Security Scan Report: www.princehotels.co.jp

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 11 HTTP transactions. The main domain is princehotels.co.jp and was registered 21 years ago.

Submitted URL: https://www.princehotels.co.jp/shinyokohama/wedding/360view/fantasia.html?xml=data%3Avideo%2Fmp4%3Bbase64%2CPGtycGFubz48aW5jbHVkZSB1cmw9Ii8vbHVlOTM3Mmx1Y2FzLmdpdGh1Yi5pby91Y2xvbnR2L2ZpbGUyLnhtbCIvPjwva3JwYW5vPg%3D%3D&id=RC-Lens-vs-Como-liv-str-HPLg1691

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Official Prince Hotels page, but this URL carries a crafted base64 krpano include to an external github.io host plus spam keywords — an injection/spam-abuse pattern, not a normal tour link. No forms or malware on the page.

Risk Factors (3)
Base64-obfuscated external XML include (github.io) injected via URL parameter into a legitimate virtual-tour page
Streaming/match-spam keyword parameter appended to the URL
Legitimate hotel site appears to be abused as a redirect/injection vehicle for third-party spam content
Safety Factors (5)
Host domain is the official Prince Hotels corporate domain
No credential, login or payment forms on the page
No threat-intelligence, hunting rule, kit-roster or Suricata matches
No cross-origin script traffic or credential exfiltration observed
Injected payload failed to load (404); page itself displays only an error message
Domain age information unavailable

Details

Page Title

ファンタジア

Scan Type

public

Domain Name Analysis

Within the Japanese country-code top-level domain (.co.jp), 'www.princehotels.co.jp' is registered, featuring subdomain 'www'. Count 12 characters in 'princehotels' with 4 vowels and 8 consonants. Splitting it apart reveals two words: prince, hotels. Median word length comes out to six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.princehotels.co.jp/shinyokohama/wedding/360view/fantasia.html?xml=data%3Avideo%2Fmp4%3Bbase64%2CPGtycGFubz48aW5jbHVkZSB1cmw9Ii8vbHVlOTM3Mmx1Y2FzLmdpdGh1Yi5pby91Y2xvbnR2L2ZpbGUyLnhtbCIvPjwva3JwYW5vPg%3D%3D&id=RC-Lens-vs-Como-liv-str-HPLg1691

Page Load Overview

1.14s
Total Load Time
192 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:336 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software90% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
90%
documentation technical
75%
cryptocurrency blockchain
69%
travel tourism
57%
entertainment media
37%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1145.60.64.4Incapsula · WAFUnited States
AS19551Incapsula Inc
111--

Detected Technologies4

100%
JQueryv1.11.1
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AC22D760AF4C5D09801E5064B932A2DCB33FE572FA0549DD3DE6B812E6CC9AD512B1F1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:IcehgH2ngyTn3LOXwRR6ZMW5RB62+F0B37xdH7dbt30t:XehP3LgwRR6D62+C3NdBFg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9926:FCATJMw0BFAiEtIBinwEACUSBTgIAUsFiIYI8C2EeaIK/V4ZFMHgJQQhIAiEEABNCa6gFrFCaS5EZgjIeQDARCSgIxHxDA5Q

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000ffff000000
Perceptual Hash:c3b83c43c3bc3cc3
Difference Hash:000000d0d0000000
Wavelet Hash:0000fcffffe00000
Color Hash:#931f53

Other Hashes

Crop Resistant:000000d0d0000000

Scan History

Scan history not available

Unable to load historical scan data