WEBSITE ANALYSIS REPORT

https://t.sidekickopen01.com/s3t/c/5/f18dQhb0S7kF8bGmvCW4Y_S7F2zGCwVW8Jbw_88pTtbdMngKqvd770FW16gGCp5C8l6Z101?te=W3R5hFj4cm2zwW4mKLS-45PFjcW3JD_V83Fbt5S0&si=7000000002240482&pi=4908e662-c4f2-4fd2-bcef-3d20535f72af

13 Oct 2026 · 20:30:17.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)	Method	Status	Type	Size	Duration	Signals
20:29:09.940	GET	307	document	0 B	563 ms	1 alerts

20:29:10.513	GET	200	document	189.1 KB	49 ms	—

20:29:10.803	GET	200	stylesheet	109.9 KB	53 ms	—

20:29:10.805	GET	200	stylesheet	34.2 KB	54 ms	—

20:29:10.806	GET	200	stylesheet	2.7 KB	61 ms	—

20:29:10.807	GET	200	stylesheet	352 B	54 ms	—

20:29:10.810	GET	200	stylesheet	5 B	18 ms	—

20:29:10.811	GET	200	img	764.4 KB	419 ms	—

20:29:11.056	GET	200	script	577.6 KB	143 ms	—

20:29:11.058	GET	No response	script	0 B	0 ms	—

20:29:11.065	GET	200	script	18.5 KB	23 ms	—

20:29:11.067	GET	200	script	13.4 KB	18 ms	—

20:29:11.068	GET	200	script	1.2 KB	20 ms	—

20:29:11.070	GET	200	script	5.4 KB	20 ms	—

20:29:11.071	GET	200	script	2.1 KB	18 ms	—

20:29:11.072	GET	200	script	592.7 KB	75 ms	—

20:29:11.073	GET	200	script	2.6 KB	22 ms	—
Transaction #72 Request / response URL GET HTTPS https://www.phase-5.com/hs/scriptloader/4128814.js IP / ASN 199.60.103.31 AS209242 · Cloudflare London, LLC Transaction actions#72 Investigate Download resource2.6 KB (2632 bytes) Captured resources may contain malicious code. Sign in to download Raw file and protected ZIP External sources Requested by https://www.phase-5.com/ Resource information File type ASCII text, with very long lines (539) MIME type application/javascript; charset=utf-8 First seen (UTC) 13 Oct 2026 · 20:30:10.595 UTC Last seen (UTC) 13 Oct 2026 · 20:30:38.035 UTC Times seen 2 Size 2.6 KB (2632 bytes) MD5 8e1034a11c38b7f76703c744515ae2cb SHA1 508cea8e63c484e0bebba6d3bf6475ea67ff5a40 SHA256 b06c08868183c5744f3dbb3fb36a4f312d5951ba4905ae112038cd97e9a2bcd4 Certificate information Issuer Google Trust Services · WE1 Subject 8e32195c.sni.cloudflaressl.com Protocol / cipher TLSv1.3 · TLS_AES_128_GCM_SHA256 SHA1 fingerprint F4:9D:24:B9:73:67:E6:A1:E3:AA:85:A7:EB:B0:11:D7:F4:68:40:1C Valid from Mon, 21 Sep 2026 17:25:31 GMT Valid until Sun, 20 Dec 2026 18:25:26 GMT Technology fingerprints Cloudflare Bot Management (Security) Cloudflare (CDN) HSTS (Security) HTTP headers Request headers GET /hs/scriptloader/4128814.js HTTP/1.1 Host: www.phase-5.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br, zstd Referer: https://www.phase-5.com/ Sec-GPC: 1 Connection: keep-alive Cookie: __cf_bm=8IfvcW6slo1bAt9D8M.NN1AhB8WUZFeDAD6EESHrOF4-1791923350.8116133-1.0.1.1-UCNowgS5RAjTCPUD59ci5QzOtlrNu7pJFKAmfdZw3TGaqr90XduaEK4RYQ1_rg.QP0uOOrkHwKR6QzYLQ2b69qi0n6Lhub0bPtp9RAp5NuQZMKQ7Er2iOPdrJDg8bBpW; _cfuvid=W.l0XL5vlkwuHqyv.oAmKKmtMLLL7s3YH5zZkkgGWkk-1791923350.5457654-1.0.1.1-FH9FWjhp5gFuIguj2YRPOL0ZeNrUonvwc49yqT2ie.w Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache Response headers HTTP/3 200 date: Tue, 13 Oct 2026 20:29:11 GMT content-type: application/javascript;charset=utf-8 content-length: 736 cf-ray: a4a118503e451ae6-OSL cf-cache-status: HIT accept-ranges: bytes access-control-allow-origin: https://www.phase-5.com age: 16 cache-control: public, max-age=90 content-encoding: gzip expires: Tue, 13 Oct 2026 20:30:41 GMT last-modified: Tue, 13 Oct 2026 20:28:54 GMT server: cloudflare set-cookie: __cf_bm=Imn9vH4yI_yyGiJkY37WN8p0Ag1uj1yvvKxapXl_cp8-1791923351.0794501-1.0.1.1-i3lAajpuOsTfkinjcq7QYUIUtY8_bRs6rM_zUsdbHeHgOH62qxuFzCfskbo.Ce6J39yrtfCH4phqGB8ygl0UOehXKb8Ntb.zZE_0mh6DZjFZCHCK5qkpgzdiOzQHLGAp; HttpOnly; SameSite=None; Secure; Path=/; Domain=hs-scripts.com; Expires=Tue, 13 Oct 2026 20:59:11 GMT strict-transport-security: max-age=31536000 vary: origin, accept-encoding content-security-policy: upgrade-insecure-requests access-control-allow-credentials: true access-control-max-age: 3600 x-content-type-options: nosniff x-hs-cfworker-meta: {"resolver":"ProxyMappingResolver"} x-hs-portal-id: 4128814 x-hubspot-correlation-id: 01a136f4-2e82-71bd-bd4f-981cbdf917e6 report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=dheWuloDOJyjW6tWT%2FcKrsZruBhFZz8dn0Eh0%2Buh9yYC7XgkfWNuwAUWIpoiCiuweGtFvlUEU90l1MLuP7Lvch0G7PYMVrTkOvbqR4Ewb7uN7nlxraqou4Yltob3XsT7Kg%3D%3D"}]} nel: {"report_to":"cf-nel","success_fraction":0.01,"max_age":604800} priority: u=3,i=?0 alt-svc: h3=":443"; ma=86400 server-timing: hcid;desc="01a136f4-2e82-71bd-bd4f-981cbdf917e6", cfr;desc="a4a117e9e9e7dfec-IAD", cfExtPri
20:29:11.075	GET	200	script	15.1 KB	23 ms	—

20:29:11.083	GET	200	img	1.0 KB	29 ms	—

20:29:11.085	GET	200	img	927 B	80 ms	—

20:29:11.121	GET	200	script	5.3 KB	47 ms	—

20:29:11.135	GET	200	font	29.2 KB	24 ms	—

20:29:11.137	GET	200	font	27.8 KB	23 ms	—

20:29:11.140	GET	200	font	29.3 KB	20 ms	—

20:29:11.219	GET	200	font	28.7 KB	9 ms	—

20:29:11.228	GET	200	img	291 B	38 ms	—

20:29:11.231	GET	200	img	261.9 KB	658 ms	—

20:29:11.233	GET	200	img	93.0 KB	345 ms	—

20:29:11.235	GET	200	img	112.7 KB	527 ms	—

20:29:11.236	GET	200	script	18.5 KB	21 ms	—

20:29:11.238	GET	200	img	59.7 KB	587 ms	—

20:29:11.240	GET	200	img	69.9 KB	203 ms	—

20:29:11.250	GET	200	lazy-img	5.2 KB	23 ms	—

20:29:11.251	GET	200	lazy-img	5.2 KB	25 ms	—

20:29:11.253	GET	200	lazy-img	437 B	28 ms	—

20:29:11.254	GET	200	lazy-img	441 B	21 ms	—

20:29:11.256	GET	200	lazy-img	753 B	30 ms	—

20:29:11.258	GET	200	lazy-img	976 B	32 ms	—

20:29:11.281	GET	200	img	3.32 MB	4286 ms	—

20:29:11.283	GET	200	img	3.28 MB	828 ms	—

20:29:11.285	GET	200	img	2.84 MB	1132 ms	—

20:29:11.303	GET	200	script	18.5 KB	25 ms	—

20:29:11.316	GET	200	font	27.7 KB	5 ms	—

20:29:11.366	HEAD	200	fetch	0 B	43 ms	—

20:29:11.368	GET	200	xhr	20.2 KB	194 ms	—

20:29:11.371	GET	200	script	1.7 KB	3276 ms	—

20:29:11.389	GET	200	script	18.6 KB	10 ms	—

20:29:11.434	GET	200	font	27.6 KB	3 ms	—

20:29:11.594	GET	200	script	1.1 KB	60 ms	—

20:29:11.691	GET	200	script	830.6 KB	127 ms	—

https://t.sidekickopen01.com/s3t/c/5/f18dQhb0S7kF8bGmvCW4Y_S7F2zGCwVW8Jbw_88pTtbdMngKqvd770FW16gGCp5C8l6Z101?te=W3R5hFj4cm2zwW4mKLS-45PFjcW3JD_V83Fbt5S0&si=7000000002240482&pi=4908e662-c4f2-4fd2-bcef-3d20535f72af

Domain graph

Hostnames

Connections

Network requests

Transaction #72

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://t.sidekickopen01.com/s3t/c/5/f18dQhb0S7kF8bGmvCW4Y_S7F2zGCwVW8Jbw_88pTtbdMngKqvd770FW16gGCp5C8l6Z101?te=W3R5hFj4cm2zwW4mKLS-45PFjcW3JD_V83Fbt5S0&si=7000000002240482&pi=4908e662-c4f2-4fd2-bcef-3d20535f72af

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #72

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

https://t.sidekickopen01.com/s3t/c/5/f18dQhb0S7kF8bGmvCW4Y_S7F2zGCwVW8Jbw_88pTtbdMngKqvd770FW16gGCp5C8l6Z101?te=W3R5hFj4cm2zwW4mKLS-45PFjcW3JD_V83Fbt5S0&si=7000000002240482&pi=4908e662-c4f2-4fd2-bcef-3d20535f72af

Domain graph

Network requests