{"report_id":"e60ed1ad-b733-4613-ac12-f3b51954f8a2","version":6,"status":"done","tags":["scam","fraud","crypto"],"date":"2025-09-08T10:46:34Z","url":{"schema":"http","addr":"masaairdrop.site","fqdn":"masaairdrop.site","domain":"masaairdrop.site","tld":"site"},"ip":{"addr":"104.21.13.206","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"masaairdrop.site/","fqdn":"masaairdrop.site","domain":"masaairdrop.site","tld":"site"},"title":"Airdrop Portal | Masa"},"submit":{"url":{"schema":"http","addr":"masaairdrop.site","fqdn":"masaairdrop.site","domain":"masaairdrop.site","tld":"site"},"ip":{"addr":"104.21.13.206","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-13T10:46:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null},{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"summary":[{"fqdn":"masaairdrop.site","ip":{"addr":"104.21.13.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-03","domain_rank":0,"first_seen":"2025-09-08T10:46:35.328801Z","last_seen":"2025-09-08T10:46:35.328801Z","alert_count":10,"request_count":10,"received_data":10161197,"sent_data":4330,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"masaairdrop.site/assets/w-modal.js","fqdn":"masaairdrop.site","domain":"masaairdrop.site","tld":"site"},"ip":{"addr":"104.21.13.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","size":37639,"data":"","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-07-22T10:17:07.414629Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"masaairdrop.site/assets/w-loader.js","fqdn":"masaairdrop.site","domain":"masaairdrop.site","tld":"site"},"ip":{"addr":"104.21.13.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","size":41716,"data":"","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-07-22T10:17:07.499165Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"masaairdrop.site/","fqdn":"masaairdrop.site","domain":"masaairdrop.site","tld":"site"},"ip":{"addr":"104.21.13.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"261fa5f948bd99fdf005f80595805744","sha1":"51d57156b1974322b3ba8542f48893082199d5e1","sha256":"1dcf3b0e1f92d593867169c5ee26771d2f3b77f552eee6c73beba961b91d61b7","sha512":"532ff30dfdd593068e7afc5f98cb1bc72408e594f297911c0a7c590c97a2ed6be6b91981322dfe3b3e90f21241404ae8692139732372f119279dbdf29f3ae429","ssdeep":"","tlshash":"a6015927222233707ce9d5dca8b6dd8e39bb501ae40a0090a09f944d1834bc644f7bec","size":847,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-07-18T13:07:18.148925Z","times_seen":3607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"masaairdrop.site/main.js","fqdn":"masaairdrop.site","domain":"masaairdrop.site","tld":"site"},"ip":{"addr":"104.21.13.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://masaairdrop.site/","date":"2025-09-08T10:46:06.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masaairdrop.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:02:23 GMT","end":"Sun, 09 Nov 2025 13:02:17 GMT"},"fingerprint":{"sha1":"BD:F9:35:EB:08:DD:A9:1F:65:6B:9F:6E:14:5D:FC:A4:03:51:45:2E","sha256":"43:5D:6E:DE:F7:FF:55:C6:AD:B3:6F:2B:19:5D:FB:30:F8:4F:17:53:D7:31:44:51:39:9B:FF:C8:F7:36:3F:FD"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: masaairdrop.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://masaairdrop.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 10:46:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"7cc1672128afdc30efd7d5f035ad7350\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=q1G00hz%2B9xTegi5aOKddfKcfdKVvkZKarwb7OgVVrJYLomkOXpCIelQz13w0HRTbWzDEQQ4rQso%2FuIDaspYbzYTTJ8H6gQKV9hQSqPx6iIUMd%2BQH9FofXrtNnrV0c333oeT5\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 97bddc30ed73568b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":916484,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c4ee02fbb037f392dedfeb90c049a01f","sha1":"92810c3a7f97d41ed3245e94f92d8a2eba5fe2e9","sha256":"0370d98a0e235e5ef3736d898576a3e7cc0d86fb34be0b05b448c9fd352784ca","sha512":"c266b8ae3fae44399fb488f3611886ba2c9d3b231aeb5afc71d6e518b5fa6e47e34d89e072c85084f457aeea249a2f8038a670620b8ae0eb12110c13bc81c641","ssdeep":"12288:Ci22fXRN2bvPF6UQnLqF1CAGAyUuSHxEKFBL7sqQaIvDsRx1LwrcykuEe+FGKMTV:C7AJaFhALQE","tlshash":"e01565981dd1e30792dc9713bf0636e5d2b96c42be98a90be3ac3cccb468906f572d45","first_seen":"2025-09-08T10:46:39.305721Z","last_seen":"2026-03-29T12:35:43.798199Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"masaairdrop.site/","fqdn":"masaairdrop.site","domain":"masaairdrop.site","tld":"site"},"ip":{"addr":"104.21.13.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://masaairdrop.site/","date":"2025-09-08T10:46:06.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masaairdrop.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:02:23 GMT","end":"Sun, 09 Nov 2025 13:02:17 GMT"},"fingerprint":{"sha1":"BD:F9:35:EB:08:DD:A9:1F:65:6B:9F:6E:14:5D:FC:A4:03:51:45:2E","sha256":"43:5D:6E:DE:F7:FF:55:C6:AD:B3:6F:2B:19:5D:FB:30:F8:4F:17:53:D7:31:44:51:39:9B:FF:C8:F7:36:3F:FD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: masaairdrop.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://masaairdrop.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 10:46:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4RGLpQ5MBU9%2B7DLGd6vok4LX9Cc4Immsh8tWVxKcB%2F%2F1hz04%2BtjGQHf3icMGU5rCpzEpfpEya462wev2VfYsYFsS0%2BWXwyE1xqUcPmvSrNj0qDaVXqzMAKNkuzsd0ST1rPl6\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 97bddc30ed75568b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T22:51:02.582672Z","times_seen":17551384,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"masaairdrop.site/","fqdn":"masaairdrop.site","domain":"masaairdrop.site","tld":"site"},"ip":{"addr":"104.21.13.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-08T10:46:05.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masaairdrop.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:02:23 GMT","end":"Sun, 09 Nov 2025 13:02:17 GMT"},"fingerprint":{"sha1":"BD:F9:35:EB:08:DD:A9:1F:65:6B:9F:6E:14:5D:FC:A4:03:51:45:2E","sha256":"43:5D:6E:DE:F7:FF:55:C6:AD:B3:6F:2B:19:5D:FB:30:F8:4F:17:53:D7:31:44:51:39:9B:FF:C8:F7:36:3F:FD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: masaairdrop.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 10:46:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QajLoFAmKbA9D5zLYs5HfAldY8DsB5rQZjY2K%2BVo8woP7ZpzbPf9m4GYjrVWzyLFF9W77L%2BY9ZGdLfi6Jx0AOWkGfQvvAJOh%2Fsb%2FecVu6xddCFfEeyPNOjxJDz2B5zOX5BhX\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 97bddc2d8a5f568b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1425122,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (31997), with CRLF line terminators","md5":"0b4dd6539fae6325471bbb4a643a3bbe","sha1":"0b2dc598ef1808a77c210975acb6552e685d97d2","sha256":"4a1f3fc29456d1940328e247657eae69bd27d98a1000ba1ab6b77f145ff563b8","sha512":"5762f97525f9b3ea309c6b65b2831cad26dbc93460c906a546f61d74c30e9c95a7048723c5b51a814ed812a3cb2929a32faabbdd42e37ab3892b840df53439b2","ssdeep":"12288:OxiEeS7iqFg2GaFPTizF1aFhNioNokwZYo6cZgbFbFFySOKtjxE6ChB7y3fStBUI:OJeSIaYKFVhwZJ6cibxSzqSLUI","tlshash":"f12512709d158e7a2b7301d662ddadcd9d9c3347c524b394b6fd20854fa8ab20af3b18","first_seen":"2025-09-08T10:46:39.307572Z","last_seen":"2026-03-29T12:35:43.782881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":112,"dns":92,"connect":1,"send":0,"wait":332,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"masaairdrop.site/assets/module-b.js","fqdn":"masaairdrop.site","domain":"masaairdrop.site","tld":"site"},"ip":{"addr":"104.21.13.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://masaairdrop.site/","date":"2025-09-08T10:46:06.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masaairdrop.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:02:23 GMT","end":"Sun, 09 Nov 2025 13:02:17 GMT"},"fingerprint":{"sha1":"BD:F9:35:EB:08:DD:A9:1F:65:6B:9F:6E:14:5D:FC:A4:03:51:45:2E","sha256":"43:5D:6E:DE:F7:FF:55:C6:AD:B3:6F:2B:19:5D:FB:30:F8:4F:17:53:D7:31:44:51:39:9B:FF:C8:F7:36:3F:FD"}}},"request":{"raw":"GET /assets/module-b.js HTTP/1.1\r\nHost: masaairdrop.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://masaairdrop.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 10:46:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"de86aabb89c9b634fe49c0dae3338a06\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YFHdtPuvLmisLE3hLkiuWshFdu0V%2BMiqCz3D5IyiEKkcG0DoEcznXRo6%2BaLTGzt4cdFe21XimKuX4gkyT4NjGv%2F1qLeN9p8%2BUeULkbcLtqLS5ZkHruls%2BicKeJ56yoNpezF0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 97bddc30ed69568b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72593,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2b9ca76f81e99327fac32f10379100cf","sha1":"952295feb0552964b196d0b847bda8018689e5e3","sha256":"d093eded03a39b2cb27fe31ebce1c2d75132de9ba9ab80b1371b7522e17b0172","sha512":"e6df99bf45180220ae4c946b0f5e8fa47bec2b1c1610c5a114d7990b03442e3ee0f1a17d318ae9249206de4431cd63221ab085178f3e48fa25babcf4aa260ae3","ssdeep":"1536:hRc7zdtLHt3/ExHcMtDnjoNfe1hhJDvm8xanV7lj8fu83OMK4:hRc7LZacRNf8XJDvm8xadlj828+A","tlshash":"856351c177c1bc8112476776731bf2eaf53a4de87188488ef105b890f5b9a05fae5a38","first_seen":"2025-05-16T16:12:44.549356Z","last_seen":"2026-06-18T10:34:12.486082Z","times_seen":44,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"masaairdrop.site/assets/module-x.js","fqdn":"masaairdrop.site","domain":"masaairdrop.site","tld":"site"},"ip":{"addr":"104.21.13.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://masaairdrop.site/","date":"2025-09-08T10:46:06.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masaairdrop.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:02:23 GMT","end":"Sun, 09 Nov 2025 13:02:17 GMT"},"fingerprint":{"sha1":"BD:F9:35:EB:08:DD:A9:1F:65:6B:9F:6E:14:5D:FC:A4:03:51:45:2E","sha256":"43:5D:6E:DE:F7:FF:55:C6:AD:B3:6F:2B:19:5D:FB:30:F8:4F:17:53:D7:31:44:51:39:9B:FF:C8:F7:36:3F:FD"}}},"request":{"raw":"GET /assets/module-x.js HTTP/1.1\r\nHost: masaairdrop.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://masaairdrop.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 10:46:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"f0214e5c93acae169c0fe58f24aaae97\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=oT8clEiZ35eli4ylnitB%2FiWaVpz5Iktn5KT7ERTX8Sbq68q1ZefR5y2fe99%2F%2FAiyMEtTZgQ6afwxA6iy37bBp%2FNeOYoCNOcAHw%2FTb5xGzHi0Ndkbq6OoDlrAqb0j4j886pdN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 97bddc30ed6c568b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65791,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fac5a8a4657b259fb0e5922ec478f7e8","sha1":"6efa4a1a01be907851b5babb95330bc289e78e76","sha256":"d55ed9fc4e049d8de59be60dc384983a46fc17f798589365d21a61aca909f961","sha512":"ac4283ce3266199acecf21ee0cb987cdad16cb1461d68d8b1e9f19eedcaa629d3db7ae70b67ba7248b9745c0c1e0437d1e1813bdea57522f213d2298648baba6","ssdeep":"1536:qplrE3cfTj/HPMcupsRoFzWsO4k7+ZwmOl/nYyeC2J6:qDrScfTjPMcu2RzsO4k7oJ6","tlshash":"9a532fc277d5bc4102876b76771ba1eae13a9cec70c9488bf014bc94f4ea912fae5570","first_seen":"2025-05-16T16:12:44.54493Z","last_seen":"2026-06-18T10:34:12.44773Z","times_seen":44,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"masaairdrop.site/assets/module-s.js","fqdn":"masaairdrop.site","domain":"masaairdrop.site","tld":"site"},"ip":{"addr":"104.21.13.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://masaairdrop.site/","date":"2025-09-08T10:46:06.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masaairdrop.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:02:23 GMT","end":"Sun, 09 Nov 2025 13:02:17 GMT"},"fingerprint":{"sha1":"BD:F9:35:EB:08:DD:A9:1F:65:6B:9F:6E:14:5D:FC:A4:03:51:45:2E","sha256":"43:5D:6E:DE:F7:FF:55:C6:AD:B3:6F:2B:19:5D:FB:30:F8:4F:17:53:D7:31:44:51:39:9B:FF:C8:F7:36:3F:FD"}}},"request":{"raw":"GET /assets/module-s.js HTTP/1.1\r\nHost: masaairdrop.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://masaairdrop.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 10:46:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"d645bfa741350024c43f53400ab2e736\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FpoYlcJImK5VfXlyMbjYrc2m%2Bekc%2BmSCTExYL4jBEcX6eaQC27txYpQCxsxF7hBerLeOQuGVat6x48Zo0ksG67wLPcakknnhaZ1LZXij8zlSUjm9lIUuqQP23iiDtX3PzYvR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 97bddc30ed71568b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67571,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f969a2b171f3d6cc890f97bb40dd6f3c","sha1":"1b77956a109d870f751c57efa157c03dae92b50d","sha256":"8b0c1a6034a4cde759fc13877e3a62b90f29bbd1a2379d3b0b0f6a1908de0a53","sha512":"81fe275abb4205dc7b8d243df5e633424199153f1a9ad7c4c18a679e584dfaa78a07cae6efe7b398525c79ca930ef659834f7713ddd3ee4b50cd180f48d6f27c","ssdeep":"1536:o6kXsv3QzRzdb/tQRhA8M/AVl3z35+vk8mgLoWzDrVj+j:3v3QzRzdjtQR68M/a3itmg/zU","tlshash":"5c632ec267c2bc4212475b76372bb5e6f93e4ce9b488448af104bc94f0bd916fae1671","first_seen":"2025-05-16T16:12:44.562779Z","last_seen":"2026-06-18T10:34:12.449592Z","times_seen":44,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"masaairdrop.site/assets/w-modal.js","fqdn":"masaairdrop.site","domain":"masaairdrop.site","tld":"site"},"ip":{"addr":"104.21.13.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://masaairdrop.site/","date":"2025-09-08T10:46:06.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masaairdrop.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:02:23 GMT","end":"Sun, 09 Nov 2025 13:02:17 GMT"},"fingerprint":{"sha1":"BD:F9:35:EB:08:DD:A9:1F:65:6B:9F:6E:14:5D:FC:A4:03:51:45:2E","sha256":"43:5D:6E:DE:F7:FF:55:C6:AD:B3:6F:2B:19:5D:FB:30:F8:4F:17:53:D7:31:44:51:39:9B:FF:C8:F7:36:3F:FD"}}},"request":{"raw":"GET /assets/w-modal.js HTTP/1.1\r\nHost: masaairdrop.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://masaairdrop.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 10:46:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"a24410c1d13ece1579788b1bbb3e054d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=H8Z%2BtcB4jKBPhZ8rlBdhCOxQpFF5t5aeXxfUgDqSPzB4VGCeU1yB20Ub9oUD%2BfKMSqAKrpR6%2FbsgzUKlroiqtn55msG4NmZjDPTNKYoxCwF8fUuyV6u9nbDnMjbG1KS%2F5GqL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 97bddc30dd5d568b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37639,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2304), with CRLF line terminators","md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-07-22T10:17:07.414629Z","times_seen":200,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"masaairdrop.site/assets/w-loader.js","fqdn":"masaairdrop.site","domain":"masaairdrop.site","tld":"site"},"ip":{"addr":"104.21.13.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://masaairdrop.site/","date":"2025-09-08T10:46:06.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masaairdrop.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:02:23 GMT","end":"Sun, 09 Nov 2025 13:02:17 GMT"},"fingerprint":{"sha1":"BD:F9:35:EB:08:DD:A9:1F:65:6B:9F:6E:14:5D:FC:A4:03:51:45:2E","sha256":"43:5D:6E:DE:F7:FF:55:C6:AD:B3:6F:2B:19:5D:FB:30:F8:4F:17:53:D7:31:44:51:39:9B:FF:C8:F7:36:3F:FD"}}},"request":{"raw":"GET /assets/w-loader.js HTTP/1.1\r\nHost: masaairdrop.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://masaairdrop.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 10:46:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"fb7060baa8a7ee55493a0e5186e9d53c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VZjQ2MbsY6OBOJbD1%2BjWA6VMnwbAkl0JAflFe1b%2FoiSBWCXEwVe6o0nA%2FzGV5O8jTK087zxyHc%2BthG%2FFKyQFImHL9kzhEhmbUoxuLjZIlz93LoeQEUWzIrHxkGW6dfybsHAN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 97bddc30dd60568b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41716,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2342), with CRLF line terminators","md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-07-22T10:17:07.499165Z","times_seen":393,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"masaairdrop.site/assets/modules.js","fqdn":"masaairdrop.site","domain":"masaairdrop.site","tld":"site"},"ip":{"addr":"104.21.13.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://masaairdrop.site/","date":"2025-09-08T10:46:06.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masaairdrop.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:02:23 GMT","end":"Sun, 09 Nov 2025 13:02:17 GMT"},"fingerprint":{"sha1":"BD:F9:35:EB:08:DD:A9:1F:65:6B:9F:6E:14:5D:FC:A4:03:51:45:2E","sha256":"43:5D:6E:DE:F7:FF:55:C6:AD:B3:6F:2B:19:5D:FB:30:F8:4F:17:53:D7:31:44:51:39:9B:FF:C8:F7:36:3F:FD"}}},"request":{"raw":"GET /assets/modules.js HTTP/1.1\r\nHost: masaairdrop.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://masaairdrop.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 10:46:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"0762e737762a73005849dcbc1907f860\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BFLoHO45MK32M9jSL9%2Fg8x4%2F8SEllU7Eb775KOXELWblXaHuOyRT0hWxJK4tAVjLemRO4hCjq1jtaU839Qj4m6lL8Y%2FE0reDC%2BDCzelHuYvTOXpA5D6j2Eo8nRYQ8isRAx4P\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 97bddc30dd63568b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6101536,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"3b213a32f63e7967e9c2a5535806df09","sha1":"2198e24da34b883543f6b2bb3b3e315cfc5452b0","sha256":"1c56392da634c53a1450bcebb75428d63339a9bdc0e7e4602c0b674dbf27696f","sha512":"1a44f17a2865c14c3570dffb931bdcf07e5d8b7670fcb5154d1088d6fd10d4406acab0e00d666528882f9d91abc635f96b139f64a467c540b695c2c69a70f8a3","ssdeep":"12288:BMGk0Eqoh8EYL7qjs30amseucfju2ZAyppl:BZk0EJGEYL7v0F7Payppl","tlshash":"c9254a8473a1f076439725a4543f100af239b86c384d446cf768eceb7da9989963bf39","first_seen":"2025-07-27T10:34:55.50581Z","last_seen":"2026-07-16T06:14:34.078883Z","times_seen":160,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"masaairdrop.site/","fqdn":"masaairdrop.site","domain":"masaairdrop.site","tld":"site"},"ip":{"addr":"104.21.13.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://masaairdrop.site/","date":"2025-09-08T10:46:06.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masaairdrop.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:02:23 GMT","end":"Sun, 09 Nov 2025 13:02:17 GMT"},"fingerprint":{"sha1":"BD:F9:35:EB:08:DD:A9:1F:65:6B:9F:6E:14:5D:FC:A4:03:51:45:2E","sha256":"43:5D:6E:DE:F7:FF:55:C6:AD:B3:6F:2B:19:5D:FB:30:F8:4F:17:53:D7:31:44:51:39:9B:FF:C8:F7:36:3F:FD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: masaairdrop.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://masaairdrop.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 10:46:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2ws8N4tlESLfJzhgnX%2FDsv76t%2BcrJyyt7%2BnJeGPu0pUCIRz4CpuAdwbPt17atDz1cQYImWayz0u5Mg%2BW0HDr3qL3HyAkXY05b6ujiCcjVGk35M69vhDAf1%2BNtalG6vF4AUH5\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 97bddc30ed74568b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1425122,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (31997), with CRLF line terminators","md5":"0b4dd6539fae6325471bbb4a643a3bbe","sha1":"0b2dc598ef1808a77c210975acb6552e685d97d2","sha256":"4a1f3fc29456d1940328e247657eae69bd27d98a1000ba1ab6b77f145ff563b8","sha512":"5762f97525f9b3ea309c6b65b2831cad26dbc93460c906a546f61d74c30e9c95a7048723c5b51a814ed812a3cb2929a32faabbdd42e37ab3892b840df53439b2","ssdeep":"12288:OxiEeS7iqFg2GaFPTizF1aFhNioNokwZYo6cZgbFbFFySOKtjxE6ChB7y3fStBUI:OJeSIaYKFVhwZJ6cibxSzqSLUI","tlshash":"f12512709d158e7a2b7301d662ddadcd9d9c3347c524b394b6fd20854fa8ab20af3b18","first_seen":"2025-09-08T10:46:39.307572Z","last_seen":"2026-03-29T12:35:43.782881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}}]}