Security Scan Report: enzmann-potsdam.de

Site favicon
Submitted: Sep 13, 2026, 5:47:37 AMCompleted: Sep 13, 2026, 5:48:06 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Established German holiday-rental site appears compromised: 5 CRITICAL IDS EtherHiding malware alerts, blockchain RPC exfil, and a multi-source malicious third-party resource. Do not visit.

Risk Factors
Critical network IDS malware alerts (EtherHiding exfiltration x5)
Blockchain RPC connection to publicnode.com indicative of EtherHiding loader
Multi-source malicious IoC for loaded resource ultraspeed.pro
Single-source malware IoC on the primary domain itself
Domain age information unavailable

Details

Page Title

Ferienwohnung Waldstadt - Luxus-Ferienwohnungen in Potsdam

Scan Type

public

Domain Name Analysis

The domain name 'enzmann-potsdam.de' uses the German country-code top-level domain (.de) and has no subdomain. The second-level label 'enzmann-potsdam' is 15 characters long holding four vowels versus ten consonants; bonus characters include 1 hyphen. It segments into 3 words: enz, mann, potsdam. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://enzmann-potsdam.de

Page Load Overview

6.79s
Total Load Time
1.0 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:9,646 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6217.160.0.254Germany
AS8560IONOS SE
5104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.127.94Google · CDNUnited States
AS15169Google LLC
5172.67.154.226Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.21.6.137Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.250.154.95Google · CDNUnited States
AS15169Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
469--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T168D3FB5BB77230B8721BD355F8E3A72A627CC503D70319F6BCA6E1548BC929205B358E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Br0oZPXhyp+y7qTRgUIgMykbPMWXMjq66yyUcT6am7Yass+mfW:+oUxeTRg7ymaYmO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:130659:pYZgGBdS02IHACAAIcCBIbBBIIBYSqSgagGgBEGiKRCgAiTEgEGnSL2ABEQAI0EiEWYNQCt4AWkd0DAu5CXEDghBgEMUAwPg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefeffffffffffff
Perceptual Hash:d555555555a8aaaa
Difference Hash:0000000000000000
Wavelet Hash:0e0e0e0e0e0e0e0e
Color Hash:#b56ce0

Other Hashes

Crop Resistant:0000000000000000

Scan History

Scan history not available

Unable to load historical scan data