WEBSITE ANALYSIS REPORT

https://bitli.pro/2VJC6_8ef28398

20 Oct 2026 · 17:03:08.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:02:28.348 GET 302 document 0 B 408 ms 1 alerts

17:02:28.764 GET 301 document 0 B 805 ms 2 alerts

17:02:29.573 GET 200 document 14.2 KB 215 ms 2 alerts

17:02:30.116 GET 200 script 1.2 KB 20 ms 2 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://pks-legal.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js

IP / ASN

104.21.66.66

AS13335 · CLOUDFLARENET

Requested by: https://pks-legal.com/home/

Resource information

File type: JavaScript source, ASCII text, with very long lines (1238)
MIME type: application/javascript
First seen (UTC): 07 Mar 2023 · 01:02:00.000 UTC
Last seen (UTC): 21 Oct 2026 · 07:43:43.275 UTC
Times seen: 459405

Size: 1.2 KB (1239 bytes)
MD5: 9e8f56e8e1806253ba01a95cfc3d392c
SHA1: a8af90d7482e1e99d03de6bf88fed2315c5dd728
SHA256: 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8

Certificate information

Issuer: Google Trust Services · WE1
Subject: pks-legal.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 73:10:BE:87:40:BF:02:6A:69:9C:96:B9:F6:3A:4B:CB:EA:49:27:DE
Valid from: Mon, 21 Sep 2026 18:07:44 GMT
Valid until: Sun, 20 Dec 2026 19:07:33 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: pks-legal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/140.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Cookie: PHPSESSID=17eaac4f95647c36181a87c3440e888c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
content-type: application/javascript
expires: Thu, 22 Oct 2026 17:02:30 GMT
cache-control: public
vary: accept-encoding
x-frame-options: DENY
x-content-type-options: nosniff
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=3uAUQfjVj4FSt132ZLgH8wQ7WhubTBT3MBOww7yedOKv0ayj8SdOoLFNBwa5JSVEOcBmdlHlr08f1rwEFGT3B4g2ZH86sFfPt9RwI1eFqujrW5X%2BVo2pxLxTDh2nukT0"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: zstd
date: Tue, 20 Oct 2026 17:02:30 GMT
server: cloudflare
cf-ray: a4d9972e38b56f7b-ARN

17:02:30.118 GET 302 script 0 B 17 ms —

17:02:30.123 GET 200 img 12.3 KB 63 ms —

17:02:30.202 GET 302 img 0 B 941 ms 2 alerts

17:02:30.223 GET 200 script 84.7 KB 12 ms —

17:02:30.280 GET 200 subdocument 264.2 KB 34 ms —

17:02:31.149 GET 200 img 4.6 KB 453 ms 2 alerts

https://bitli.pro/2VJC6_8ef28398

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://bitli.pro/2VJC6_8ef28398

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://bitli.pro/2VJC6_8ef28398

Domain graph

Network requests