ScanMalware.com

Security Scan Report: agoda-connect.vercel.app

Site favicon
Submitted: Sep 26, 2026, 1:50:33 PMCompleted: Sep 26, 2026, 1:52:58 PMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 55%

5
Risk Score

Reproduces Agoda's partner-page branding on a non-official vercel.app host, but collects nothing — no forms, no credential fields. Brand mismatch alone caps this at moderate risk; verify via agoda.com before engaging.

Risk Factors (3)
Agoda brand, logos and verbatim partner copy used on a domain that is not Agoda's official domain
Hosted on a free/instant subdomain (vercel.app) where subdomain age is unknown and impersonation microsites are cheap to publish
Domain not present in Cisco Umbrella top 1M rankings
Safety Factors (3)
No credential, login or payment form exists on the page to harvest data
Interactive links resolve to genuine Agoda-controlled resources (ycs.agoda.com, agodapropertypartnerhelp.zendesk.com)
No JavaScript malware patterns, no malware IoC matches, and no credential exfiltration detected
Domain age information unavailable

Details

Page Title

Agoda Connect

Scan Type

public

Domain Name Analysis

The domain name 'agoda-connect.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'agoda-connect'. Its registrable label 'vercel' stretches across 6 characters split between 2 vowels and 4 consonants. Splitting it apart reveals 2 words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://agoda-connect.vercel.app/

Page Load Overview

9.08s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,588 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business60% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
60%
travel tourism
34%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
7142.251.14.97Google · CDNUnited States
AS15169Google LLC
723.52.182.40Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
764.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
7216.239.32.36Google · CDNUnited States
AS15169Google LLC
7142.251.110.101Google · CDNUnited States
AS15169Google LLC
426--

Detected Technologies6

Open-Graph-Protocolvwebsite
100%
Google-Tag-Manager
100%
Google-AnalyticsvUniversal
100%
Google Analytics
55%
Vercel
40%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EB62E762EE44DD6B8113088BA5A3F749B1ABB11ECE32C908F7FC868417D1EE2875165D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:/oWEerdB/15jWILAq5CieY1tZN0BMbGsfobq:OerdB/DjWILAq5CieGtZN0+Hf4q

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14857:wqJCA5JSiHMIZoF0AADpVFTOmEACOAjhRgCAAJAaAxIIFSIlByASDkg4RVAhGTIGCQC1AzXUK7RtpA4kpghDEEgAowAAUqmo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000000ffffffff
Perceptual Hash:921393a5270fadad
Difference Hash:699969699404a105
Wavelet Hash:00000000ffffffff
Color Hash:#79d2c2

Other Hashes

Crop Resistant:699969699404a105,6969899959296959

Scan History

Scan history not available

Unable to load historical scan data