WEBSITE ANALYSIS REPORT

https://tracking.ansarada.com/ls/click?upn=u001.J2w9iT5-2F57OTsPwFlNHwN0CoPlI45WM-2Fzkj-2BKEUIZA-2FtlFwgHbPwFzzkrBPthk3TX-2Fj7oj3ggqhZUwWyZHtjGgnYXksRdXHaHMTWdjYXmxM-3DaAyk_1k80x53FD-2Ff0L3IO0TQW20g42JEbgrZrHInrciH-2BWkj6TaCu15VNyKHlBvC5d1uf29c8Pea6avxesTy4aq0bZRDIQJu2pfjFKSkcabYMnxcyzAejxfLQdo-2FvGsu01L0Dg4fR-2B3jNX-2BsEqEIVEw-2FJq-2BXlNN9qnpAcH3w0-2Furkx277Xxw1YEHZB0R6IpNd9afbGIT3GtTq9eYbFFkh-2Fo5xEytSSvRL6b98Xr6Lgk5-2BWEX6NbvSqQi0ayv9C9GZ6syX8LeT1b8G2QLq-2F7MX-2BshUojvyLSqOW0gV6X64qfvRh21TfAIScd-2Bst-2BISILspDHJvDW-2BzueiKFRYb8jMPcFUcNsqCDlCp3HmvcHfmWP9HcMDFzgwV25k3raoomX-2Fl1NHU4CiCTiz1ywBAcJMWcpkFmA-3D-3D

07 Aug 2026 · 02:40:47.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Domain graph details

Hostnames

api.ansarada.com3 captured requests
dataroom.ansarada.com4 captured requests
id.ansarada.com6 captured requests
static.ansarada.com1 captured requests
tracking.ansarada.com1 captured requests

Connections

dataroom.ansarada.com → id.ansarada.comRedirects to2 captured connections
id.ansarada.com → api.ansarada.comCalls3 captured connections
id.ansarada.com → static.ansarada.comLoads from1 captured connections
tracking.ansarada.com → dataroom.ansarada.comRedirects to1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:40:14.238 GET 302 document 0 B 3245 ms —

02:40:17.493 GET 200 document 693 B 386 ms —

02:40:18.063 GET 200 script 0 B 0 ms —

02:40:18.392 POST 302 document 0 B 558 ms —

02:40:18.497 GET 200 img 49.5 KB 372 ms —

02:40:18.955 GET 200 document 1.3 KB 556 ms —

02:40:19.549 GET 200 stylesheet 402.3 KB 176 ms —

02:40:19.551 GET 200 script 4.2 KB 109 ms —

02:40:19.553 GET 200 script 131.6 KB 53 ms —

02:40:19.723 GET 200 script 2.46 MB 54 ms 1 alerts

Transaction #05

Request / response

URL

GET HTTPS

https://id.ansarada.com/main.38b157d2c07bd7c8.js

IP / ASN

104.18.20.167

AS13335 · CLOUDFLARENET

Requested by: https://id.ansarada.com/signup?signupToken=diKgVRBFj0UXfVEUiEvO4Cg9Kz3eBDTlhQuz7yunqYtzpNHun16yOqngjxwHwJ98

Resource information

File type: JavaScript source, ASCII text, with very long lines (65536), with no line terminators
MIME type: text/javascript
First seen (UTC): 07 Aug 2026 · 02:40:53.067 UTC
Last seen (UTC): 07 Aug 2026 · 02:40:53.067 UTC
Times seen: 1

Size: 2.46 MB (2574526 bytes)
MD5: 71b8df547e3cb74a7d7bb904fe12983e
SHA1: 0a95b31c05609f84456294ec6edd2f79b055c4da
SHA256: 6c5ebaa6460c263d36fa0033e7c2fa345f623c90a46942d194c5f83543972d01

Certificate information

Issuer: Google Trust Services · WE1
Subject: id.ansarada.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: AA:6E:A9:79:9D:DD:2F:59:8F:71:5E:FF:64:68:A0:EB:54:44:7B:83
Valid from: Wed, 29 Jul 2026 19:09:38 GMT
Valid until: Tue, 27 Oct 2026 20:09:36 GMT

Technology fingerprints

Cloudflare (CDN)
HSTS (Security)
Amazon Web Services (PaaS)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
ClamAV Html.Phishing.SVGDecryption-10060408-0	medium	Malicious

HTTP headers

Request headers

GET /main.38b157d2c07bd7c8.js HTTP/1.1
Host: id.ansarada.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://id.ansarada.com/signup?signupToken=diKgVRBFj0UXfVEUiEvO4Cg9Kz3eBDTlhQuz7yunqYtzpNHun16yOqngjxwHwJ98
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Fri, 07 Aug 2026 02:40:19 GMT
content-type: text/javascript
cf-ray: a272ea7b380256b4-OSL
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: public, max-age=2678400
x-amz-request-id: FESTMBY7KQNY70M1
expires: Mon, 07 Sep 2026 02:40:19 GMT
last-modified: Wed, 05 Aug 2026 09:28:59 GMT
server: cloudflare
vary: Origin
content-security-policy: default-src 'none'; script-src 'self' 'nonce-iafnR03Mp+GIx/4OxtIbAg==' https://*.ansarada.com https://*.cloudflareinsights.com https://*.segment.com https://*.fullstory.com; style-src-elem 'self' 'nonce-iafnR03Mp+GIx/4OxtIbAg=='; style-src-attr 'unsafe-inline'; font-src 'self' data: https://*.ansarada.com; img-src 'self' data: https://*.ansarada.com; connect-src 'self' https://*.ansarada.com https://*.segmentapis.com https://*.segment.com https://*.fullstory.com; object-src 'none'; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; frame-src https://auth.au.ansarada.com; upgrade-insecure-requests
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-amz-id-2: 0J5XAPk6+BQleFPD8aMCHLv1vjXvMY7tbGYxOOF+O3LMUa0lNQxAi+0YZ4B/50xyFQ5oOVbsCJYTfGEgNqEeCgGluEud/qHN
etag: W/"278982e4f6c8d05bd5fecf4db1da9678"
content-encoding: gzip
X-Firefox-Spdy: h2

02:40:20.348 GET 200 font 124.8 KB 91 ms —

02:40:20.394 OPTIONS 204 fetch 0 B 497 ms —

02:40:20.549 GET 200 img 3.3 KB 73 ms —

02:40:21.381 OPTIONS 204 fetch 0 B 282 ms —

02:40:24.082 OPTIONS 204 fetch 0 B 282 ms —

Domain graph

Hostnames

Connections

Network requests

Transaction #05

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #05

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Domain graph

Network requests