# PhishDestroy domain threat record: pks-legal.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/pks-legal.com/ Machine-readable companion: https://phishdestroy.io/domain/pks-legal.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-19 01:33:31 UTC - Last availability or vendor check: 2026-10-25 23:42:45 UTC - Stored record updated: 2026-10-26 03:34:56 UTC - VirusTotal detections in the stored snapshot: 13/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 172.67.201.138 - Registrar in stored WHOIS data: ODTU Gelistirme Vakfi Bilgi Teknolojileri Sanayi Ve Ticaret Anonim Sirketi - Last stored HTTP status: 301 - Registration date (registry RDAP, pks-legal.com): 2024-03-08 14:39:11 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a151c9-0254-7256-bb34-337faeed0f86/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/pks-legal.com - Certificate Transparency search: https://crt.sh/?q=%25.pks-legal.com - Web Archive lookup: https://web.archive.org/web/*/https://pks-legal.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview pks-legal.com is a domain on the PhishDestroy blocklist that mimics a legal or professional service to deceive visitors. PhishDestroy first observed the site on 2026-10-19. As of 2026-10-19, the site is marked as alive but its content is unreachable, indicating possible takedown or evasion attempts. How the scam works The site uses a legal or professional guise to lure users into interacting with it, potentially harvesting sensitive information or tricking users into actions that compromise their security. The page title and content were not accessible at the time of analysis, so the exact mechanism cannot be confirmed. However, the combination of blocklist flags and detections suggests a high risk of malicious behavior. Evidence VirusTotal flagged the domain with 5 detections out of 92 engines on 2026-10-19, including reports from alphaMountain.ai, CRDF, DNS8, Gridinsoft, and SOCRadar. The domain is also listed on PhishDestroy and OpenPhish blocklists and has 4 OTX pulses. Infrastructure The domain was registered on 2024-03-08 with ODTU Gelistirme Vakfi Bilgi Teknolojileri Sanayi Ve Ticaret Anonim Sirketi. It is hosted on a server with IP 172.67.201.138. What to do If you visited the site, disconnect from the internet and scan your device for malware. Do not enter any personal or financial information. Review recent transactions and revoke any suspicious app permissions or wallet connections. Defenders should block the domain and IP at the network level and monitor for related indicators. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a151c9-0254-7256-bb34-337faeed0f86/ VirusTotal report: https://www.virustotal.com/gui/domain/pks-legal.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=pks-legal.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-19 02:06:28 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a151c9-0254-7256-bb34-337faeed0f86.png Captured: 2026-10-19 01:33:31 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a151c9-0254-7256-bb34-337faeed0f86.png Captured: 2026-10-19 01:33:31 UTC Source report: https://urlscan.io/result/01a151c9-0254-7256-bb34-337faeed0f86/ - URLScan capture 2: https://urlscan.io/screenshots/01a15004-d4d8-7715-a33e-a268d6e615cb.png Captured: 2026-10-19 01:26:35 UTC Source report: https://urlscan.io/result/01a151c9-0254-7256-bb34-337faeed0f86/