Security Scan Report: xn--htels-6ta.de

Redirected to:
https://www.hotelbooking.de/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 3 domains to perform 86 HTTP transactions. The main domain is xn--htels-6ta.de and was registered 2 years 6 months ago.

Submitted URL: https://xn--htels-6ta.de

Effective URL:
https://www.hotelbooking.de/
Redirected

AI Security Verdict

Safe Website

Confidence: 82%

1
Risk Score

Hotelbooking.de is a hotel-booking portal that openly references Booking.com as a partner. No credential/payment forms, threat-intel hits, malware patterns, or other concrete phishing signals were found.

Safety Factors (5)
No credential or payment forms detected
Clear disclosure of Booking.com partnership rather than impersonation
No indicators of compromise or malware patterns
No suspicious JavaScript behavior or cross-origin credential exfiltration
Content matches a normal hotel-booking affiliate/portal site
Domain age information unavailable

Details

Page Title

Hotelbooking.de I Hotels und Unterkünfte günstig buchen

Scan Type

public

Domain Name Analysis

Domain 'xn--htels-6ta.de' uses the German country-code top-level domain (.de) with no subdomain. The second-level label 'xn--htels-6ta' is 13 characters long holding 2 vowels versus 7 consonants, notching one digit and 3 hyphens. Word splitting yields 6 words: xn, h, tel, s, 6, ta. Median word length is 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xn--htels-6ta.de

Page Load Overview

3.93s
Total Load Time
7.4 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:18,581 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical43% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
43%
technology software
39%
corporate
35%
news/blog
20%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1685.13.165.132Germany
AS34788Neue Medien Muennich GmbH
1454.192.35.29Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1418.245.86.88Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1454.192.35.113Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1454.192.35.7Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1454.192.35.46Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
866--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15A44C872BF472838220F43AF501B630C62C6DEE9E626A8D1F5B3623176B5CE173D1959

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:rhjOrt5Ub4jKc59SIHXQT33t4e8DrYPPf8CXzcsG0E1Q5c3k6IkoCuUU:rhjqjKc5pXQT33t4s

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:259805:cCCvyECWtgEAxGnINQgAUaECzQbJiDIABLjRIGAQLYCAA0MBIAgAEWyEgAQjBI7mmAyYwsQ7hMFBXIMDSG0jAJzXikoBQKZA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffffcbc3ff
Perceptual Hash:a9426669c7bc9c63
Difference Hash:e9d12b2a1b333317
Wavelet Hash:000001ffffc3c3fb
Color Hash:#2d5f86

Scan History

Scan history not available

Unable to load historical scan data