WEBSITE ANALYSIS REPORT

https://witty-falcon-422.harvis.page/#x@google.com

07 Oct 2026 · 01:32:12.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

01:27:51.775 GET 200 document 23.2 KB 253 ms 5 alerts

01:27:52.434 GET 200 script 87.4 KB 83 ms —

01:27:52.439 GET 200 img 23.2 KB 35 ms 5 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://witty-falcon-422.harvis.page/#

IP / ASN

172.67.155.221

AS13335 · CLOUDFLARENET

Requested by: https://witty-falcon-422.harvis.page/#x@google.com

Resource information

File type: HTML document, Unicode text, UTF-8 text, with CRLF line terminators
MIME type: text/html; charset=utf-8
First seen (UTC): 07 Oct 2026 · 01:32:28.330 UTC
Last seen (UTC): 07 Oct 2026 · 01:32:28.330 UTC
Times seen: 1

Size: 23.2 KB (23793 bytes)
MD5: dee2cbbe87bf6f7303c9f80f7fd7fedd
SHA1: 0260d8dbc329b501be7bac0a13d97ea0dbf987b5
SHA256: 7d63cec4f7b2e202a82dbad8dc57ea880538bceaf39bf9fd345e3d32884a5812

Certificate information

Issuer: Google Trust Services · WE1
Subject: harvis.page
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 34:40:20:CC:56:A2:36:42:E4:AC:61:50:90:2C:33:A1:2F:5F:15:DD
Valid from: Fri, 14 Aug 2026 12:01:09 GMT
Valid until: Thu, 12 Nov 2026 12:58:50 GMT

Technology fingerprints

Cloudflare (CDN)
jQuery:3.6.0 (JavaScript libraries)
Google Hosted Libraries (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
DigiCert UltraDNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: witty-falcon-422.harvis.page
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://witty-falcon-422.harvis.page/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=5, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=136znO73nSG%2BkQWYT3sEpbLkCyA6SWV3ItIFg6ZKQlCX%2BDi6AFZRA0jqRhd3jxJPLwbY8ibEXVT0UPu0ir8k9smYkZpfXlq66Hg%2BZRjbDs2uhDq1Wv2zIAElqDh9Y9dN3ddJ8uhs7QqjPYON7EsD"}]}
x-site-cache: hit
date: Wed, 07 Oct 2026 01:27:52 GMT
content-type: text/html; charset=utf-8
content-encoding: zstd
cf-ray: a4692038cc76b517-OSL
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
age: 0
cache-control: public, max-age=60
priority: u=5,i
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

01:27:52.565 GET 301 img 0 B 39 ms —

01:27:52.568 GET 200 img 23.2 KB 299 ms 5 alerts

01:27:52.611 GET 200 img 1.0 KB 68 ms —

01:27:52.722 GET 200 subdocument 0 B 0 ms —

01:27:53.563 OPTIONS 200 fetch 0 B 467 ms —

https://witty-falcon-422.harvis.page/#x@google.com

Domain graph

Hostnames

Connections