Security Scan Report: ferienwohnung-portal.de

Submitted: Mar 21, 2026, 6:46:03 PMCompleted: Mar 21, 2026, 6:47:10 PMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 1 country across 5 domains to perform 19 HTTP transactions. The main domain is ferienwohnung-portal.de.

Submitted URL: https://ferienwohnung-portal.de/agb/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Site harvests credentials via obfuscated JavaScript; treat as high‑risk phishing and do not submit any data.

Risk Factors
Credential exfiltration to an external server
Password field on a site with unknown/very new domain
Unranked domain indicating low reputation
Highly obfuscated JavaScript likely hiding malicious behavior
Domain age information unavailable

Details

Page Title

AGB – Ferien-Portal

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

social media network

(96%)

Domain Information

You're looking at domain 'ferienwohnung-portal.de' on the German country-code top-level domain (.de) while skipping any subdomain. Count 20 characters in 'ferienwohnung-portal' split between seven vowels and 12 consonants, along with 1 hyphen. Breaking it apart gives 6 words: fe, rien, woh, nun, g, portal. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ferienwohnung-portal.de/agb/

Page Load Overview

0.79s
Total Load Time
17
HTTP Requests
5
Domains
459 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de
Text Length:748 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network96% confidence
Type: webapp
Method: ml+structural

All Detected Categories

social media network
96%
travel tourism
34%
e-commerce shopping
34%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5104.17.24.14United States
AS13335Cloudflare, Inc.
3216.58.206.42United States
AS15169Google LLC
3142.251.141.131United States
AS15169Google LLC
3192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
3104.21.69.72United States
AS13335Cloudflare, Inc.
175--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B7C3A69267B304F5393B933A5F9A63086127D003C509FEE579EDE2489F88AB615E370D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:5ZNclkM0IdLeDQZ3bXemlUVugRmnoBvdVo:3NclkM7d5Z3bXemlUVugRmnuA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:118760:AXi9IgggW4AA0ByJEieSEAyAhEkQsLGG4URiwQAkQ9IhlhoEABUBBYEtBQGEIbRU5hzpiDmXCADoekUUUDYkgeAsAiFOUCNc

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7c3c3c3c3
Perceptual Hash:b48fca60629e9e36
Difference Hash:6016380e8e8e0e8f
Wavelet Hash:bfe387c3c3c3c300
Color Hash:#d279a9

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data