Security Report: www.holidayextras.com - Analysis

Summary

This website contacted 4 IPs in 1 country across 5 domains to perform 2 HTTP transactions. The main domain is holidayextras.com and was registered NaN years ago.

Submitted URL: http://www.holidayextras.com/de/

Effective URL: https://www.holidayextras.com/de/Redirected

The Cisco Umbrella rank of the primary domain is #290,674 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 78%

Risk Score

The site appears to be a legitimate travel service, but heavy JavaScript obfuscation and low domain ranking warrant caution.

Risk Factors

High JavaScript obfuscation (eval, base64, high entropy)

Low domain ranking for a brand‑named site

Numerous third‑party ad/tracking domains loaded

Safety Factors

Domain age > 27 years (well‑established)

Self‑branding matches the domain – not impersonation

No credential or payment collection forms

No threat‑intel IoC matches or malware YARA hits

No network IDS alerts

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3

Domain age information unavailable

Details

Page Title

Holiday Extras | Flughafen Parkplätze, Hotels, Transfers & mehr

Scan Type

public

Language

🇩🇪

German

(80% confidence)

Screenshot

Page Load Overview

4.27s

Total Load Time

117

HTTP Requests

Domains

1.8 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:de

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:de

Text Length:8,426 chars

Detector Agreement:100%

Website Classification

Primary Category

travel tourism36% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

travel tourism

36%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
30	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
29	104.18.35.240Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
29	18.66.107.98Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
29	18.245.62.99Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
117	4	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T140647D72938829BAE1874FC49F7066383467A25DF61701C8EFF557B04A41DBABC39B81

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:1/ki98UE5J8gMJpcrrPg7FBtiAwy/WwtPplPI7zgrjtFsZ9uesaomy9+ZE1/DlQh:1DUQ04RpOWhOZ9VRlKEX/VFrBXblaN0d

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:318058:DLlCGAAGpAXIohBFJQGARKEJIUgGiGS6UAxEggDWUFCFAACrKChmAgG3EmCAMgEAIAEOHGMlQRpWtTIgDUQPlEQkgkKCBIAC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffe872600000

Perceptual Hash:c1bd3e263971211f

Difference Hash:4b649892c6c68849

Wavelet Hash:01fffffa7a606000

Color Hash:#5359ac

Other Hashes

Crop Resistant:4b649892c6c68849,a280804a679680a2,2b0f13e913116b43,00134d7333611d21,9a8a82c2ca8cc9e9

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: www.holidayextras.com