ScanMalware.com

Security Scan Report: ferienwohnung-portal.de

Redirected to: https://ferienwohnung-portal.de/

Submitted: Mar 22, 2026, 10:12:19 AMCompleted: Mar 22, 2026, 10:13:31 AMpubliccompleted
Loading additional data...

Summary

This website contacted 15 IPs in 2 countries across 7 domains to perform 31 HTTP transactions. The main domain is ferienwohnung-portal.de.

Submitted URL: https://ferienwohnung-portal.de/?lang=de

Effective URL: https://ferienwohnung-portal.de/Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Site harvests login credentials and impersonates a brand; confirmed phishing scam.

Risk Factors
Credential exfiltration to external server
Password field on an unranked, likely new domain
Brand impersonation on a non‑official domain
Critical JavaScript obfuscation indicating attempt to hide malicious behavior
Domain age information unavailable

Details

Page Title

Ferien-Portal

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

social_media

(50%)

Domain Information

Within the German country-code top-level domain (.de), 'ferienwohnung-portal.de' is registered and has no subdomain. The second-level label 'ferienwohnung-portal' is 20 characters long with seven vowels and 12 consonants, along with one hyphen. Tokenizing the label suggests 6 words: fe, rien, woh, nun, g, portal. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ferienwohnung-portal.de/?lang=de

Page Load Overview

1.61s
Total Load Time
31
HTTP Requests
7
Domains
2.1 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de
Text Length:8,054 chars
Detector Agreement:100%

Website Classification

Primary Category

social_media50% confidence
Type: webapp
Method: structural

All Detected Categories

social_media
50%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3172.67.206.13United States
AS13335Cloudflare, Inc.
2146.75.122.208Frankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
2104.21.69.72United States
AS13335Cloudflare, Inc.
223.36.162.198Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2142.250.201.163United States
AS15169Google LLC
223.36.162.207Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
223.36.162.201Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
223.36.162.203Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
223.36.162.208Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2104.17.25.14United States
AS13335Cloudflare, Inc.
3115--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12414C750B3F394F2547B92A65B6A770FA991C003CA26999037FD8384CFCDDD6A85370A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:8ZNclkt0Od+eDLZ3bXemlUVugRmZSLBvdVo:oNclktXdTZ3bXemlUVugRmk9A

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:201233:wKJiIAQacY1WgMKgCEAC0AFfBAUBggJAGlrgrMCqIEBaxkkAnIBkQ2rcg/glCAlKgohA0EAGAKFFRUAYHPIQrQAFQRGADCNH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff0000181000ff
Perceptual Hash:8ae1b4c79f340f0b
Difference Hash:4096973961f18c31
Wavelet Hash:ffff0000383c04ff
Color Hash:#d22d72

Other Hashes

Crop Resistant:4096973961f18c31,e698998979f988da,979e70e971708ccc

Scan History

Scan history not available

Unable to load historical scan data