WEBSITE ANALYSIS REPORT

http://esabasia.com

04 Oct 2026 · 08:42:36.000 UTCpublic

Report tags: phishing ghostframe aitm
Submit tags

Request review

Phishing detected

1 detection · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)	Method	Status	Type	Size	Duration	Signals
08:41:45.420	GET	301	document	0 B	576 ms	—

08:41:46.007	GET	301	document	0 B	237 ms	—

08:41:46.251	GET	200	document	276.5 KB	186 ms	—

08:41:47.050	GET	200	script	87.4 KB	19 ms	—

08:41:47.053	GET	200	script	58.8 KB	28 ms	—

08:41:47.056	GET	200	stylesheet	55.2 KB	147 ms	—

08:41:47.057	GET	200	stylesheet	5.6 KB	159 ms	—

08:41:47.059	GET	200	stylesheet	54.1 KB	12 ms	—

08:41:47.060	GET	200	stylesheet	661 B	11 ms	—

08:41:47.061	GET	200	stylesheet	668 B	25 ms	—

08:41:47.064	GET	200	stylesheet	5.28 MB	799 ms	—

08:41:47.066	GET	200	script	91.9 KB	172 ms	—

08:41:47.068	GET	200	script	22.5 KB	10 ms	—

08:41:47.069	GET	200	script	17.4 KB	12 ms	—

08:41:47.072	GET	200	script	254.4 KB	668 ms	—

08:41:47.073	GET	200	stylesheet	1.7 KB	17 ms	—

08:41:47.075	GET	200	stylesheet	3.1 KB	10 ms	—

08:41:47.080	GET	200	script	2.8 KB	11 ms	—

08:41:47.081	GET	200	script	76.8 KB	19 ms	—

08:41:47.083	GET	200	script	2.7 KB	23 ms	—

08:41:47.086	GET	200	script	15.0 KB	13 ms	—

08:41:47.087	GET	200	script	7.2 KB	9 ms	—

08:41:47.090	GET	200	stylesheet	778 B	12 ms	—

08:41:47.091	GET	200	script	41.2 KB	10 ms	—

08:41:47.093	GET	200	script	1.6 KB	10 ms	—

08:41:47.094	GET	200	script	848 B	14 ms	—

08:41:47.096	GET	200	script	62.6 KB	15 ms	—

08:41:47.098	GET	200	script	24.0 KB	8 ms	—

08:41:47.099	GET	200	script	15.2 KB	159 ms	—

08:41:47.102	GET	200	script	4.8 KB	14 ms	—

08:41:47.122	GET	200	img	5.3 KB	11 ms	—

08:41:47.198	GET	200	script	491.6 KB	148 ms	—

08:41:48.232	GET	200	script	97.1 KB	2369 ms	—
Transaction #23 Request / response URL GET HTTPS https://hit.uptrendsdata.com/rum.min.js IP / ASN 104.40.217.175 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK Transaction actions#23 Investigate Download resource97.1 KB (99416 bytes) Captured resources may contain malicious code. Sign in to download Raw file and protected ZIP External sources Requested by https://esab.com/au/apc_en/ Resource information File type JavaScript source, ASCII text, with very long lines (65164) MIME type text/javascript First seen (UTC) 25 Apr 2026 · 20:19:20.813 UTC Last seen (UTC) 21 Oct 2026 · 13:29:29.603 UTC Times seen 35 Size 97.1 KB (99416 bytes) MD5 6c9526b50023b4117b7a4313019b3ec2 SHA1 23c7df1c2ed360114864f4ff596f92413c6b477f SHA256 dc390970918de4b0adb96dd43fa9cce1ef5240a11483f549c9fddbc3f68059fc Certificate information Issuer Sectigo Limited · Sectigo Public Server Authentication CA DV R36 Subject .uptrendsdata.com Protocol / cipher TLSv1.3 · TLS_AES_256_GCM_SHA384 SHA1 fingerprint C5:4E:08:E2:42:32:D2:3F:25:8B:0C:6A:08:98:3A:8C:E6:09:AA:A8 Valid from Tue, 22 Sep 2026 00:00:00 GMT Valid until Thu, 08 Apr 2027 23:59:59 GMT Technology fingerprints IIS:10.0* (Web servers) Windows Server (Operating systems) Microsoft ASP.NET (Web frameworks) Azure (PaaS) HTTP headers Request headers `GET /rum.min.js HTTP/1.1 Host: hit.uptrendsdata.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br, zstd Sec-Fetch-Storage-Access: none Sec-GPC: 1 Connection: keep-alive Referer: https://esab.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` Response headers HTTP/2 200 content-type: text/javascript date: Sun, 04 Oct 2026 08:41:50 GMT server: Microsoft-IIS/10.0 accept-ranges: bytes cache-control: public, max-age=3600 content-encoding: gzip etag: "1dd4fdde044f958" last-modified: Tue, 29 Sep 2026 06:43:46 GMT set-cookie: TiPMix=66.19226122311609; path=/; HttpOnly; Domain=hit.uptrendsdata.com; Max-Age=3600; Secure; SameSite=None x-ms-routing-name=self; path=/; HttpOnly; Domain=hit.uptrendsdata.com; Max-Age=3600; Secure; SameSite=None vary: Accept-Encoding x-powered-by: ASP.NET X-Firefox-Spdy: h2
08:41:48.332	GET	200	font	27.1 KB	11 ms	—

08:41:48.371	GET	200	img	63.5 KB	194 ms	—

08:41:48.381	GET	200	font	27.7 KB	158 ms	—

08:41:48.384	GET	200	font	27.1 KB	152 ms	—

08:41:48.387	GET	200	font	27.5 KB	11 ms	—

08:41:48.389	GET	200	font	27.7 KB	10 ms	—

08:41:48.440	GET	200	img	258.3 KB	432 ms	—

08:41:48.442	GET	200	img	2.61 MB	3277 ms	—

08:41:48.491	GET	200	font	74.0 KB	12 ms	—

08:41:48.492	GET	200	font	73.6 KB	163 ms	—

08:41:48.505	GET	200	xhr	6.0 KB	22 ms	—

08:41:48.507	GET	200	lazy-img	1.5 KB	9 ms	—

08:41:48.508	GET	200	lazy-img	397 B	12 ms	—

08:41:48.510	GET	200	lazy-img	9.0 KB	12 ms	—

08:41:48.511	GET	200	lazy-img	1.7 KB	10 ms	—

08:41:48.527	GET	200	fetch	388 B	345 ms	—

08:41:48.678	GET	200	xhr	65 B	60 ms	—

http://esabasia.com

Domain graph

Hostnames

Connections

Network requests

Transaction #23

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://esabasia.com

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #23

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

http://esabasia.com

Domain graph

Network requests