau.

hotels.comScanned 2h ago
0
Trust score
SAFE
Heuristics 100·MT 95
View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
32 years old
Registered Mar 30, 1994
MT Intelligence
Safe
Low likelihood · 98% confidence
SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Website Preview

Screenshot of hotels.com
LIVE RENDER
hotels.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Low scam likelihoodengineMT · Guardiantrust95/100
MT AgentLive web researchVisual inspection
0%
Confidence
The domain has been registered for over 32 years and is a primary subsidiary of the Expedia Group. Our analysis confirms it is a verified business with active registrations and a physical headquarters in Dallas, Texas. While some users report frustrations with refunds or customer service on platforms like Reddit and Tripadvisor, these are standard consumer disputes for a company of this scale. There are no signs of phishing, malware, or fraudulent intent. The site maintains a high global traffic rank and is recognized as a major industry player.
Full dossier
Analysis complete

Page Content

The site is a fully functional travel booking engine offering hotel reservations, vacation rentals, and a loyalty rewards program. It features localized content, secure checkout flows, and clear links to its parent company, Expedia Group.

Infrastructure

The domain is hosted on high-reputation infrastructure with no history of abuse reports. It utilizes a valid SSL certificate and shows no signs of malicious redirects or homoglyph impersonation.

Domain History

Registered in 1991, this is one of the oldest and most established domains in the travel industry. It has a transparent ownership history and is managed by a corporate domain registrar.

Web Reputation

The business is BBB Accredited with an A+ rating. While thousands of complaints exist across review aggregators, they focus on service issues rather than security threats. Our antivirus network shows zero detections across all major engines.
Risk Factors
2
  • High volume of consumer complaints regarding refunds and booking changes on third-party review sites.
  • Frequent target for phishing impersonators who create fake support numbers to scam customers.
Positive Signals
5
  • Domain age of over 32 years indicates extreme stability and legitimacy.
  • Owned by Expedia Group, a publicly traded and well-regulated travel company.
  • BBB Accredited since 2000 with an A+ rating.
  • Zero detections across 92 antivirus engines in our security network.
  • Top-tier global traffic ranking confirms it is a widely used and trusted service.
AI Recommendation
This site is safe to use for travel bookings. Always ensure you are on the official hotels.com domain and avoid calling support numbers found in unsolicited emails or social media comments.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for hotels.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
32 yrs
Registered Mar 1994
Business registration
Active · United States
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
3 scam reports · 1730 complaints · 3 positive
Key findings
7 headline facts from open-web research
  • Official hotel booking site founded in 1991 as Hotel Reservations Network (HRN) in Dallas, Texas; renamed Hotels.com in 2002; subsidiary of Expedia Group since 2005.
  • BBB Accredited since April 2000 with A+ rating; 35 years in business; located at 5400 LBJ Fwy Ste 500, Dallas, TX 75240.
  • Trustpilot page for www.hotels.com shows thousands of reviews (11,791 mentioned) with mixed feedback; common complaints about booking process, refunds, and customer service.
  • Significant complaints documented: 1,730 BBB complaints in last 3 years; Reddit and Tripadvisor threads calling it a "scam" over prepaid booking failures, refunds, and review editing.
  • Past incidents include 2006 data breach (243,000 customers affected, no fraud reported), 2007 class-action lawsuit over accessible room bookings (settled), and warnings about fake Hotels.com phone numbers/phishing impersonating the brand.
  • Company actively warns users on its site about fraud and fake support numbers; many positive user experiences reported on Facebook and elsewhere citing rewards program and responsive service in some cases.
  • Domain age of ~32 years (11775 days) aligns with legitimate long-standing business; no evidence of typosquatting or cloning of this exact domain.
Scam reports (3)
Direct quotes from public scam databases, forums, and news.
  • Tripadvisoropen

    "Hotels.com is a scam. They will tell you one thing and do something else. I prepaid for a hotel, through their site , and when I arrived the ..."

  • Redditopen

    "Hotels.com becoming a non-trustworthy corporation. ... Try to deal with Hotels.com to get the refund back."

  • Redditopen

    "I have placed a review on hotels .com and they got back to me saying it needs "editing" due to use of profanity. I literally just wrote "scammer ..."

Positive reviews (3)
Quotes indicating the site is legitimate.
  • Facebookopen

    "I've used Hotels dot com lots of times and it's always been a good experience. After ten nights, you get one night free. Their customer service has always been positive too."

  • Facebookopen

    "I use them all the time. Just used them for 2 trips in less than 2 months and all is good."

  • "Hotels.com is BBB Accredited. BBB Rating A+"

Business registration
Status: active · United States

Hotels.com, L.P. founded 1991 in Dallas, TX; subsidiary of Expedia Group; BBB accredited since 2000 with A+ rating; address 5400 LBJ Fwy Ste 500, Dallas, TX

Research summary
Narrative write-up from our AI analyst, grounded on the facts above
Our research confirms Hotels.com is an official travel site founded in 1991 and owned by Expedia Group. It is BBB Accredited with an A+ rating, though it has a high volume of documented consumer complaints on Reddit and Tripadvisor regarding customer service and booking issues. These complaints are typical for large-scale travel aggregators and do not indicate a fraudulent website.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious62Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Domain & Encryption

Domain History
Age32 years old
RegistrarCSC Corporate Domains, Inc.
RegisteredMar 30, 1994
ExpiresMar 31, 2027
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerLet's Encrypt · R13
ExpiresJul 7, 2026 (12d)
Self-signedNo
Hosting & Technology
HostingAkamai Technologies, Inc.
Server locationUS
PopularityTop 100k worldwide

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPAkamai Technologies, Inc.
Usage typeData Center/Web Hosting/Transit

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

  • Double-check the exact URL in your address bar

    Confirm you are actually on hotels.com and not a lookalike like h-otels.com.com or an IDN homoglyph.

  • Use a password manager

    Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.

  • Discuss this site on the forum

    If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review found no threat indicators on hotels.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
  • hotels.com passed our automated security checks with a trust score of 97/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
  • Yes. hotels.com presents a valid TLSv1.3 certificate issued by Let's Encrypt · R13, expiring in 12 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • hotels.com is 32.3 years old, registered on 3/30/1994 through CSC Corporate Domains, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report hotels.com as clean.
  • No. hotels.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • hotels.com resolves to an IP operated by Akamai Technologies, Inc. in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • Yes. hotels.com sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.

Final Verdict

0
Trust / 100
Final Verdict·hotels.com
SAFE

Hotels.com is a legitimate, long-standing global travel booking platform owned by Expedia Group. While it has a high volume of customer service complaints typical for a massive travel agency, it is a verified business operating since 1991.

This site is safe to use for travel bookings. Always ensure you are on the official hotels.com domain and avoid calling support numbers found in unsolicited emails or social media comments.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Safe reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.