WEBSITE ANALYSIS REPORT

http://www.mistletoe-and-ivy.de/

08 Jul 2026 · 16:03:31.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

16:03:07.599 GET 200 document 2.4 KB 148 ms 5 alerts

16:03:07.982 GET 200 stylesheet 842 B 22 ms 5 alerts

16:03:07.985 GET 200 script 3.3 KB 23 ms 5 alerts

16:03:08.029 GET 200 subdocument 1.6 KB 160 ms 5 alerts

16:03:08.033 GET 200 img 14.7 KB 44 ms 5 alerts

16:03:08.038 GET 200 img 904.7 KB 151 ms 5 alerts

Transaction #08

Request / response

URL

GET HTTPS

https://www.mistletoe-and-ivy.de/images/Back.jpg

IP / ASN

193.34.145.201

AS51167 · Contabo GmbH

Requested by: https://www.mistletoe-and-ivy.de/

Resource information

File type: JPEG image data, JFIF standard 1.01, resolution (DPI), density 600x600, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, manufacturer=Canon, model=CanoScan LiDE 25, orientation=upper-left, xresolution=158, yresolution=166, resolutionunit=2, software=CanoScan Toolbox 4.9.3, datetime=2016 :03 :25 18 :16 ], baseline, precision 8, 1905x917, components 3
MIME type: image/jpeg
First seen (UTC): 08 Jul 2026 · 16:03:37.974 UTC
Last seen (UTC): 16 Sep 2026 · 19:26:31.935 UTC
Times seen: 3

Size: 904.7 KB (926404 bytes)
MD5: ee95f976a2b185cc8c46224d0dddd666
SHA1: a96d5d894441c5e8179335d9fb554016a7d6c2a2
SHA256: 0c0be226211e84d7fdf4a4e60a68a18f1571cd55464353e68822c23b1fe7ff66

Certificate information

Issuer: Let's Encrypt · YR2
Subject: mistletoe-and-ivy.de
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: D8:CD:1A:27:B2:AA:42:C8:F1:1E:21:F7:1A:7E:14:28:1C:42:5B:70
Valid from: Thu, 02 Jul 2026 15:42:59 GMT
Valid until: Wed, 30 Sep 2026 15:42:58 GMT

Technology fingerprints

Apache HTTP Server (Web servers)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
DigiCert UltraDNS Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /images/Back.jpg HTTP/1.1
Host: www.mistletoe-and-ivy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://www.mistletoe-and-ivy.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=4, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
last-modified: Thu, 28 May 2026 18:20:50 GMT
accept-ranges: bytes
content-length: 926404
content-type: image/jpeg
date: Wed, 08 Jul 2026 16:03:08 GMT
server: Apache
X-Firefox-Spdy: h2

16:03:08.205 GET 200 stylesheet 2.2 KB 23 ms 5 alerts

16:03:08.207 GET 200 img 102.0 KB 24 ms 5 alerts

16:03:08.209 GET 200 img 8.9 KB 22 ms 5 alerts

http://www.mistletoe-and-ivy.de/

Domain graph

Hostnames

Connections

Network requests

Transaction #08

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://www.mistletoe-and-ivy.de/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #08

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://www.mistletoe-and-ivy.de/

Domain graph

Network requests