Security Scan Report: ferienwohnung-portal.de

Submitted: Mar 22, 2026, 3:47:36 PMCompleted: Mar 22, 2026, 3:48:49 PMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 1 country across 5 domains to perform 19 HTTP transactions. The main domain is ferienwohnung-portal.de.

Submitted URL: https://ferienwohnung-portal.de/datenschutz/

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Site harvests login credentials via obfuscated JavaScript; treat as confirmed phishing.

Risk Factors
Credential exfiltration via JavaScript
Login form on unknown-age, unranked domain
Domain age unknown – cannot verify legitimacy
High JavaScript obfuscation score
Low reputation (unranked in Cisco Umbrella)
Domain age information unavailable

Details

Page Title

Datenschutz – Ferien-Portal

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

social media network

(96%)

Domain Information

Within the German country-code top-level domain (.de), 'ferienwohnung-portal.de' is registered while skipping any subdomain. The core label 'ferienwohnung-portal' covers 20 characters holding seven vowels versus twelve consonants; it also includes one hyphen. It segments into six words: fe, rien, woh, nun, g, portal. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ferienwohnung-portal.de/datenschutz/

Page Load Overview

0.91s
Total Load Time
17
HTTP Requests
5
Domains
459 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de
Text Length:763 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network96% confidence
Type: webapp
Method: ml+structural

All Detected Categories

social media network
96%
e-commerce shopping
38%
travel tourism
36%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5104.17.25.14United States
3172.217.16.202United States
AS15169Google LLC
3104.21.69.72United States
AS13335Cloudflare, Inc.
3142.251.208.163United States
AS15169Google LLC
3192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
175--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FCC3A79267B304F53D3B933A5F9A63086126D003C509FEE579EDE2489F88AA615E370D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:KZNclkM0IdneDwZ3bXemlUVugRmroBvdVo:CNclkM7dtZ3bXemlUVugRmruA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:119185:BRVAjRkFRAEEgAgoghMWFDcLENAwFToRhHDSwM2BEgqgoBVCQCKOFyJDQF/rAYRH8GCUAQfCQBoKAFhxCogCCADQVoSlASAu

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffc7c3c3c3c3
Perceptual Hash:b48f8b61628e9e3c
Difference Hash:421a208e8e8e0e8f
Wavelet Hash:bfec9ec2c2c3c300
Color Hash:#2d69d2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data