Security Scan Report: enzmann-usedom.de

Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 5 domains to perform 68 HTTP transactions. The main domain is enzmann-usedom.de and was registered 9 years ago.

Submitted URL: https://enzmann-usedom.de

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Legitimate-looking German holiday-rental site whose network traffic shows CRITICAL EtherHiding malware-exfiltration IDS alerts, blockchain RPC C2 connections, and a malware-typed domain match — likely compromised. Avoid interaction.

Risk Factors (3)
Critical IDS malware alert (EtherHiding exfiltration) on the page's network traffic
Malware-typed threat-intel match on the scanned primary domain
Blockchain RPC/C2 connections (base.drpc.org, gateway.tenderly.co) consistent with EtherHiding abuse — likely a compromised site
Domain age information unavailable

Details

Page Title

Ferienwohnung Enzmann - Die Luxus-Ferienwohnung auf Usedom

Scan Type

public

Domain Name Analysis

Domain 'enzmann-usedom.de' uses the German country-code top-level domain (.de) while skipping any subdomain. The core label 'enzmann-usedom' covers 14 characters with 5 vowels and 8 consonants; it also includes 1 hyphen. Splitting it apart reveals four words: enz, mann, used, om. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Ferienwohnung Enzmann Wohnung Bilder Videos Preise Lage&Anfahrt Kontakt Syit ist die teverste, Rügen ist die größte, Usedom ist die Schönste Insel Deutschland®. Die perfekte Umgebung Unsere traumha...

Page Load Overview

1.39s
Total Load Time
2.5 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:8,352 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14217.160.0.254Germany
AS8560IONOS SE
6104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
613.226.244.72Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6104.18.0.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
635.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
613.226.244.50Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
613.226.244.66Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
613.226.244.17Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6810--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A0C3E8AED3B1303A265743C5FCB26B38A1E89307ED466821E2FD93C817D4CF509A665D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Ir0oZPX6ypMZKhCv2MyZsu0Uhin012rbYNw7GUs3ya3Qtmbe5SXXSloTeXE/asPX:ZoruyCc37TXRCVeZ6rHqXq2dGxsUQ3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:123835:ujEQRIgxh8KSmEDJUI/E6BGQYqCBAqM0Kg5nQAxvChQYEAaBggRADpQziEKACCbGCUI4ODQ8QHVioIAUQA8QJzGBkKE8oIEx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff9ed9000000ffff
Perceptual Hash:ac9bfd13a0e26a94
Difference Hash:3630318edc65a726
Wavelet Hash:ff9dc4000000ffff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data