Report - masonkansuper.pw/

Report Overview

Visited public
2023-12-04 17:54:43
Tags
fake_software scam apple phishing
URL
masonkansuper.pw/
Finishing URL
masonkansuper.pw/
IP / ASN
87.236.16.21
#198610 Beget LLC
Title
Your system is infected with 3 viruses
Scam - Fake AntiVirus / Security software
Phishing - Apple

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.gstatic.com	unknown	2008-02-11	2016-07-26 11:37:06	2023-12-04 06:22:54	1.6 kB	12 kB	142.250.74.67
translate.googleapis.com	1005	2005-01-25	2012-05-31 09:21:21	2023-12-04 14:42:31	2.3 kB	169 kB	216.58.207.234
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2023-12-04 06:26:24	465 B	4.2 kB	216.58.207.227
translate-pa.googleapis.com	1620	2005-01-25	2021-11-04 07:37:42	2023-12-04 09:43:34	542 B	2.3 kB	216.58.207.234
translate.google.com	1156	1997-09-15	2012-05-30 03:30:32	2023-12-04 05:10:19	462 B	92 kB	216.58.211.14
threatdetect.org	unknown	2022-01-28	2022-01-28 15:40:10	2023-12-03 08:52:53	484 B	597 B	104.21.59.132
masonkansuper.pw	unknown	unknown	No data	No data	11 kB	535 kB	87.236.16.21

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-04 17:54:30	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:30	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:30	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-12-04 17:54:31	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (7)

	URL	From	Size	First Seen	Last Seen
	translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.NCDVv9o_B5A.O/d=1/exm=el_conf/ed=1/rs=AN8SPfp-aCrxd0pMNJ2j_7sr2ckH2kDAHw/m=el_main	ScriptElement	236 kB	2023-11-27	2024-12-23
Pretty URL translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.NCDVv9o_B5A.O/d=1/exm=el_conf/ed=1/rs=AN8SPfp-aCrxd0pMNJ2j_7sr2ckH2kDAHw/m=el_main IP 216.58.207.234 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-27 21:45 Last Seen2024-12-23 04:35 Times Seen501 Hash a1acfecef726b580906cef3ab91396af af79aac165259b3ed32c0b1ad1a97cfd4c3f55bf 98f6e8c47cc9172e4c8c74ec2a4b4a8df8988dd3b77803cd88bc435c42db2936 Loading...

	masonkansuper.pw/518b33fc1401c239710521d5892b4762.static.js	ScriptElement	90 kB	2023-03-07	2025-05-09
Pretty URL masonkansuper.pw/518b33fc1401c239710521d5892b4762.static.js IP 87.236.16.21 ASN #198610 Beget LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 02:46 Times Seen108559 Hash dc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Loading...

	masonkansuper.pw/2b585af954866250268c987a9bded249.static.js	ScriptElement	3.5 kB	2023-06-29	2024-08-21
Pretty URL masonkansuper.pw/2b585af954866250268c987a9bded249.static.js IP 87.236.16.21 ASN #198610 Beget LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-29 21:42 Last Seen2024-08-21 08:06 Times Seen6 Hash 69eb7007e65a643288d4cf62196d791b 712d2645b680588bca9a7af66078b4eab3c1ec47 718a73f22f921c114ea9490cee0240cfff36a24e4c3b0017495c80b10551e8cc Loading...

	masonkansuper.pw/_/translate_http/_/js/k=translate_http.tr.en_US.NCDVv9o_B5A.O/am=CAM/d=1/rs=AN8SPfpp3nu6l97CsQCuUSY9TVoCT_-UAQ/m=el_conf	ScriptElement	90 kB	2023-12-04	2024-08-20
Pretty URL masonkansuper.pw/_/translate_http/_/js/k=translate_http.tr.en_US.NCDVv9o_B5A.O/am=CAM/d=1/rs=AN8SPfpp3nu6l97CsQCuUSY9TVoCT_-UAQ/m=el_conf IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-04 18:54 Last Seen2024-08-20 16:47 Times Seen6 Hash 26ea916007cfd47b178f2dd49193be02 6448e690b842209ae109fad41bbf092747cb14f0 82403768d66865f9435c341f818c06ea4a6831e752d4cb8bf190bf7fa30c88c9 Loading...

	masonkansuper.pw/660ed67ddb8b474d5c2902dc29d7e70b.static.js	ScriptElement	2.2 kB	2023-03-07	2025-04-26
Pretty URL masonkansuper.pw/660ed67ddb8b474d5c2902dc29d7e70b.static.js IP 87.236.16.21 ASN #198610 Beget LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-04-26 06:48 Times Seen588 Hash c9e9a54501fc6f6e8918b2c0f2a53981 3d530e6c830ccba6284e79c7245bb45d6f4f2197 491fdee141835401d29318ca584ac3e91a38c92d8694f26d90883bfc324ca454 Loading...

	masonkansuper.pw/6660ff369201edf9154d7ee497411e63.static.js	ScriptElement	1.2 kB	2023-03-07	2025-04-26
Pretty URL masonkansuper.pw/6660ff369201edf9154d7ee497411e63.static.js IP 87.236.16.21 ASN #198610 Beget LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-04-26 06:48 Times Seen623 Hash fcd546809170dd574eb37b989529f69a 2e227e144e3b4bd68064354d8a7fbc61125f624c 350baff99bbd3db6cdb8d741bc7f75fa333489ad5dcc641e2cfa0e11130e1920 Loading...

	masonkansuper.pw/_/translate_http/_/js/k=translate_http.tr.no.ttRLJuPcOaM.O/am=CAM/d=1/rs=AN8SPfptgN0GL40YsztPzuiJUcng-hJJTw/m=el_conf	ScriptElement	91 kB	2023-12-04	2023-12-04
Pretty URL masonkansuper.pw/_/translate_http/_/js/k=translate_http.tr.no.ttRLJuPcOaM.O/am=CAM/d=1/rs=AN8SPfptgN0GL40YsztPzuiJUcng-hJJTw/m=el_conf IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-04 18:03 Last Seen2023-12-04 18:54 Times Seen7 Hash 115af85b1f6c03388b51c6e65a4f03b5 247bb05680480a2c244a142e38455c8bd015e2b4 8e04a9cb36434e9ae9858ba53dbb387d13b9748436d5d6badd3f53ea3e7e238d Loading...

HTTP Transactions (34)

URL IP Response Size

masonkansuper.pw/0148d4b7e856b14f318f9deea92ba128.static.png

87.236.16.21

200 OK

3.1 kB

URL GET HTTP/2
masonkansuper.pw/0148d4b7e856b14f318f9deea92ba128.static.png
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
PNG image data, 183 x 73, 8-bit/color RGBA, non-interlaced\012- data
Size
3.1 kB (3080 bytes)
Hash
55e85b5e705fa001457b5c9cf700549c
03871b3fe41b9eefa47cd83dfaacd3a5cd8f3ff7
583f69ad1b34974ca991b6081fbbeac8fd0a82dd755c13183ef48caf6d489df6

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /0148d4b7e856b14f318f9deea92ba128.static.png HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: image/png
content-length: 3080
last-modified: Mon, 04 Dec 2023 17:41:02 GMT
etag: "656e0f2e-c08"
expires: Wed, 03 Jan 2024 17:54:25 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2

masonkansuper.pw/18555fb1a8aef955b3df4d1466aa8e6f.static.png

87.236.16.21

200 OK

2.9 kB

URL GET HTTP/2
masonkansuper.pw/18555fb1a8aef955b3df4d1466aa8e6f.static.png
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
PNG image data, 185 x 76, 8-bit/color RGBA, non-interlaced\012- data
Size
2.9 kB (2903 bytes)
Hash
673c74c95177be49d5ea72513dc71af7
6c0c0a08960e6a3db24f7954d907970357abb6f2
7be66b309db6c3d9f47766f6bdcafbd250e34d30f2b189bef23fcf6067681971

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /18555fb1a8aef955b3df4d1466aa8e6f.static.png HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: image/png
content-length: 2903
last-modified: Mon, 04 Dec 2023 17:41:00 GMT
etag: "656e0f2c-b57"
expires: Wed, 03 Jan 2024 17:54:25 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2

masonkansuper.pw/b050aaf0b04555db3a863e67d8c721e8.static.png

87.236.16.21

200 OK

3.6 kB

URL GET HTTP/2
masonkansuper.pw/b050aaf0b04555db3a863e67d8c721e8.static.png
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
PNG image data, 298 x 77, 8-bit/color RGBA, non-interlaced\012- data
Size
3.6 kB (3564 bytes)
Hash
b6c3248724eb66872671b3a0d1b5396f
d4de549c0099ce9c2384ffc3a4d881e82d2ffd87
3d52c6612be72f25ee70251c102fd5da0b0d3bba926f517cd27e33e893f01a89

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /b050aaf0b04555db3a863e67d8c721e8.static.png HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: image/png
content-length: 3564
last-modified: Mon, 04 Dec 2023 17:40:59 GMT
etag: "656e0f2b-dec"
expires: Wed, 03 Jan 2024 17:54:25 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2

masonkansuper.pw/d36aad317f5185a5e581aaa8a47cce06.static.png

87.236.16.21

200 OK

4.1 kB

URL GET HTTP/2
masonkansuper.pw/d36aad317f5185a5e581aaa8a47cce06.static.png
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
PNG image data, 270 x 77, 8-bit/color RGBA, non-interlaced\012- data
Size
4.1 kB (4101 bytes)
Hash
9fb67c3948cff0cb772149c1f32708f8
e3b39d7986cae9b72c3c0728eb59317b2a25acd3
701c01d0a797d9c1176dea58d378150da930a2e0db0ae881c67594593f5cedc7

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /d36aad317f5185a5e581aaa8a47cce06.static.png HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: image/png
content-length: 4101
last-modified: Mon, 04 Dec 2023 17:40:59 GMT
etag: "656e0f2b-1005"
expires: Wed, 03 Jan 2024 17:54:25 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2

masonkansuper.pw/a97f78e410851e86b1e07280e58a6205.static.png

87.236.16.21

200 OK

2.0 kB

URL GET HTTP/2
masonkansuper.pw/a97f78e410851e86b1e07280e58a6205.static.png
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
PNG image data, 118 x 72, 8-bit/color RGBA, non-interlaced\012- data
Size
2.0 kB (1950 bytes)
Hash
3b4803492027996236d25e81698932f6
97cc72740da813c88b4c904b4818b7f54070394f
d4885ad0e4ff173345b3e21c7c2fa135524bea040f3062dd2751583b95c0c0ab

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /a97f78e410851e86b1e07280e58a6205.static.png HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: image/png
content-length: 1950
last-modified: Mon, 04 Dec 2023 17:40:59 GMT
etag: "656e0f2b-79e"
expires: Wed, 03 Jan 2024 17:54:25 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2

masonkansuper.pw/f28097fd85b38029478f9eb61d27f876.static.png

87.236.16.21

200 OK

3.7 kB

URL GET HTTP/2
masonkansuper.pw/f28097fd85b38029478f9eb61d27f876.static.png
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
PNG image data, 259 x 74, 8-bit/color RGBA, non-interlaced\012- data
Size
3.7 kB (3749 bytes)
Hash
15eae976a3d16f4d271c5024047f0140
2e06af4493a19efdfa34dd7abfb2cf0ec8032be1
3be19a587a65596a67de67aa96a4d6d23d34dd4594cfe4e1b1018c2cfbb69c03

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /f28097fd85b38029478f9eb61d27f876.static.png HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: image/png
content-length: 3749
last-modified: Mon, 04 Dec 2023 17:40:58 GMT
etag: "656e0f2a-ea5"
expires: Wed, 03 Jan 2024 17:54:25 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2

masonkansuper.pw/5af309e9c26a7bb4f4f014a0632f1229.static.png

87.236.16.21

200 OK

4.1 kB

URL GET HTTP/2
masonkansuper.pw/5af309e9c26a7bb4f4f014a0632f1229.static.png
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
PNG image data, 346 x 93, 8-bit/color RGBA, non-interlaced\012- data
Size
4.1 kB (4103 bytes)
Hash
735a0f7be4395e997ec10eec4a1cbdc8
65914f5def63fe521efbdf28978ec5c1ddaa80af
df3ca52f0348f0853b930bdc393721436876a7b4be93570fed4684587f5ced0b

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /5af309e9c26a7bb4f4f014a0632f1229.static.png HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: image/png
content-length: 4103
last-modified: Mon, 04 Dec 2023 17:41:01 GMT
etag: "656e0f2d-1007"
expires: Wed, 03 Jan 2024 17:54:25 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2

masonkansuper.pw/2d95a39f284c9ee358312b0df37e8bae.static.png

87.236.16.21

200 OK

573 B

URL GET HTTP/2
masonkansuper.pw/2d95a39f284c9ee358312b0df37e8bae.static.png
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
PNG image data, 95 x 23, 8-bit/color RGBA, non-interlaced\012- data
Size
573 B (573 bytes)
Hash
561b5789c0cd017358b49abe59bbadaa
0d467143223d06c550019019e79a346f7d9e4865
bdb33675ce5df0b0e9f58a096663af68c26f8b8ee0b8833dea76d41ad6f38ece

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /2d95a39f284c9ee358312b0df37e8bae.static.png HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: image/png
content-length: 573
last-modified: Mon, 04 Dec 2023 17:41:02 GMT
etag: "656e0f2e-23d"
expires: Wed, 03 Jan 2024 17:54:25 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2

masonkansuper.pw/87a66521b71cbea74e9058da9ec6d0aa.static.png

87.236.16.21

200 OK

34 kB

URL GET HTTP/2
masonkansuper.pw/87a66521b71cbea74e9058da9ec6d0aa.static.png
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
PNG image data, 326 x 332, 8-bit/color RGBA, non-interlaced\012- data
Size
34 kB (34223 bytes)
Hash
94af4966d5b0ee76421adee8dbe94cb9
e8dd52828e3560af2b2e92ae2509e116f74d0d57
629a300ac4dd7e20541bacf77775faddd8f1eaf110baed36624c8d10bb028cc2

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /87a66521b71cbea74e9058da9ec6d0aa.static.png HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: image/png
content-length: 34223
last-modified: Mon, 04 Dec 2023 17:41:01 GMT
etag: "656e0f2d-85af"
expires: Wed, 03 Jan 2024 17:54:25 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2

masonkansuper.pw/styles/custom.css

87.236.16.21

404 Not Found

276 B

URL GET HTTP/2
masonkansuper.pw/styles/custom.css
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
276 B (276 bytes)
Hash
972c483538a82b2e1f4bcef8690dca64
4c6c8d9ace4a8679bbcb4e3506ac3d2804cd5860
b885f5222eadb5a02027026aee8913126737d43611bd303aceee15e9bf90bc55

HTTP Headers

GET /styles/custom.css HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Cookie: GoogleAccountsLocale_session=en; googtrans=/en/en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: text/html; charset=iso-8859-1
content-length: 276
X-Firefox-Spdy: h2

www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.qhDXWpKopYk.L.W.O/am=CAM/d=0/rs=AN8SPfqeKn8wA30q4viup18yaci8udUjKQ/m=el_main_css

142.250.74.67

200 OK

4.1 kB

URL GET HTTP/2
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.qhDXWpKopYk.L.W.O/am=CAM/d=0/rs=AN8SPfqeKn8wA30q4viup18yaci8udUjKQ/m=el_main_css
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
https://masonkansuper.pw/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (22367), with no line terminators
Size
4.1 kB (4144 bytes)
Hash
b0b46b807eee39af0aad8f5fefc9b3a2
0fb04f15599bc0844063a6ab776c86e73cb9fbfc
71ca2652e2b3ffd3c0ec966958604714ce6c7af01d961b44adc438518eb58cb3

HTTP Headers

GET /_/translate_http/_/ss/k=translate_http.tr.qhDXWpKopYk.L.W.O/am=CAM/d=0/rs=AN8SPfqeKn8wA30q4viup18yaci8udUjKQ/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 4144
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 07:02:16 GMT
expires: Fri, 29 Nov 2024 07:02:16 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 384729
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.gstatic.com/images/branding/product/2x/translate_24dp.png

142.250.74.67

200 OK

1.8 kB

URL GET HTTP/3
www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
https://masonkansuper.pw/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Size
1.8 kB (1842 bytes)
Hash
c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82

HTTP Headers

GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:20:13 GMT
expires: Fri, 29 Nov 2024 05:20:13 GMT
cache-control: public, max-age=31536000
age: 390852
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.NCDVv9o_B5A.O/d=1/exm=el_conf/ed=1/rs=AN8SPfp-aCrxd0pMNJ2j_7sr2ckH2kDAHw/m=el_main

216.58.207.234

200 OK

83 kB

URL GET HTTP/2
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.NCDVv9o_B5A.O/d=1/exm=el_conf/ed=1/rs=AN8SPfp-aCrxd0pMNJ2j_7sr2ckH2kDAHw/m=el_main
IP
216.58.207.234:443
ASN
#15169 GOOGLE

Requested by
https://masonkansuper.pw/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (2193)
Size
83 kB (83047 bytes)
Hash
a1acfecef726b580906cef3ab91396af
af79aac165259b3ed32c0b1ad1a97cfd4c3f55bf
98f6e8c47cc9172e4c8c74ec2a4b4a8df8988dd3b77803cd88bc435c42db2936

HTTP Headers

GET /_/translate_http/_/js/k=translate_http.tr.en_US.NCDVv9o_B5A.O/d=1/exm=el_conf/ed=1/rs=AN8SPfp-aCrxd0pMNJ2j_7sr2ckH2kDAHw/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 83047
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 18:31:05 GMT
expires: Thu, 28 Nov 2024 18:31:05 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 28 Nov 2023 22:11:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 429800
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=CAM/d=0/rs=AN8SPfraOsu5efVNBOQ1KgAVxhCYpwxnBg/m=el_main_css

142.250.74.67

200 OK

4.0 kB

URL GET HTTP/3
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=CAM/d=0/rs=AN8SPfraOsu5efVNBOQ1KgAVxhCYpwxnBg/m=el_main_css
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
https://masonkansuper.pw/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (20367), with no line terminators
Size
4.0 kB (3960 bytes)
Hash
72d3a735ccca1027f6b3afba2c93e3a7
67f8eff8d17334c59c28fc1753bf451527c7490d
c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1

HTTP Headers

GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=CAM/d=0/rs=AN8SPfraOsu5efVNBOQ1KgAVxhCYpwxnBg/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 19:17:05 GMT
expires: Thu, 28 Nov 2024 19:17:05 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 427041
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ttRLJuPcOaM.O/d=1/exm=el_conf/ed=1/rs=AN8SPfpsbBT3WoHl989mVdUAqBV9y2qo-Q/m=el_main

216.58.207.234

200 OK

83 kB

URL GET HTTP/3
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ttRLJuPcOaM.O/d=1/exm=el_conf/ed=1/rs=AN8SPfpsbBT3WoHl989mVdUAqBV9y2qo-Q/m=el_main
IP
216.58.207.234:443
ASN
#15169 GOOGLE

Requested by
https://masonkansuper.pw/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (2193)
Size
83 kB (83047 bytes)
Hash
a1acfecef726b580906cef3ab91396af
af79aac165259b3ed32c0b1ad1a97cfd4c3f55bf
98f6e8c47cc9172e4c8c74ec2a4b4a8df8988dd3b77803cd88bc435c42db2936

HTTP Headers

GET /_/translate_http/_/js/k=translate_http.tr.no.ttRLJuPcOaM.O/d=1/exm=el_conf/ed=1/rs=AN8SPfpsbBT3WoHl989mVdUAqBV9y2qo-Q/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 83047
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 18:15:27 GMT
expires: Thu, 28 Nov 2024 18:15:27 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 28 Nov 2023 22:11:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 430739
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg

216.58.207.227

200 OK

3.3 kB

URL GET HTTP/2
fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://masonkansuper.pw/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6225), with no line terminators
Size
3.3 kB (3340 bytes)
Hash
2bd5c073a88b83ed74db88282a56ddfb
d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650
ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09

HTTP Headers

GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 3340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 23:23:19 GMT
expires: Fri, 29 Nov 2024 23:23:19 GMT
cache-control: public, max-age=31536000
age: 325867
last-modified: Wed, 20 Apr 2022 14:24:23 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback

216.58.207.234

1.4 kB

URL
translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
IP
216.58.207.234:0
ASN
#15169 GOOGLE

File type
Unicode text, UTF-8 text
Size
1.4 kB (1392 bytes)
Hash
a3eefe14b1b4698460d992bd1673a26b
a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4
87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067

HTTP Headers

GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1
Host: translate-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Mon, 04 Dec 2023 17:54:26 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=511=c2AmYP099atnlmtGbVgmlV8KQb1Mci1oIP0V-Spg7VWzBh_eNmcMkhlTSJWBl46RXtr5PoPrk-XAP_jpOEw-kNdhUDjeHmIwlqrkFMjNnIe-O5CsKJeYN54vbbIMg2uOHAqZ9iIW212ZPBVD7qUp2DQnQ-plWUxsnUaczPJOwY8; expires=Tue, 04-Jun-2024 17:54:26 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly
CONSENT=PENDING+021; expires=Wed, 03-Dec-2025 17:54:26 GMT; path=/; domain=.googleapis.com; Secure
expires: Mon, 04 Dec 2023 17:54:26 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0

216.58.207.234

200 OK

0 B

URL POST HTTP/3
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP
216.58.207.234:443
ASN
#15169 GOOGLE

Requested by
https://masonkansuper.pw/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-encoding,content-type,x-goog-authuser
Referer: https://masonkansuper.pw/
Origin: https://masonkansuper.pw
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
access-control-allow-origin: https://masonkansuper.pw
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin
content-type: text/plain; charset=UTF-8
date: Mon, 04 Dec 2023 17:54:36 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+374; expires=Wed, 03-Dec-2025 17:54:36 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 04 Dec 2023 17:54:36 GMT
cache-control: private

translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0

216.58.207.234

200 OK

131 B

URL POST HTTP/3
translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP
216.58.207.234:443
ASN
#15169 GOOGLE

Requested by
https://masonkansuper.pw/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
JSON data\012- , ASCII text, with no line terminators
Size
131 B (131 bytes)
Hash
ca0b7e866005f6774d284b9f438ebfd2
53644f5ee3640189bdb223473ba6a2d46606c556
502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358

HTTP Headers

POST /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Encoding: gzip
Content-Type: application/binary
Content-Length: 308
Origin: https://masonkansuper.pw
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
access-control-allow-origin: https://masonkansuper.pw
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Mon, 04 Dec 2023 17:54:36 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+485; expires=Wed, 03-Dec-2025 17:54:36 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 04 Dec 2023 17:54:36 GMT

masonkansuper.pw/e91dea83287c74553186b29fc856782f.static.css

87.236.16.21

200 OK

22 kB

URL GET HTTP/2
masonkansuper.pw/e91dea83287c74553186b29fc856782f.static.css
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
ASCII text, with very long lines (22367), with no line terminators
Size
22 kB (22367 bytes)
Hash
b0b46b807eee39af0aad8f5fefc9b3a2
0fb04f15599bc0844063a6ab776c86e73cb9fbfc
71ca2652e2b3ffd3c0ec966958604714ce6c7af01d961b44adc438518eb58cb3

HTTP Headers

GET /e91dea83287c74553186b29fc856782f.static.css HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: text/css
last-modified: Mon, 04 Dec 2023 17:40:58 GMT
vary: Accept-Encoding
etag: W/"656e0f2a-575f"
expires: Mon, 11 Dec 2023 17:54:25 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2

masonkansuper.pw/ce218928d7371f29e3d148d7bd72d83a.static.js

87.236.16.21

200 OK

236 kB

URL GET HTTP/2
masonkansuper.pw/ce218928d7371f29e3d148d7bd72d83a.static.js
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
ASCII text, with very long lines (2193)
Size
236 kB (235845 bytes)
Hash
a1acfecef726b580906cef3ab91396af
af79aac165259b3ed32c0b1ad1a97cfd4c3f55bf
98f6e8c47cc9172e4c8c74ec2a4b4a8df8988dd3b77803cd88bc435c42db2936

HTTP Headers

GET /ce218928d7371f29e3d148d7bd72d83a.static.js HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: application/x-javascript
last-modified: Mon, 04 Dec 2023 17:40:59 GMT
vary: Accept-Encoding
etag: W/"656e0f2b-39945"
expires: Mon, 11 Dec 2023 17:54:25 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2

masonkansuper.pw/656e0dda0334b_v.css

87.236.16.21

200 OK

7.2 kB

URL GET HTTP/2
masonkansuper.pw/656e0dda0334b_v.css
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
ASCII text, with very long lines (7231), with no line terminators
Size
7.2 kB (7208 bytes)
Hash
93eebf3c7991e40d0a475950e9fa13a0
b950b524304cf36fbe899145686278cdbc84fbee
f7b6281aad7522f4f4a3f9feaa12bf91efc31390a7cab42a8064076cedf9f582

HTTP Headers

GET /656e0dda0334b_v.css HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: text/css
last-modified: Mon, 04 Dec 2023 17:41:00 GMT
vary: Accept-Encoding
etag: W/"656e0f2c-1c28"
expires: Mon, 11 Dec 2023 17:54:25 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2

masonkansuper.pw/de085cca3ab800ee8040d4bb6680c21e.static.svg

87.236.16.21

200 OK

6.2 kB

URL GET HTTP/2
masonkansuper.pw/de085cca3ab800ee8040d4bb6680c21e.static.svg
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6445), with no line terminators
Size
6.2 kB (6225 bytes)
Hash
a1a4ffbc52fa4bd18e2f9f7c45ba71fc
0df81f908c859204ae9748c21ad2a4219381b2e4
151e69c94e1f500a46c405df3a0c60043651b22aec7b4ae33d5df3bc9fd82737

HTTP Headers

GET /de085cca3ab800ee8040d4bb6680c21e.static.svg HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: image/svg+xml
last-modified: Mon, 04 Dec 2023 17:40:58 GMT
vary: Accept-Encoding
etag: W/"656e0f2a-1851"
expires: Mon, 11 Dec 2023 17:54:25 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2

masonkansuper.pw/606da9c0f886529bf916391038309244.static.svg

87.236.16.21

200 OK

863 B

URL GET HTTP/2
masonkansuper.pw/606da9c0f886529bf916391038309244.static.svg
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (881), with no line terminators
Size
863 B (863 bytes)
Hash
8a704c375cf7645fdb8fb9566a50d510
1b52e70b7c2d317335b0ebca31666ccf1a149d73
3249bbfdc99c6066f1210a147c83416888e83e8ec39c84d0d753cdb1b8c306ae

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software
urlquery	phishing	Phishing - Apple

HTTP Headers

GET /606da9c0f886529bf916391038309244.static.svg HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Cookie: GoogleAccountsLocale_session=en; googtrans=/en/en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: image/svg+xml
last-modified: Mon, 04 Dec 2023 17:41:01 GMT
vary: Accept-Encoding
etag: W/"656e0f2d-35f"
expires: Mon, 11 Dec 2023 17:54:25 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2

masonkansuper.pw/518b33fc1401c239710521d5892b4762.static.js

87.236.16.21

200 OK

90 kB

URL GET HTTP/2
masonkansuper.pw/518b33fc1401c239710521d5892b4762.static.js
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
ASCII text, with very long lines (65451)
Size
90 kB (89476 bytes)
Hash
dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

HTTP Headers

GET /518b33fc1401c239710521d5892b4762.static.js HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: application/x-javascript
last-modified: Mon, 04 Dec 2023 17:41:01 GMT
vary: Accept-Encoding
etag: W/"656e0f2d-15d84"
expires: Mon, 11 Dec 2023 17:54:25 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2

masonkansuper.pw/6660ff369201edf9154d7ee497411e63.static.js

87.236.16.21

200 OK

1.2 kB

URL GET HTTP/2
masonkansuper.pw/6660ff369201edf9154d7ee497411e63.static.js
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
ASCII text, with very long lines (1223), with no line terminators
Size
1.2 kB (1157 bytes)
Hash
00d68d5fcbe959205761ae2eb92bda5a
e70670eba70fd9428d8ee7d8acacea623bd72d4f
994454fb2f960994c4f0721e63734138eb06498b18f1236e39d4c66de579b054

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /6660ff369201edf9154d7ee497411e63.static.js HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: application/x-javascript
last-modified: Mon, 04 Dec 2023 17:41:00 GMT
vary: Accept-Encoding
etag: W/"656e0f2c-485"
expires: Mon, 11 Dec 2023 17:54:25 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2

masonkansuper.pw/40231cca2f5c8b01348f57480353fc9d.static.js?cb=googleTranslateElementInit

87.236.16.21

200 OK

90 kB

URL GET HTTP/2
masonkansuper.pw/40231cca2f5c8b01348f57480353fc9d.static.js?cb=googleTranslateElementInit
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
ASCII text, with very long lines (2462)
Size
90 kB (90525 bytes)
Hash
26ea916007cfd47b178f2dd49193be02
6448e690b842209ae109fad41bbf092747cb14f0
82403768d66865f9435c341f818c06ea4a6831e752d4cb8bf190bf7fa30c88c9

HTTP Headers

GET /40231cca2f5c8b01348f57480353fc9d.static.js?cb=googleTranslateElementInit HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: application/x-javascript
last-modified: Mon, 04 Dec 2023 17:41:00 GMT
vary: Accept-Encoding
etag: W/"656e0f2c-1619d"
expires: Mon, 11 Dec 2023 17:54:25 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2

masonkansuper.pw/42c9d9cc8f9041fa7c4eafbf27c07e7e.static.css

87.236.16.21

200 OK

1.9 kB

URL GET HTTP/2
masonkansuper.pw/42c9d9cc8f9041fa7c4eafbf27c07e7e.static.css
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
ASCII text, with very long lines (2166), with no line terminators
Size
1.9 kB (1890 bytes)
Hash
887990dfb0e2b855ff590263273c0e65
729dcfb2e6cd844014b71af9d41aaea0b27caba5
ce7e89ede7ac97d3e5eda41aa9e514736174b614d5bf9ce194a7e882a9747803

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /42c9d9cc8f9041fa7c4eafbf27c07e7e.static.css HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: text/css
last-modified: Mon, 04 Dec 2023 17:41:01 GMT
vary: Accept-Encoding
etag: W/"656e0f2d-762"
expires: Mon, 11 Dec 2023 17:54:25 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2

masonkansuper.pw/0b27fadba22b4dd79186fdb5f7b9a039.static.svg

87.236.16.21

200 OK

863 B

URL GET HTTP/2
masonkansuper.pw/0b27fadba22b4dd79186fdb5f7b9a039.static.svg
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (881), with no line terminators
Size
863 B (863 bytes)
Hash
8a704c375cf7645fdb8fb9566a50d510
1b52e70b7c2d317335b0ebca31666ccf1a149d73
3249bbfdc99c6066f1210a147c83416888e83e8ec39c84d0d753cdb1b8c306ae

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software
urlquery	phishing	Phishing - Apple

HTTP Headers

GET /0b27fadba22b4dd79186fdb5f7b9a039.static.svg HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: image/svg+xml
last-modified: Mon, 04 Dec 2023 17:41:02 GMT
vary: Accept-Encoding
etag: W/"656e0f2e-35f"
expires: Mon, 11 Dec 2023 17:54:25 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2

masonkansuper.pw/

87.236.16.21

200 OK

7.5 kB

URL User Request GET HTTP/2
masonkansuper.pw/
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (8003), with no line terminators
Size
7.5 kB (7499 bytes)
Hash
4d72af615e8bd05ff5997fd7d0029c62
5857a16b67d08796388f2b3540e668cb0168c4ef
6b1891242dcd383db8c7a7b480ef80a173e9d27685b07f64c379b46b2588e328

HTTP Headers

GET / HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Mon, 04 Dec 2023 17:40:57 GMT
etag: W/"1d4b-60bb29ee20574"
content-encoding: gzip
X-Firefox-Spdy: h2

masonkansuper.pw/660ed67ddb8b474d5c2902dc29d7e70b.static.js

87.236.16.21

200 OK

2.2 kB

URL GET HTTP/2
masonkansuper.pw/660ed67ddb8b474d5c2902dc29d7e70b.static.js
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
ASCII text, with very long lines (2304), with no line terminators
Size
2.2 kB (2198 bytes)
Hash
79218c8e4d6b9589da61b4daddd1d721
c8bdf2b44db9327ac24f0d02e2aa0bfc69097ab5
db4e31aaf6f2022d9cd8c052537ee237b0b69cd49ab27d6d29913bf401b1ea5a

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /660ed67ddb8b474d5c2902dc29d7e70b.static.js HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: application/x-javascript
last-modified: Mon, 04 Dec 2023 17:41:00 GMT
vary: Accept-Encoding
etag: W/"656e0f2c-896"
expires: Mon, 11 Dec 2023 17:54:25 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2

translate.google.com/translate_a/element.js?cb=googleTranslateElementInit

216.58.211.14

200 OK

91 kB

URL GET HTTP/2
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://masonkansuper.pw/
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT

File type
ASCII text, with very long lines (2462)
Size
91 kB (90793 bytes)
Hash
115af85b1f6c03388b51c6e65a4f03b5
247bb05680480a2c244a142e38455c8bd015e2b4
8e04a9cb36434e9ae9858ba53dbb387d13b9748436d5d6badd3f53ea3e7e238d

HTTP Headers

GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 04 Dec 2023 17:54:25 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+016; expires=Wed, 03-Dec-2025 17:54:25 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

masonkansuper.pw/2b585af954866250268c987a9bded249.static.js

87.236.16.21

200 OK

3.5 kB

URL GET HTTP/2
masonkansuper.pw/2b585af954866250268c987a9bded249.static.js
IP
87.236.16.21:443
ASN
#198610 Beget LLC

Requested by
https://masonkansuper.pw/
Certificate
IssuerLet's Encrypt
Subjectmasonkansuper.pw
Fingerprint69:21:03:2A:E9:77:D3:14:5D:73:7E:96:FA:CB:CF:76:3D:B0:6F:A3
ValidityFri, 06 Oct 2023 21:45:09 GMT - Thu, 04 Jan 2024 21:45:08 GMT

File type
ASCII text, with very long lines (3529), with no line terminators
Size
3.5 kB (3525 bytes)
Hash
3b8888fddd56c5d81a8fd155284d334e
2c8edd3e9ef6a368d0f90b65b51a446e8b59822a
52d34270335a851b23f3c9fcb054c37773fcf41c90142647875dabbb79e6a3e8

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /2b585af954866250268c987a9bded249.static.js HTTP/1.1
Host: masonkansuper.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: application/x-javascript
last-modified: Mon, 04 Dec 2023 17:41:02 GMT
vary: Accept-Encoding
etag: W/"656e0f2e-dc5"
expires: Mon, 11 Dec 2023 17:54:25 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2

threatdetect.org/fonts/?font=aHR0cHM6Ly9tYXNvbmthbnN1cGVyLnB3Lw==

104.21.59.132

200 OK

0 B

URL GET HTTP/2
threatdetect.org/fonts/?font=aHR0cHM6Ly9tYXNvbmthbnN1cGVyLnB3Lw==
IP
104.21.59.132:443
ASN
#13335 CLOUDFLARENET

Requested by
https://masonkansuper.pw/
Certificate
IssuerGoogle Trust Services LLC
Subjectthreatdetect.org
FingerprintE9:89:A2:8E:CF:79:75:CD:EE:BD:E4:82:7D:C6:2B:63:82:90:85:CC
ValidityTue, 24 Oct 2023 06:57:15 GMT - Mon, 22 Jan 2024 06:57:14 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /fonts/?font=aHR0cHM6Ly9tYXNvbmthbnN1cGVyLnB3Lw== HTTP/1.1
Host: threatdetect.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://masonkansuper.pw
DNT: 1
Connection: keep-alive
Referer: https://masonkansuper.pw/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 04 Dec 2023 17:54:25 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZnIBw5hFWlRbQ1AlplF2NcUCFYSTF%2FSO1c9XxL4ZxkyrU1lSIpA3rUkI6HxsfdDk5fBh%2BFSltRAP%2FnaE2GBZL3DwFV39LGfqWXxQPKieTqhJh3nJmYGquS70I3hCLQQFBYQ7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8305ea1e29195696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (34)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size