Bookedin: what a buyer should know before wiring $1,000,000

What. Stripe-verified revenue for the last 30 days is $5,757. Stated MRR is $13,080. A healthy subscription business shows the two within 10 to 20 percent of each other. A 56 percent gap means one of two things: customers are cancelling faster than the MRR figure has caught up, or MRR is propped up by annual subscriptions that were paid months ago and count as recurring today. Reproduce. Open the public TrustMRR card for bookedin. Compare "Last 30 days" revenue with MRR. Both come from the connected Stripe key, synced 2026-09-04 20:46 UTC. Evidence. TrustMRR markdown card: revenue last 30 days $5,757, MRR $13,080, all-time $305,570, 100 active subscriptions. Ratio 0.44. Meaning for the buyer. The asking price is built on $13k MRR. The cash actually arriving is $5.8k a month. At the current run rate, the multiple you are really paying is closer to 14x annual cash, which is what the seller's own card shows (14.5x). Ask for month-by-month Stripe before any number is discussed.

What. The public site advertises done-for-you setup and consulting alongside the product. Revenue from those lines is labor sold by the current owner, not software. It does not transfer with a repository. Reproduce. Read the homepage copy on bookedin.ai; search for "done-for-you" and "consulting". Evidence. Text of the homepage and pricing section, captured September 5, 2026: both markers present. Meaning for the buyer. You need the split: how much of the $13k MRR (and of the $305k lifetime) came from software subscriptions versus setup, onboarding or consulting invoices. If a third of revenue is service, the software business is worth a third less, and the seller's time is the actual product.

What. bookedin.ai was registered on 2025-02-14 and expires 2027-02-14. The product itself reports 38 months of revenue history. The current domain is younger than the business, which usually means a rebrand or a domain change. Reproduce. RDAP lookup for bookedin.ai (rdap.org). Evidence. RDAP record: registered 2025-02-14, expiration 2027-02-14, 161 days left at the time of the check. Meaning for the buyer. Two questions: what was the previous domain and does it still redirect (SEO equity, customer bookmarks, transactional email), and who controls the registrar account. Renew the domain for several years as a closing condition.

What. The domain publishes SPF but no _dmarc TXT record. The homepage response has no Content-Security-Policy, X-Frame-Options, X-Content-Type-Options or Referrer-Policy. Reproduce. dig TXT _dmarc.bookedin.ai @1.1.1.1 returns nothing. curl -sI https://bookedin.ai/ shows none of the four headers. Evidence. DNS and header captures, September 5, 2026. Meaning for the buyer. Without DMARC, transactional emails (booking confirmations, receipts) are more likely to land in spam, and the domain can be spoofed in phishing to the product's own customers. The headers are a one-hour fix. Together they say the public surface has never had a security pass.

What. /pricing and /plans return 404; /contact and /support return 404. Prices exist only inside the homepage. The console shows three failed requests (HTTP 403) to a third-party funnel tracker. Reproduce. Open the four URLs. Load the homepage with the browser console open. Evidence. HTTP status captures and console log, September 5, 2026. Meaning for the buyer. Cosmetic on its own. Combined with F-04 it points at a marketing site that is maintained lightly. Budget for a cleanup after transfer.