Security Scan Report: ferienwohnung-portal.de

Submitted: Mar 21, 2026, 1:36:15 PMCompleted: Mar 21, 2026, 1:37:24 PMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 1 country across 5 domains to perform 19 HTTP transactions. The main domain is ferienwohnung-portal.de.

Submitted URL: https://ferienwohnung-portal.de/impressum/

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

The page harvests login credentials on an unknown, unranked domain – likely a phishing site.

Risk Factors
Credential exfiltration via JavaScript
Password field on an unknown, unranked domain
Unknown domain age
Login form on a static legal‑notice (Impressum) page
Unranked domain (low reputation)
Domain age information unavailable

Details

Page Title

Impressum – Ferien-Portal

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Category

social media network

(94%)

Domain Information

The domain name 'ferienwohnung-portal.de' uses the German country-code top-level domain (.de) without a subdomain. The core label 'ferienwohnung-portal' covers 20 characters with 7 vowels and twelve consonants; bonus characters include one hyphen. It segments into 6 words: fe, rien, woh, nun, g, portal. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ferienwohnung-portal.de/impressum/

Page Load Overview

2.17s
Total Load Time
17
HTTP Requests
5
Domains
459 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:de
Text Length:736 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network94% confidence
Type: webapp
Method: ml+structural

All Detected Categories

social media network
94%
travel tourism
33%
e-commerce shopping
33%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5216.58.206.35United States
AS15169Google LLC
3142.251.36.106United States
AS15169Google LLC
3104.17.24.14United States
AS13335Cloudflare, Inc.
3104.21.69.72United States
AS13335Cloudflare, Inc.
3192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
175--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B9C3A69267B304F5393B933A5F9A63086127D003C509FEE579EDE2489F88AB615E370D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:0ZNclkM0IdLeDRZ3bXemlUVugRmQoBvdVo:ANclkM7dcZ3bXemlUVugRmQuA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:118765:qaIAkgXgVgQJrEiAAUIRABsQCBoBEvgmRi4EISIEL5IwFR7DBSgBGpbvgkB0igtAUBBhEjRDJAJAAyWDgEUKMlhRABNUIgA2

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7c3c3c3c3
Perceptual Hash:b4cf8a60229e9e37
Difference Hash:6016600e8e8e0e8f
Wavelet Hash:bfc29fc3c2c3c300
Color Hash:#2d69d2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data