ScanMalware.com

Security Scan Report: www.ihg.com

Site favicon
Submitted: Sep 15, 2026, 1:43:22 AMCompleted: Sep 15, 2026, 1:44:21 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c9e18807-0e59-4ed1-bc99-0dd6671f8fd1Domain and IP registration (RDAP)/api/v1/rdap/c9e18807-0e59-4ed1-bc99-0dd6671f8fd1Certificate Transparency/api/v1/ct/ihg.comHow often this domain was scanned/api/v1/domain/stats/ihg.comScan history for this domain/api/v1/domain/history/ihg.com?limit=15

This website contacted 38 IPs in 2 countries across 39 domains to perform 310 HTTP transactions. The main domain is ihg.com and was registered 30 years ago.

Submitted URL: https://www.ihg.com/crowneplaza/hotels/us/en/find-hotels/select-roomrate?fromRedirect=true&qSrt=sBR&qMsg=Stay%203,%20Pay%202%20with%20IHG%20Hotels%20&qSlH=hbaho&qAAR=IDCG2&qRtP=IDCG2&setPMCookies=true&qSHBrC=CP&qDest=110%20Liverpool%20Street,%20Hobart,%20TAS,%20AU&qpMbw=3&qpMn=3&scmisc=ltfbooking_hbaho_stay-3,-pay-2-with-ihg-hotels-&cm_sp=WEB-_-CP-_-HOTELDETAIL-HOTEL-OFFERS-_-MODGRP1-1-_-US-EN-_-REV-_-EAPACLUX_20262874-_-&srb_u=1&qRmFltr=&utm_source=revinate&utm_medium=email&utm_campaign=Stay%203%20Pay%202%20-%20September%202026-920324

The Cisco Umbrella rank of the primary domain is #27,173 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 96%

0
Risk Score

Official IHG/Crowne Plaza Hobart booking page on the 28-year-old ihg.com domain. No credential or payment forms, no threat-intel hits, no malware — legitimate hotel booking flow.

Safety Factors
Well-established domain (28 years old, registered 1998)
Ranked ~27K in Cisco Umbrella (top 100K)
LIKELY LEGITIMATE BUSINESS legitimacy assessment with physical address and legal info
No phishing indicators, no malware, no threat-intel matches
ML phishing classification at 48% is weak/noisy and outweighed by the site being the brand's own official domain
Domain age information unavailable

Details

Page Title

Select your room

Scan Type

public

Domain Name Analysis

The domain name 'www.ihg.com' uses the commercial generic top-level domain (.com), featuring subdomain 'www'. The registrable portion 'ihg' spans 3 characters holding 1 vowel versus 2 consonants. Splitting it apart reveals 2 words: i, hg. Average segment length settles at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.ihg.com/crowneplaza/hotels/us/en/find-hotels/select-roomrate?fromRedirect=true&qSrt=sBR&qMsg=Stay%203,%20Pay%202%20with%20IHG%20Hotels%20&qSlH=hbaho&qAAR=IDCG2&qRtP=IDCG2&setPMCookies=true&qSHBrC=CP&qDest=110%20Liverpool%20Street,%20Hobart,%20TAS,%20AU&qpMbw=3&qpMn=3&scmisc=ltfbooking_hbaho_stay-3,-pay-2-with-ihg-hotels-&cm_sp=WEB-_-CP-_-HOTELDETAIL-HOTEL-OFFERS-_-MODGRP1-1-_-US-EN-_-REV-_-EAPACLUX_20262874-_-&srb_u=1&qRmFltr=&utm_source=revinate&utm_medium=email&utm_campaign=Stay%203%20Pay%202%20-%20September%202026-920324

Page Load Overview

6.44s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:14,479 chars
Detector Agreement:100%

Website Classification

Primary Category

real estate property56% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

real estate property
56%
documentation technical
49%
phishing scam
48%
healthcare medical
47%
adult content
45%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1492.123.104.39Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
82.23.245.90Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
823.37.192.105Akamai · CDNBerlin, State of Berlin, Germany
AS16625Akamai Technologies, Inc.
83.225.191.53Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
8172.217.113.4Google · CDNUnited States
AS15169Google LLC
892.123.104.44Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
865.8.131.50Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
834.192.191.43Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
895.100.110.8Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
818.173.205.70Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
31038--

Detected Technologies5

Node.js
50%
HSTS
40%
Express
40%
Akamai
40%
AWS WAF
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FFE196000817E588B5128C9EABCB7F25C50E214F1645E435BFF62E1ACDFAD728399B5E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:PqcRkwTYZwwYuwxYVw/YgYNYHoNYi1FZnNYbNYeuVvNY/NYxJc+ubNYRN9TNYJW7:PXGosdsH1RajVOeBFocXzr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7079:amAWMoZmCgpQKBYNAIRkAFAkCBCIIlCIxKoARCFAAwZgAQTIEk4QwowDETBGEMABAoBAQSSI0XyADCQMizAEIFAtCgII6FSk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0f1fffffffffffff
Perceptual Hash:830303030b1bffff
Difference Hash:f060000000000000
Wavelet Hash:0010f0f0f0f0f0f0
Color Hash:#2d862e

Other Hashes

Crop Resistant:f060000000000000

Scan History

Scan history not available

Unable to load historical scan data