WEBSITE ANALYSIS REPORT

http://thalvexgermionistrade.de/

09 Oct 2026 · 04:05:08.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

04:04:23.880 GET 200 document 0 B 0 ms 5 alerts

Transaction #23

Request / response

URL

GET HTTPS

https://thalvexgermionistrade.de/

IP / ASN

158.94.210.119

AS786 · Jisc Services Limited

Requested by: Not recorded

Resource information

File type: Not recorded
MIME type: Not recorded
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 06:29:54.992 UTC
Times seen: 19299897

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YE1
Subject: thalvexgermionistrade.de
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: C6:8A:97:A8:6A:05:00:B1:16:2A:5E:58:15:60:A5:4B:32:E6:CA:43
Valid from: Fri, 28 Aug 2026 10:04:21 GMT
Valid until: Thu, 26 Nov 2026 10:04:20 GMT

Technology fingerprints

Express (Web frameworks, Web servers)
Node.js (Programming languages)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
DigiCert UltraDNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: thalvexgermionistrade.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
alt-svc: h3=":443"; ma=2592000
cache-control: no-cache, no-store, must-revalidate
content-encoding: zstd
content-type: text/html; charset=utf-8
date: Fri, 09 Oct 2026 04:04:24 GMT
set-cookie: cf-c=d9538ca1-9466-30; Path=/; HttpOnly; SameSite=Lax; Max-Age=31536000
vary: Accept-Encoding
via: 1.1 Caddy
x-powered-by: Express
content-length: 411
X-Firefox-Spdy: h2

04:04:24.890 GET 200 document 58.4 KB 426 ms —

04:04:25.599 GET 200 script 83.6 KB 30 ms —

04:04:25.603 GET 200 stylesheet 14.1 KB 9 ms —

04:04:25.608 GET 200 script 851 B 15 ms —

04:04:25.611 GET 200 imageset 1.8 KB 25 ms —

04:04:25.612 GET 200 imageset 976 B 7 ms —

04:04:25.614 GET 200 imageset 1.0 KB 6 ms —

04:04:25.616 GET 200 imageset 1.0 KB 11 ms —

04:04:25.617 GET 200 imageset 746 B 15 ms —

04:04:25.619 GET 200 imageset 956 B 6 ms —

04:04:25.620 GET 200 imageset 828 B 8 ms —

04:04:25.622 GET 200 imageset 112 B 18 ms —

04:04:25.623 GET 200 imageset 216 B 7 ms —

04:04:25.624 GET 200 imageset 160 B 7 ms —

04:04:25.625 GET 200 imageset 1.4 KB 6 ms —

04:04:25.626 GET 200 imageset 1.4 KB 9 ms —

04:04:25.627 GET 200 imageset 280 B 7 ms —

04:04:25.628 GET 200 imageset 364 B 9 ms —

04:04:25.789 GET 200 img 39.2 KB 10 ms —

04:04:25.791 GET 200 img 717 B 6 ms —

04:04:25.794 GET 200 script 5.2 KB 6 ms —

04:04:25.796 GET 200 script 29.2 KB 36 ms —

04:04:25.799 GET 200 stylesheet 19.9 KB 253 ms —

04:04:26.067 GET 200 script 252.8 KB 16 ms —

04:04:28.754 POST 200 fetch 11 B 126 ms —

04:04:35.789 POST 200 fetch 11 B 112 ms —

04:04:45.796 POST 200 fetch 11 B 106 ms —

04:04:56.069 POST 200 fetch 11 B 106 ms —

http://thalvexgermionistrade.de/

Domain graph

Hostnames

Connections