technology software

government public service

social_media

English

_gcl_au

_gat_UA-2339266-6

_gid

osano_consentmanager_uuid

euconsent

cookieconsent_status

gdpr_consent

sessionId

consent

osano_consentmanager

csrftoken

aa_language

You're looking at domain 'www.data.ai' on the Anguillan country-code top-level domain (.ai); it also runs on subdomain 'www'. Count 4 characters in 'data' with 2 vowels and two consonants. Splitting it apart reveals one word: data. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

username

password

remember_me

csrfmiddlewaretoken

html/05/9c/059c8c82-475a-4ae1-bc0f-516cb59a48f7.html.gz

default-src * data: blob: ;script-src * 'self' 'unsafe-inline' 'unsafe-eval' ;worker-src * blob: ;style-src * 'unsafe-inline' data: ;frame-ancestors 'self' static-s.aa-cdn.net *.appannie.com *.appannie.com.cn *.data.ai *.appannie.org *.sharepoint.com *.officeapps.live.com https://onedrive.live.com rise.articulate.com scorm.thoughtindustries.com ;img-src * data: blob: ;font-src * data: ;media-src * data: blob: ;base-uri 'self' d6tizftlrpuof.cloudfront.net manifest.prod.boltdns.net secure.brightcove.com ;connect-src * data: blob: wss://api.appcues.net;

6675f149b540a93e3473f559aeb032ad3fe0c22b289824de68be02ce7bd7718f

825b04a272328ce218f9e3fafe3088f97cbb0cb35581eab4b39dece41e8eb81e

156043cff730001d47395c873d5ddb25b9ce150594e7af83aeb9fa105facc9f9

b07fdc014b288f3c76ee3d1f1524d4378e96a12001540d06eb24c84e5ff6656e

22bc3b27cf2f427bf11f6507332c7657412ca0c2cc74eea8af5ab2e9b026a48a

fa7abe9933300bdfa5639054e4d1e1d88fdc392dfa7012b313e61ac7a9dc5be6

93618f25c2b9e305d9f4e970bf3abfbe952237300a11bfdbbfd7113895f850fc

f9f8e079c1351a0b494f369db9c1d34bd9475c564181c213558e5e3668c0234d

6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e

7cacba4287a9097a0e98fc48adab478a77f171cd3f9f91cc635e7e12ab034a7c

f2cf0b68dea9850ca78dafbed22b50aa0a555f7c2f3f258e664e8697bececa9d

e02cff42e74a8dfb726017d4e0f9f3ddc895cb0d78ad84054e7d46eb5d8ccc5c

cd65aacbb79d52c3f52f141b7c352787fafa9bf73d5761996c630b55f5388c1c

5f737b687caf7da70442021925de15ed45867407385f4189dcf59fcca4c004ed

db6cdedc0a633e65a23c4af7032b735da22c54982a7f279896a4e32838b519d6

f3b0667f15dde66726d5a815590f9028e30c49c0d6b4efb54cef9c5517aa53d0

b3cd30d3208592cf21c6f902febac44194c68c8e5a89996428df768e30d441a8

efca55bc71e2042c6ace95ec5b809ca439a26f84e8257821849d4528ec94fd1f

54c69c16d9e45bbc0f19b3e9604e9180c40ef799ed7dbe64ead34dadf2eda278

ea1de0cbfd915792767f0372e61087bf3e632a117e19316341b57bbecdeb9833

b26ba7352795b5ee1655be2bd791491f1f06c1b4866ed411e8a46372e51385d3

f1a61277e3f902f50ab42015d8b07218db9b7601bb0967e54a52bfdcb4fa7e81

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:225:0

15735922ac1e505631311232fc6999319ef5b70058bd21d9d06e8f17981668ae

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0

41d7f2f555a81e83b22768a96c0c465893c928c7ecf8543ea1cfc542fff43570

Authorization Bypass in Next.js Middleware

Next.js missing cache-control header may lead to CDN caching empty reply

Denial of Service condition in Next.js image optimization

Next.js authorization bypass vulnerability

Next.js Race Condition to Cache Poisoning

A vulnerability in Next.js Image Optimization has been fixed in v15.4.5 and v14.2.31. When images returned from API routes vary based on request headers (such as `Cookie` or `Authorization`), these responses could be incorrectly cached and served to unauthorized users due to a cache key confusion bug.

All users are encouraged to upgrade if they use API routes to serve images that depend on request headers and have image optimization enabled.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-57752)

A vulnerability in **Next.js Image Optimization** has been fixed in **v15.4.5** and **v14.2.31**. The issue allowed attacker-controlled external image sources to trigger file downloads with arbitrary content and filenames under specific configurations. This behavior could be abused for phishing or malicious file delivery.

All users relying on `images.domains` or `images.remotePatterns` are encouraged to upgrade and verify that external image sources are strictly validated.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-55173)

A vulnerability in **Next.js Middleware** has been fixed in **v14.2.32** and **v15.4.7**. The issue occurred when request headers were directly passed into `NextResponse.next()`. In self-hosted applications, this could allow Server-Side Request Forgery (SSRF) if certain sensitive headers from the incoming request were reflected back into the response.

All users implementing custom middleware logic in self-hosted environments are strongly encouraged to upgrade and verify correct usage of the `next()` function.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-57822)

00809c6d844ae52b17170e5012786680eb7517ee224ca87ef346aead5160d8d5

b67e565e25f76c4ecb93e4067222dfd81dafdd34e6de82bc6a350fd44920d60e

4acc4da79c624ad9e4884ff7e1eb36280aabe89f10076b317173e076f4a78388

e404d6815205be70f1e450e76590434f19c9df49f2cbf2606e745106ca036722

a4e98b7350de83e1e3eaf22b3ac755de13026fec5cc150408f9a4bfd33ab3228

0225eb034d024a03bdc90ea6c79f56193662e7c3eee909696298820e517cbb83

e3f1e15940184e940470cec2ce58ef64ce3b1d8b0b44d8d9ff331a3c6b227720

e50ab435694de286b73802602aa431dc256424015ef01e75302de8dcc56be7d7

0fd73347eccf7170f3937e26dbd0caaf7580e3f0b8286d9c2f38e53d5309a973

f68e187b92e3784eaa756855e551789f623897cde82e685b6d2c269416b879f3

75ecddf93b2b7feb972681e0366efc199c8a7788f79172744eead418617f2458

3b04cd0851afc77c1f2ec93fe8f22cf6a1d0823ff203093fa599c6f2b071940c

page id

object type

product line

viewport

next-head-count

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

html/05/9c/059c8c82-475a-4ae1-bc0f-516cb59a48f7_nodriver.html.gz

www.data.ai

Digital Privacy Corporation

101domain GRS Limited

data.ai

Abuse

Google LLC

GOOGLE


                  window.dataLayer = window.dataLayer || [];
                  function gtag(){dataLayer.push(arguments);}
                  gtag('consent','default',{
                    'ad_storage':'denied',
                    'analytics_storage':'denied',
                    'ad_user_data':'denied',
                    'ad_personalization':'denied',
                    'personalization_storage':'denied',
                    'functionality_storage':'granted',
                    'security_storage':'granted',
                    'wait_for_update': 500
                  });
                  gtag('set', 'ads_data_redaction', true);
                


    // delay on GTM load to allow OneTrust to kick off            
    setTimeout(function(){
        (function(w,d,s,l,i){
            w[l]=w[l]||[];
            w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});
            var f=d.getElementsByTagName(s)[0],
            j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';
            j.async=true;j.src='https://www.googletagmanager.com/gtm.js?id='+i+dl;
            f.parentNode.insertBefore(j,f);
        })(window,document,'script','dataLayer','GTM-MQ4J4QH'); 
    }, 1000);


                window.dataLayer = window.dataLayer || [];
                window.dataLayer.push({"Interface Language":"en"});
                


                window.dataLayer = window.dataLayer || [];
                window.dataLayer.push({"Page Type":"Web Prod","env":"production"});
                


                window.dataLayer = window.dataLayer || [];
                window.dataLayer.push({"event":"user init","analytics":{"page type":"Web Prod","env":"production","language":"en","uid":-1}});
                

function tryUntilDone(a){a&&!a()&&setTimeout(function(){tryUntilDone(a)},300)};

function gtag(){dataLayer.push(arguments)}if(window.location.search.match(/utm_expid=\.([^.]+)\.(\d)/i)){var m=window.location.search.match(/utm_expid=\.([^.]+)\.(\d)/i);reportExperimentEvent(m[2],m[1])}function reportExperimentEvent(a,b){void 0!=a&&dataLayer.push({event:"analytics.experiment",analytics:{experiment:{id:b,variant:a,source:"google optimize"}}})}gtag("event","optimize.callback",{callback:reportExperimentEvent});

Requests	IP Address	Location	AS Autonomous System
43	98.95.243.241	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
43	1	-	-

Security Scan Report: www.data.ai

Summary

AI Security Verdict

Moderate Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History