{"report_id":"0ae84055-e683-4e4e-a4a7-7d2638468bf0","version":0,"status":"done","tags":[],"date":"2026-09-26T01:51:40Z","url":{"schema":"http","addr":"kutt.ar-email.com.br/","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":0,"asn":64233,"as":"Teramundi","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"kutt.ar-email.com.br/","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"title":"Kutt.it | Modern Open Source URL shortener.","dom":{"size":17171,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (17171), with no line terminators","md5":"0fabc7c56fe722d7711da9b58db0fa38","sha1":"0e4146ac8c4aeb3a774d671b9bde48daabb92094","sha256":"021d07db6255defa0996518c0f82cace79b5e5df143a6e4698a9c3793c1721cf","sha512":"5ae96e5e616549d28fa58237c21c1ec80ecc252d98cbb26d306492fac5c9e58bcfbe627608cccb7b746264417bb53e3286d4549ae0ce35b6032aa1da0d1180d3","ssdeep":"384:G+KyI33BROHzC8zK9KGV3bPIvvCwO/V99kDfjOW4f:GZyI33BROTC8W979PIXCHZkDfjOW4f","tlshash":"1e72d9264301df2d06538a98fb77f6e6f22b7199f4d0a42869fec65802cefc1d52545c","dom_hash":"domhashd435992186bdcd6303c4f876428d869c","first_seen":"2026-09-26T01:51:51.313634Z","last_seen":"2026-09-26T01:51:51.313634Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kutt.ar-email.com.br/","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":0,"asn":64233,"as":"Teramundi","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-31T01:51:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"kutt.ar-email.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.google.com","ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-20T23:01:40.450976Z","alert_count":0,"request_count":3,"received_data":58451,"sent_data":2016,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kutt.ar-email.com.br","ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"domain_registered":"2015-12-10","domain_rank":0,"first_seen":"2026-03-15T11:43:00.856211Z","last_seen":"2026-07-02T22:19:23.900739Z","alert_count":12,"request_count":12,"received_data":653264,"sent_data":5967,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-20T23:34:05.890074Z","alert_count":0,"request_count":4,"received_data":1777657,"sent_data":2156,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":5,"received_data":201702,"sent_data":2792,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":5817,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kutt.ar-email.com.br/_next/static/chunks/commons.742b947b9590c6d560e7.js","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"07e164e2e503c7f06be01431bc1af07b","sha1":"5b86fb2839fa73342cdae2629766c2ea31e37722","sha256":"93ba9440caa6d53353319a05ba4b31e3841e92e5a78d2ef4e150532729fb46c2","sha512":"ae771d8d3cafcd87eee1171a0a7b965173502670fc39dcdcbc4494d991d85dbf189c05cd3e8da77770adf4b15b9633e8f92d5a3f540366315b89c496aba14ffa","ssdeep":"3072:xZzqNj9tC5hfYp7xUBR5rnoFZwXC8h50l0ujY9LD0t51rnOn7MusRHEaTB6G1yKD:SbC/Yp7VwXJ+leIOnIuIEq1ys","tlshash":"b77429dd75c2f05517f361b6406f240bf37a192a680d8850f222e8e5bcb945e923bfad","size":341519,"data":"","first_seen":"2026-06-02T20:05:24.501322Z","last_seen":"2026-09-26T01:58:59.106887Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcJB9EUAAAAAEb8adov8JEa4xsYcGjerFmAHxZ-\u0026co=aHR0cHM6Ly9rdXR0LmFyLWVtYWlsLmNvbS5icjo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026badge=inline\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=5qbi6mdv0dkr","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-09-26T05:28:13.287753Z","times_seen":523011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcJB9EUAAAAAEb8adov8JEa4xsYcGjerFmAHxZ-\u0026co=aHR0cHM6Ly9rdXR0LmFyLWVtYWlsLmNvbS5icjo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026badge=inline\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=5qbi6mdv0dkr","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"49a32a1bddfd16904ccff604dddd6721","sha1":"0eeffe8ae47ee8e3afc23d8cee531298f8817a08","sha256":"92faeb8c27582666d027d33059e1d67210301aebd3d0ff3a0fea6f97ad2abfa8","sha512":"4e82e88343ba3fbf85bc617f102e207d32b5d3d7feba9d086ad1ad552f928e9526989333bc7c3dd9f2617a2067cd2e28a4cb2452cffc36312484bc094983285f","ssdeep":"768:IUOW5M7LS9fs1IeR9oRwvl161jA3XEBUotwL9t:9X5CLS61N9oRw91Y04twD","tlshash":"eef2be1dec0724ebefbe8fe01af46bc4287d42595a8a056e34f910d78a515c3719b8ec","size":36266,"data":"","first_seen":"2026-09-26T01:51:51.376598Z","last_seen":"2026-09-26T01:51:51.376598Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"00dd110df691feb6b1cf3effaba22d5e","sha1":"8ba8d64ae4dfdf59491dd33ec869fa802d588e34","sha256":"f79e2f94d2aa092c2da01fa6c1dc2520555cd0ffd5d7a4572a0a51fba2a9bce4","sha512":"cdf4b0be7b28acdadaacacc9c889e72f6bef473bc445f0acd66ca2fa921df78d8efa79ef1548fa86ed1cdfaab7be25de12198f0e938f1749dabfe93ed4f2ca30","ssdeep":"","tlshash":"57b012b30920c4280c0045c2dc27d3b8e0015034f7f0c0f1c4681fd401114f78408d00","size":102,"data":"","first_seen":"2026-09-22T05:52:14.046625Z","last_seen":"2026-09-26T05:53:06.222089Z","times_seen":1940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"3b3d07079c8c1c29eacc08f7459be74d","sha1":"e59d089e1dfa3c8f804efcf9e1511ae9b03fe526","sha256":"33247e39ab5e5e2b83c5dd99e9642c461c0d8c38d8aeb90917ce6c0514f5195b","sha512":"fc8cdd2e87ef744444f70ae3587299eb89e5bd076ebb8aff18d44cb69344feddf4d44b32110e96d8167d451085ad13cb70a75ace6d06961fefad3986c6faf071","ssdeep":"6144:EmXAYWWlqL5uNbmCLq0ACoxqV/puv+dMQ/C8oJbsqeJcr+i6MDzBb/5RmSGs6RKh:3XRBqrXQlbFotsqeJcr6WbPDvEAJJ6u","tlshash":"97052ad8741271a55332b9f2607b218923be9532c4cd1a6e71e4d8f02ef484a72b5fb7","size":848285,"data":"","first_seen":"2026-09-22T05:52:13.920048Z","last_seen":"2026-09-26T06:05:03.341222Z","times_seen":2638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kutt.ar-email.com.br/","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"85940ac4bdb90afdb44862a2339188b3","sha1":"b3fd19142461ea05379b7a00054e8ae3b696f355","sha256":"0e4a010c6dfad6537c70a63eced8739fab12fe0552abb9f39fb662084ad69014","sha512":"96cf6f4b4e1539a9a12b8c4fc5c7ba950b040c65c599473b8ad4ab4ad8d528e19479164754a51f4bfaececab98117848f9d1811a17cbb02ed01b528983e6ab98","ssdeep":"","tlshash":"76a022a0e0b00820cc32f3a2822bf3c0f03200a0f220888020080280333200bc02cc8e","size":71,"data":"","first_seen":"2023-03-07T12:10:23Z","last_seen":"2026-09-26T01:58:59.124797Z","times_seen":477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"260bd0d851cb9a699b60c74ff5fda715","sha1":"aa4b5cb8785c742f07090de525a9c7649db6ef7a","sha256":"63dcd63c4310bf9b806967c93ecda3e1acf1461737bcf25a8e7aecf53907756a","sha512":"302c3ff015930bde1bfe5ceb43f0c0708ac62cec2ae88742aa7ac28234f6d5d02ccec43766bad74d6d8abeb30b3705106c6d22f6bf5bbf99053e92df732e3688","ssdeep":"","tlshash":"cf11e1b31918a0354b7209e5e1ffcb75e452701cf16885e8d915da842e6accbce06595","size":978,"data":"","first_seen":"2026-09-22T06:42:02.834303Z","last_seen":"2026-09-26T05:04:46.849257Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kutt.ar-email.com.br/_next/static/ofGVm1fDYD9eG18g9zWFf/pages/index.js","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ae0611c21626023ab8d2d6a6b2c8281","sha1":"669c84e04e7330ae37516055471eb72dba23a654","sha256":"edfa9b2ac0badb7b1978dabbf56dc504bdde1c9df833d72a2660cacb3be151be","sha512":"7d839742700b4088b8b59671c43f87ac5b0acb0f3ea57f84a986b2163f04db1538fe2eb8f635ec425ac070c025cc2d9c533e68845aa4d04da0fdf256e2858987","ssdeep":"1536:dtn7LFBznxevVIYm5jKMucqsjy6sM7GUhHudgZVhcKOc:dtntBz/50vUvZVhNF","tlshash":"75b36e95b79070b913d392e9a03f3909f1b61525f84ea064f671d0e0a879ede6133fac","size":118175,"data":"","first_seen":"2026-06-02T20:05:24.506679Z","last_seen":"2026-09-26T01:58:59.118821Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kutt.ar-email.com.br/_next/static/runtime/main-f50d8b6dc8435fd94593.js","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c355beb0041be02f088dcb146afda26f","sha1":"e88acbe3746baf591377061afe5a93b05d22c15a","sha256":"938a1bd8ec6f65dad27c02ee3dccdd9bea8b4f13625277ee9eae880b621f1a9b","sha512":"8840e33a67319c89957311dc53e70c00f22d956b5886af2321bcccc1241df3f24be3790b2f056c370cd5d16b0850b95f072faa00ba7c6039bad6c6a976e3d4c8","ssdeep":"192:JP4qhzIvKGyrDDxjqNjqw5rxRU3PmVYD8uay7iTBABBcROewgeLwWxYATMwiJQHU:hjhzIvzkMU3PBHAOBkOxhzjyxUpM","tlshash":"8252d9adb5c6f42106d3202ca07f250662fa2929c4dd5401b7b6d8c6be79849a637fe4","size":14141,"data":"","first_seen":"2026-06-02T20:05:24.507515Z","last_seen":"2026-09-26T01:58:59.11286Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-09-26T05:34:42.298642Z","times_seen":104819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kutt.ar-email.com.br/_next/static/ofGVm1fDYD9eG18g9zWFf/pages/_app.js","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"95261cb8a5276856090bd084408859eb","sha1":"72887c770e52d121563ab41ff9b3bd357d03e6bf","sha256":"7d6ce487f4a0eefea8a949f0657ffe4ab98fafafbdcf8d2bdf50ffc5157091ac","sha512":"fbe660275b59e432818ef53f7d7d4ea6b33b89ded7c95edbceade406f14803fbc1dff4ec9af0792931fd87b7bf3fed071e13bc0f8daacc50e163e120f6421229","ssdeep":"384:SpFtzyX7+BPyPN6C0PTrwSexmGCdoIqqmkEFPOyVm:SxzyXzV0PG5CRqqmkmPfg","tlshash":"b5a2d7cd72c5f0d257e320e1443f620ff3b6a969a84dd840a222d8f5adb596f4227f58","size":22360,"data":"","first_seen":"2026-06-02T20:05:24.495552Z","last_seen":"2026-09-26T01:58:59.112245Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kutt.ar-email.com.br/_next/static/runtime/webpack-035ac2b14bde147cb4a8.js","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40b4095b5b68a142c856f388ccb756f2","sha1":"31905340609587e1a7c5d4a92d08a2fa3b404db1","sha256":"e2fbb88b4d15a9f7702ca58ebbe8d1d927ffd2667e585e70a5f3d51acb1a37d2","sha512":"3fab812739b50d25209fe4ec6a72d2441ece9d4a9347dfd0a47cec27ccb07676ed8b9958e4985831a896166492db33d9d88951c88f1fd0bb1858908209058259","ssdeep":"","tlshash":"1b3131d536a4f8ac53821d5d083f7006f2291d65127df5c19384e8b2bc2488e9066eaa","size":1531,"data":"","first_seen":"2023-03-07T12:10:23Z","last_seen":"2026-09-26T01:58:59.106169Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"[react-ga]gaTrackingID is required in initialize()","filename":"https://kutt.ar-email.com.br/_next/static/ofGVm1fDYD9eG18g9zWFf/pages/_app.js","line_number":1,"column_number":8108},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcJB9EUAAAAAEb8adov8JEa4xsYcGjerFmAHxZ-\u0026co=aHR0cHM6Ly9rdXR0LmFyLWVtYWlsLmNvbS5icjo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026badge=inline\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=5qbi6mdv0dkr","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kutt.ar-email.com.br/","date":"2026-09-26T01:51:06.586Z","timestamp":1790387466586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LcJB9EUAAAAAEb8adov8JEa4xsYcGjerFmAHxZ-\u0026co=aHR0cHM6Ly9rdXR0LmFyLWVtYWlsLmNvbS5icjo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026badge=inline\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=5qbi6mdv0dkr HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kutt.ar-email.com.br/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 26 Sep 2026 01:51:06 GMT\r\ncontent-security-policy: script-src 'nonce-MbVwx5LDvm0yyebbr6RDeQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54795,"size_decoded":29572,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36272)","md5":"71ab4db459441a09f626d57f33316cf2","sha1":"3433f870dd9997293108031d15cf3eeb11e0ed07","sha256":"8614ea09987760d81d690450af9b8c25579012667113b54bd640fa2922a3495d","sha512":"f429815c3d8d970a30eccefb1df1497fbae12e0fcfdeaa7791c972a9208f2492f6ab8227796a5e45626b949f08e732fee453bbe47de15b0861baca13edd88f9d","ssdeep":"768:UFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+3/M9DoqkUOW5M7LS9fs1IeR9oRwvl161N:y+kLmqZX5CLS61N9oRw91Y04tw6","tlshash":"62336c5488071082db974ce123d97f70fd5e8200724690ba77fd57abeec6d93a26a39c","first_seen":"2026-09-26T01:51:51.315315Z","last_seen":"2026-09-26T01:51:51.315315Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcJB9EUAAAAAEb8adov8JEa4xsYcGjerFmAHxZ-\u0026co=aHR0cHM6Ly9rdXR0LmFyLWVtYWlsLmNvbS5icjo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026badge=inline\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=5qbi6mdv0dkr","date":"2026-09-26T01:51:07.195Z","timestamp":1790387467195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcJB9EUAAAAAEb8adov8JEa4xsYcGjerFmAHxZ-\u0026co=aHR0cHM6Ly9rdXR0LmFyLWVtYWlsLmNvbS5icjo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026badge=inline\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=5qbi6mdv0dkr\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sat, 26 Sep 2026 01:51:07 GMT\r\ndate: Sat, 26 Sep 2026 01:51:07 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":951,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"00dd110df691feb6b1cf3effaba22d5e","sha1":"8ba8d64ae4dfdf59491dd33ec869fa802d588e34","sha256":"f79e2f94d2aa092c2da01fa6c1dc2520555cd0ffd5d7a4572a0a51fba2a9bce4","sha512":"cdf4b0be7b28acdadaacacc9c889e72f6bef473bc445f0acd66ca2fa921df78d8efa79ef1548fa86ed1cdfaab7be25de12198f0e938f1749dabfe93ed4f2ca30","ssdeep":"","tlshash":"57b012b30920c4280c0045c2dc27d3b8e0015034f7f0c0f1c4681fd401114f78408d00","first_seen":"2026-09-22T05:52:14.046625Z","last_seen":"2026-09-26T05:53:06.222089Z","times_seen":1940,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kutt.ar-email.com.br/images/callout.png","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kutt.ar-email.com.br/","date":"2026-09-26T01:51:05.454Z","timestamp":1790387465454,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ar-sms.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:08:35 GMT","end":"Tue, 22 Dec 2026 03:08:34 GMT"},"fingerprint":{"sha1":"48:68:3F:C3:1D:A2:B6:41:30:0F:0A:BF:61:14:EA:01:AA:F4:5D:AD","sha256":"93:16:D0:92:DB:14:51:8E:C1:2B:5E:33:56:FD:7B:1F:C5:95:8C:46:28:15:D1:EC:54:2C:88:E6:77:E0:0D:3A"}}},"request":{"raw":"GET /images/callout.png HTTP/1.1\r\nHost: kutt.ar-email.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kutt.ar-email.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 01:51:05 GMT\r\nContent-Type: image/png\r\nContent-Length: 87955\r\nConnection: keep-alive\r\nX-DNS-Prefetch-Control: off\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains\r\nX-Download-Options: noopen\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Fri, 17 Jan 2020 16:03:16 GMT\r\nETag: W/\"15793-16fb43e8da0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87955,"size_decoded":88430,"mime_type":"image/png","magic":"PNG image data, 1102 x 676, 8-bit/color RGBA, non-interlaced","md5":"cfb391b7c3b91fef267253b58d4f8815","sha1":"627c9adfcb00aae1f194855399e9575f1a89206a","sha256":"5ab271a6a3c8718fdf2d3ec5b1eb4c8001ef68f080c26887ce25a6046f2d6644","sha512":"c0c333edcf151eb5432d0671a9eb223cfd73e323a7c81d17b6145e07911456b53b68ec4032a34a940bc5caf458ac0c31bc4168cd481ffb27f1ae834794e1ba82","ssdeep":"1536:DeG6gZCMrncEGDDNiud19iPwvIiR7BC3UZ5CJ5OkInw3:Dsry9kd19i4vImg65CJqw3","tlshash":"818302ea4dd6c590ec6f6038e4bdec2a5733c1ca70060dbae0b6754cc5167faa8868d0","first_seen":"2023-05-11T01:32:14Z","last_seen":"2026-09-26T01:58:59.119779Z","times_seen":511,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":254,"dns":0,"connect":0,"send":0,"wait":88,"receive":259,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"kutt.ar-email.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kutt.ar-email.com.br/images/favicon-16x16.png","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kutt.ar-email.com.br/","date":"2026-09-26T01:51:06.167Z","timestamp":1790387466167,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ar-sms.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:08:35 GMT","end":"Tue, 22 Dec 2026 03:08:34 GMT"},"fingerprint":{"sha1":"48:68:3F:C3:1D:A2:B6:41:30:0F:0A:BF:61:14:EA:01:AA:F4:5D:AD","sha256":"93:16:D0:92:DB:14:51:8E:C1:2B:5E:33:56:FD:7B:1F:C5:95:8C:46:28:15:D1:EC:54:2C:88:E6:77:E0:0D:3A"}}},"request":{"raw":"GET /images/favicon-16x16.png HTTP/1.1\r\nHost: kutt.ar-email.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kutt.ar-email.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 01:51:06 GMT\r\nContent-Type: image/png\r\nContent-Length: 441\r\nConnection: keep-alive\r\nX-DNS-Prefetch-Control: off\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains\r\nX-Download-Options: noopen\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Fri, 17 Jan 2020 16:03:16 GMT\r\nETag: W/\"1b9-16fb43e8da0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":441,"size_decoded":912,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"65268f18c5930659ceacf1ca6260bdde","sha1":"e3e846ad8694a3e513303669dc1c45ea7af18005","sha256":"33392f7fb528d96096b8b4d2bbd22fab5810d0163d16afc987329a7797995d37","sha512":"72ffffd1c8bb71399cd3cd96659b01cfba681253a426a211f36a80b04772b12c9409e17551f908a7562ab1f521cab8bea4c2dc9b50f9e4c7c8c64a0d61e76c11","ssdeep":"","tlshash":"a7f023c2a98048a073c57931ef8b64f12e7a641a40605468246fd1d72ae9ea905f810f","first_seen":"2023-05-11T01:32:14Z","last_seen":"2026-09-26T01:58:59.123961Z","times_seen":262,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"kutt.ar-email.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcJB9EUAAAAAEb8adov8JEa4xsYcGjerFmAHxZ-\u0026co=aHR0cHM6Ly9rdXR0LmFyLWVtYWlsLmNvbS5icjo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026badge=inline\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=5qbi6mdv0dkr","date":"2026-09-26T01:51:06.704Z","timestamp":1790387466704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35518\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 17:31:23 GMT\r\nexpires: Tue, 21 Sep 2027 17:31:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 21 Sep 2026 04:02:44 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 375583\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75464,"size_decoded":36365,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8d238bbb2bc7a7869927ef2503d16191","sha1":"912fd0a764df016c6b465a1f764a58856dc8e41a","sha256":"32bd2171bd3e9dce2bcd973d4b6e0492a64f2ad5b58fc9941f12a1973fb3c0ba","sha512":"0f576e605660ab3774a8da75b359d28228d5e117be771f4bd0e66b8bc2b5868a7381af5de6721fa1fe3f14a982f286b35e9654bc436d12cf992f4dde7ba8eec9","ssdeep":"768:8FUwZKuv7Ht5prr2yNU4FJFC7vCTaYyR0v+UJYLbzRWpebyBHM54Pmx1ugKSGdXS:yv1jNDJT4R0v+U+LXkHZzhXwWx7W1bx7","tlshash":"74736e7338403b26f8279b5161d6aafdf21cc523e5514bfaa9557a31c3cb1a7822370b","first_seen":"2026-09-22T05:52:13.875819Z","last_seen":"2026-09-26T06:07:16.240187Z","times_seen":2242,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcJB9EUAAAAAEb8adov8JEa4xsYcGjerFmAHxZ-\u0026co=aHR0cHM6Ly9rdXR0LmFyLWVtYWlsLmNvbS5icjo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026badge=inline\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=5qbi6mdv0dkr","date":"2026-09-26T01:51:06.706Z","timestamp":1790387466706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 354446\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 18:50:36 GMT\r\nexpires: Tue, 21 Sep 2027 18:50:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 21 Sep 2026 04:02:44 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 370830\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":848285,"size_decoded":355333,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (656)","md5":"3b3d07079c8c1c29eacc08f7459be74d","sha1":"e59d089e1dfa3c8f804efcf9e1511ae9b03fe526","sha256":"33247e39ab5e5e2b83c5dd99e9642c461c0d8c38d8aeb90917ce6c0514f5195b","sha512":"fc8cdd2e87ef744444f70ae3587299eb89e5bd076ebb8aff18d44cb69344feddf4d44b32110e96d8167d451085ad13cb70a75ace6d06961fefad3986c6faf071","ssdeep":"6144:EmXAYWWlqL5uNbmCLq0ACoxqV/puv+dMQ/C8oJbsqeJcr+i6MDzBb/5RmSGs6RKh:3XRBqrXQlbFotsqeJcr6WbPDvEAJJ6u","tlshash":"97052ad8741271a55332b9f2607b218923be9532c4cd1a6e71e4d8f02ef484a72b5fb7","first_seen":"2026-09-22T05:52:13.920048Z","last_seen":"2026-09-26T06:05:03.341222Z","times_seen":2638,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcJB9EUAAAAAEb8adov8JEa4xsYcGjerFmAHxZ-\u0026co=aHR0cHM6Ly9rdXR0LmFyLWVtYWlsLmNvbS5icjo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026badge=inline\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=5qbi6mdv0dkr","date":"2026-09-26T01:51:07.077Z","timestamp":1790387467077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 381522\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-09-26T05:29:27.486333Z","times_seen":999475,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU","date":"2026-09-26T01:51:07.231Z","timestamp":1790387467231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 354446\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 18:50:36 GMT\r\nexpires: Tue, 21 Sep 2027 18:50:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 21 Sep 2026 04:02:44 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 370831\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":848285,"size_decoded":355333,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (656)","md5":"3b3d07079c8c1c29eacc08f7459be74d","sha1":"e59d089e1dfa3c8f804efcf9e1511ae9b03fe526","sha256":"33247e39ab5e5e2b83c5dd99e9642c461c0d8c38d8aeb90917ce6c0514f5195b","sha512":"fc8cdd2e87ef744444f70ae3587299eb89e5bd076ebb8aff18d44cb69344feddf4d44b32110e96d8167d451085ad13cb70a75ace6d06961fefad3986c6faf071","ssdeep":"6144:EmXAYWWlqL5uNbmCLq0ACoxqV/puv+dMQ/C8oJbsqeJcr+i6MDzBb/5RmSGs6RKh:3XRBqrXQlbFotsqeJcr6WbPDvEAJJ6u","tlshash":"97052ad8741271a55332b9f2607b218923be9532c4cd1a6e71e4d8f02ef484a72b5fb7","first_seen":"2026-09-22T05:52:13.920048Z","last_seen":"2026-09-26T06:05:03.341222Z","times_seen":2638,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kutt.ar-email.com.br/","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-26T01:51:04.257Z","timestamp":1790387464257,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ar-sms.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:08:35 GMT","end":"Tue, 22 Dec 2026 03:08:34 GMT"},"fingerprint":{"sha1":"48:68:3F:C3:1D:A2:B6:41:30:0F:0A:BF:61:14:EA:01:AA:F4:5D:AD","sha256":"93:16:D0:92:DB:14:51:8E:C1:2B:5E:33:56:FD:7B:1F:C5:95:8C:46:28:15:D1:EC:54:2C:88:E6:77:E0:0D:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kutt.ar-email.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 01:51:04 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-DNS-Prefetch-Control: off\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains\r\nX-Download-Options: noopen\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nX-Powered-By: Next.js\r\nETag: W/\"8fd5-1hYqtBeePZ3QJ+ty/CTNA4xlMaw\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36821,"size_decoded":8397,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (10760)","md5":"0ff73f65d607cde5c6d94af5e0039211","sha1":"d6162ab4179e3d9dd027eb72fc24cd038c6531ac","sha256":"042c0e081f28bb2cbbb739d6da36797b1e48d90e5e14aaac6187cc087912bd84","sha512":"42c96acdc70e0305ee6d444e95b632110808c7e9113cf781053dfd088d90d59f6e2bd5330c365f1f9837c710091ab71ef130b0b8e0c94f309798d6ccc9893a33","ssdeep":"384:R+cugPSq3MsiXlahRL8Xcu+OyEr0zFfsJQQNVgNJQQN5JQQNMJQQNfJQQNN476S6:Rbx0zAnl/FjhUUCC8Wn7NfjOW4f","tlshash":"39f2b7770312330ca513cd619ba563aab224c43af6a736ed9c626625c7cfbc346716cd","first_seen":"2026-06-02T20:05:24.504937Z","last_seen":"2026-09-26T01:58:59.111426Z","times_seen":3,"resource_available":true,"data":null}},"time_used":749,"timings":{"blocked":-1,"dns":378,"connect":87,"send":0,"wait":105,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"kutt.ar-email.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Nunito:300,400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kutt.ar-email.com.br/","date":"2026-09-26T01:51:05.434Z","timestamp":1790387465434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css?family=Nunito:300,400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kutt.ar-email.com.br/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 26 Sep 2026 01:51:05 GMT\r\ndate: Sat, 26 Sep 2026 01:51:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5133,"size_decoded":1278,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1615f1157585d486b3c9a21cacf2166c","sha1":"12bffd452c858cb1019485795c843d2c686304de","sha256":"f7cf7b26cd532a040636e2d7cf248d310eaedcfec1477f9c709f824f9f944f5a","sha512":"914e65eb517340450ce32bfbb51e978c609f21b18c44fa07a499c048a144f93eec68f41a69640d1bbe54d30631607e352830f73da7fd6af4373c5de07852ff06","ssdeep":"96:BOWbTxOW7FZOOOWKOWQJc+uaOWENqOLbTxOL7FZOOOLKOLQJc+uaOLENqOCbTxO8:lH1yGCkbEH0y7vkmJH5yyWk/H","tlshash":"49b1baa1142bd400a7832cc667df7e33dd4e62103458c47aebfd9898eca7d272260b5e","first_seen":"2025-09-20T04:08:11.857915Z","last_seen":"2026-09-26T01:58:59.115438Z","times_seen":686,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":2,"connect":27,"send":0,"wait":46,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kutt.ar-email.com.br/_next/static/ofGVm1fDYD9eG18g9zWFf/pages/_app.js","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kutt.ar-email.com.br/","date":"2026-09-26T01:51:05.439Z","timestamp":1790387465439,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ar-sms.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:08:35 GMT","end":"Tue, 22 Dec 2026 03:08:34 GMT"},"fingerprint":{"sha1":"48:68:3F:C3:1D:A2:B6:41:30:0F:0A:BF:61:14:EA:01:AA:F4:5D:AD","sha256":"93:16:D0:92:DB:14:51:8E:C1:2B:5E:33:56:FD:7B:1F:C5:95:8C:46:28:15:D1:EC:54:2C:88:E6:77:E0:0D:3A"}}},"request":{"raw":"GET /_next/static/ofGVm1fDYD9eG18g9zWFf/pages/_app.js HTTP/1.1\r\nHost: kutt.ar-email.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kutt.ar-email.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 01:51:05 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-DNS-Prefetch-Control: off\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains\r\nX-Download-Options: noopen\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Mon, 20 Jan 2020 18:06:13 GMT\r\nETag: W/\"5758-16fc4223208\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22360,"size_decoded":8029,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (22360), with no line terminators","md5":"95261cb8a5276856090bd084408859eb","sha1":"72887c770e52d121563ab41ff9b3bd357d03e6bf","sha256":"7d6ce487f4a0eefea8a949f0657ffe4ab98fafafbdcf8d2bdf50ffc5157091ac","sha512":"fbe660275b59e432818ef53f7d7d4ea6b33b89ded7c95edbceade406f14803fbc1dff4ec9af0792931fd87b7bf3fed071e13bc0f8daacc50e163e120f6421229","ssdeep":"384:SpFtzyX7+BPyPN6C0PTrwSexmGCdoIqqmkEFPOyVm:SxzyXzV0PG5CRqqmkmPfg","tlshash":"b5a2d7cd72c5f0d257e320e1443f620ff3b6a969a84dd840a222d8f5adb596f4227f58","first_seen":"2026-06-02T20:05:24.495552Z","last_seen":"2026-09-26T01:58:59.112245Z","times_seen":3,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":1,"connect":87,"send":0,"wait":91,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"kutt.ar-email.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kutt.ar-email.com.br/_next/static/chunks/commons.742b947b9590c6d560e7.js","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kutt.ar-email.com.br/","date":"2026-09-26T01:51:05.443Z","timestamp":1790387465443,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ar-sms.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:08:35 GMT","end":"Tue, 22 Dec 2026 03:08:34 GMT"},"fingerprint":{"sha1":"48:68:3F:C3:1D:A2:B6:41:30:0F:0A:BF:61:14:EA:01:AA:F4:5D:AD","sha256":"93:16:D0:92:DB:14:51:8E:C1:2B:5E:33:56:FD:7B:1F:C5:95:8C:46:28:15:D1:EC:54:2C:88:E6:77:E0:0D:3A"}}},"request":{"raw":"GET /_next/static/chunks/commons.742b947b9590c6d560e7.js HTTP/1.1\r\nHost: kutt.ar-email.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kutt.ar-email.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 01:51:05 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-DNS-Prefetch-Control: off\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains\r\nX-Download-Options: noopen\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Mon, 20 Jan 2020 18:06:13 GMT\r\nETag: W/\"5360f-16fc4223208\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":341519,"size_decoded":112839,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"07e164e2e503c7f06be01431bc1af07b","sha1":"5b86fb2839fa73342cdae2629766c2ea31e37722","sha256":"93ba9440caa6d53353319a05ba4b31e3841e92e5a78d2ef4e150532729fb46c2","sha512":"ae771d8d3cafcd87eee1171a0a7b965173502670fc39dcdcbc4494d991d85dbf189c05cd3e8da77770adf4b15b9633e8f92d5a3f540366315b89c496aba14ffa","ssdeep":"3072:xZzqNj9tC5hfYp7xUBR5rnoFZwXC8h50l0ujY9LD0t51rnOn7MusRHEaTB6G1yKD:SbC/Yp7VwXJ+leIOnIuIEq1ys","tlshash":"b77429dd75c2f05517f361b6406f240bf37a192a680d8850f222e8e5bcb945e923bfad","first_seen":"2026-06-02T20:05:24.501322Z","last_seen":"2026-09-26T01:58:59.106887Z","times_seen":3,"resource_available":true,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":87,"send":0,"wait":180,"receive":349,"ssl":179},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"kutt.ar-email.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kutt.ar-email.com.br/images/logo.svg","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kutt.ar-email.com.br/","date":"2026-09-26T01:51:05.451Z","timestamp":1790387465451,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ar-sms.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:08:35 GMT","end":"Tue, 22 Dec 2026 03:08:34 GMT"},"fingerprint":{"sha1":"48:68:3F:C3:1D:A2:B6:41:30:0F:0A:BF:61:14:EA:01:AA:F4:5D:AD","sha256":"93:16:D0:92:DB:14:51:8E:C1:2B:5E:33:56:FD:7B:1F:C5:95:8C:46:28:15:D1:EC:54:2C:88:E6:77:E0:0D:3A"}}},"request":{"raw":"GET /images/logo.svg HTTP/1.1\r\nHost: kutt.ar-email.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kutt.ar-email.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 01:51:05 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-DNS-Prefetch-Control: off\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains\r\nX-Download-Options: noopen\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: public, max-age=0\r\nLast-Modified: Fri, 17 Jan 2020 16:03:16 GMT\r\nETag: W/\"8da-16fb43e8da0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2266,"size_decoded":2196,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5f85585ebf3f9b7b2f14147a46bed2d5","sha1":"789805479773f8a7f7ec4b022f6287a6effdf595","sha256":"a0cfc0d499453ef62f35056f81c8509dccb3f356f94068dc484d48023cd61783","sha512":"6c9d7a55b482bf2c970e8cf41c0729a6107a2629cd8d6d2c3114274288640b254c8eb31d741a8225923519c8ed4f507dd6a3c9c94beb633f9b4310d160f4f939","ssdeep":"","tlshash":"bb411968b11dd4364ab067379634dc3e84776633824f580de69033b260ad5230f5d34e","first_seen":"2023-05-11T01:32:14Z","last_seen":"2026-09-26T01:58:59.116173Z","times_seen":83,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":100,"dns":0,"connect":86,"send":0,"wait":88,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"kutt.ar-email.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kutt.ar-email.com.br/","date":"2026-09-26T01:51:05.613Z","timestamp":1790387465613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kutt.ar-email.com.br\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Sep 2026 23:46:25 GMT\r\nexpires: Fri, 24 Sep 2027 23:46:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nage: 93880\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-26T05:38:24.174441Z","times_seen":56717,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":31,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kutt.ar-email.com.br/","date":"2026-09-26T01:51:05.437Z","timestamp":1790387465437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /recaptcha/api.js?render=explicit HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kutt.ar-email.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 26 Sep 2026 01:51:05 GMT\r\ndate: Sat, 26 Sep 2026 01:51:05 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":978,"size_decoded":1288,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (978), with no line terminators","md5":"260bd0d851cb9a699b60c74ff5fda715","sha1":"aa4b5cb8785c742f07090de525a9c7649db6ef7a","sha256":"63dcd63c4310bf9b806967c93ecda3e1acf1461737bcf25a8e7aecf53907756a","sha512":"302c3ff015930bde1bfe5ceb43f0c0708ac62cec2ae88742aa7ac28234f6d5d02ccec43766bad74d6d8abeb30b3705106c6d22f6bf5bbf99053e92df732e3688","ssdeep":"","tlshash":"cf11e1b31918a0354b7209e5e1ffcb75e452701cf16885e8d915da842e6accbce06595","first_seen":"2026-09-22T06:42:02.834303Z","last_seen":"2026-09-26T05:04:46.849257Z","times_seen":196,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":2,"connect":27,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kutt.ar-email.com.br/_next/static/runtime/webpack-035ac2b14bde147cb4a8.js","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kutt.ar-email.com.br/","date":"2026-09-26T01:51:05.442Z","timestamp":1790387465442,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ar-sms.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:08:35 GMT","end":"Tue, 22 Dec 2026 03:08:34 GMT"},"fingerprint":{"sha1":"48:68:3F:C3:1D:A2:B6:41:30:0F:0A:BF:61:14:EA:01:AA:F4:5D:AD","sha256":"93:16:D0:92:DB:14:51:8E:C1:2B:5E:33:56:FD:7B:1F:C5:95:8C:46:28:15:D1:EC:54:2C:88:E6:77:E0:0D:3A"}}},"request":{"raw":"GET /_next/static/runtime/webpack-035ac2b14bde147cb4a8.js HTTP/1.1\r\nHost: kutt.ar-email.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kutt.ar-email.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 01:51:05 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-DNS-Prefetch-Control: off\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains\r\nX-Download-Options: noopen\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Mon, 20 Jan 2020 18:06:13 GMT\r\nETag: W/\"5fb-16fc4223208\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1531,"size_decoded":1317,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1531), with no line terminators","md5":"40b4095b5b68a142c856f388ccb756f2","sha1":"31905340609587e1a7c5d4a92d08a2fa3b404db1","sha256":"e2fbb88b4d15a9f7702ca58ebbe8d1d927ffd2667e585e70a5f3d51acb1a37d2","sha512":"3fab812739b50d25209fe4ec6a72d2441ece9d4a9347dfd0a47cec27ccb07676ed8b9958e4985831a896166492db33d9d88951c88f1fd0bb1858908209058259","ssdeep":"","tlshash":"1b3131d536a4f8ac53821d5d083f7006f2291d65127df5c19384e8b2bc2488e9066eaa","first_seen":"2023-03-07T12:10:23Z","last_seen":"2026-09-26T01:58:59.106169Z","times_seen":251,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":93,"send":0,"wait":97,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"kutt.ar-email.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kutt.ar-email.com.br/","date":"2026-09-26T01:51:05.608Z","timestamp":1790387465608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kutt.ar-email.com.br\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Sep 2026 23:46:25 GMT\r\nexpires: Fri, 24 Sep 2027 23:46:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nage: 93880\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-26T05:38:24.174441Z","times_seen":56717,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":2,"connect":43,"send":0,"wait":29,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kutt.ar-email.com.br/","date":"2026-09-26T01:51:05.610Z","timestamp":1790387465610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kutt.ar-email.com.br\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Sep 2026 23:46:25 GMT\r\nexpires: Fri, 24 Sep 2027 23:46:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nage: 93880\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-26T05:38:24.174441Z","times_seen":56717,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":42,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kutt.ar-email.com.br/images/favicon-196x196.png","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kutt.ar-email.com.br/","date":"2026-09-26T01:51:06.166Z","timestamp":1790387466166,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ar-sms.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:08:35 GMT","end":"Tue, 22 Dec 2026 03:08:34 GMT"},"fingerprint":{"sha1":"48:68:3F:C3:1D:A2:B6:41:30:0F:0A:BF:61:14:EA:01:AA:F4:5D:AD","sha256":"93:16:D0:92:DB:14:51:8E:C1:2B:5E:33:56:FD:7B:1F:C5:95:8C:46:28:15:D1:EC:54:2C:88:E6:77:E0:0D:3A"}}},"request":{"raw":"GET /images/favicon-196x196.png HTTP/1.1\r\nHost: kutt.ar-email.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kutt.ar-email.com.br/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 01:51:06 GMT\r\nContent-Type: image/png\r\nContent-Length: 18359\r\nConnection: keep-alive\r\nX-DNS-Prefetch-Control: off\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains\r\nX-Download-Options: noopen\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Fri, 17 Jan 2020 16:03:16 GMT\r\nETag: W/\"47b7-16fb43e8da0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18359,"size_decoded":18833,"mime_type":"image/png","magic":"PNG image data, 196 x 196, 8-bit/color RGBA, non-interlaced","md5":"4ff38310be3b7b58bc166a70f9b978f0","sha1":"c5257146d985abcaf879a2af6e4ba41b0aa90387","sha256":"b3e6df10505846c47c10761f3c11143394e538dd78d50bbb47d5f759a7ec0b15","sha512":"84dfc2fabeb3fcf5f4de06aa1c70c58714091678b7c374e85c828bc1f80edc8aeeabab08b3ef8e2e57e6a9607f3d2f3b3b6287b0295fdb6073d875eb154af6f0","ssdeep":"384:KPs6VjadYJLprJlq3uaRLVEasvmm0FiOb1cGR3X+TdYPHrD+:KPs6JauJFNA39Sa+mmeeW3AqTS","tlshash":"c082d02fa1c1cc951c374ee1af105ab79e355513cfaae5b10b388abf81bc0657c19b90","first_seen":"2023-05-11T01:32:14Z","last_seen":"2026-09-26T01:58:59.10929Z","times_seen":133,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"kutt.ar-email.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kutt.ar-email.com.br/images/mozillafirefox.svg","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kutt.ar-email.com.br/","date":"2026-09-26T01:51:06.384Z","timestamp":1790387466384,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ar-sms.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:08:35 GMT","end":"Tue, 22 Dec 2026 03:08:34 GMT"},"fingerprint":{"sha1":"48:68:3F:C3:1D:A2:B6:41:30:0F:0A:BF:61:14:EA:01:AA:F4:5D:AD","sha256":"93:16:D0:92:DB:14:51:8E:C1:2B:5E:33:56:FD:7B:1F:C5:95:8C:46:28:15:D1:EC:54:2C:88:E6:77:E0:0D:3A"}}},"request":{"raw":"GET /images/mozillafirefox.svg HTTP/1.1\r\nHost: kutt.ar-email.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kutt.ar-email.com.br/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 01:51:06 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-DNS-Prefetch-Control: off\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains\r\nX-Download-Options: noopen\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: public, max-age=0\r\nLast-Modified: Fri, 17 Jan 2020 16:03:16 GMT\r\nETag: W/\"a06-16fb43e8da0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2566,"size_decoded":1781,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2caabd639b2fdfd3a77f6121cdc0f8b5","sha1":"0f3984052272827b13f88b170288ddd19174d110","sha256":"69106150d70388057cc64eefdfe3a229ddb4d976a3874adba835fc52f95cdbcb","sha512":"1a3af0985968b191bf1c72df270693c2f9463964b336aed50356db7480ebfe65aacc2d6749fd4c15976bdbba2120f1d0226ea778cebefca3e5637020dbc668f1","ssdeep":"","tlshash":"b55152029240e75988c2c25ddfbf95e1124f54daf5faa5edaaf787ac600e6c4f904838","first_seen":"2024-04-24T14:45:31Z","last_seen":"2026-09-26T01:58:59.110198Z","times_seen":60,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"kutt.ar-email.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcJB9EUAAAAAEb8adov8JEa4xsYcGjerFmAHxZ-\u0026co=aHR0cHM6Ly9rdXR0LmFyLWVtYWlsLmNvbS5icjo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026badge=inline\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=5qbi6mdv0dkr","date":"2026-09-26T01:51:07.065Z","timestamp":1790387467065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Sep 2026 15:10:22 GMT\r\nexpires: Thu, 01 Oct 2026 15:10:22 GMT\r\ncache-control: public, max-age=604800\r\nage: 124845\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-09-26T05:29:27.492453Z","times_seen":731134,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcJB9EUAAAAAEb8adov8JEa4xsYcGjerFmAHxZ-\u0026co=aHR0cHM6Ly9rdXR0LmFyLWVtYWlsLmNvbS5icjo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026badge=inline\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=5qbi6mdv0dkr","date":"2026-09-26T01:51:07.076Z","timestamp":1790387467076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 381522\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-09-26T05:29:27.486333Z","times_seen":999475,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kutt.ar-email.com.br/_next/static/ofGVm1fDYD9eG18g9zWFf/pages/index.js","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kutt.ar-email.com.br/","date":"2026-09-26T01:51:05.438Z","timestamp":1790387465438,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ar-sms.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:08:35 GMT","end":"Tue, 22 Dec 2026 03:08:34 GMT"},"fingerprint":{"sha1":"48:68:3F:C3:1D:A2:B6:41:30:0F:0A:BF:61:14:EA:01:AA:F4:5D:AD","sha256":"93:16:D0:92:DB:14:51:8E:C1:2B:5E:33:56:FD:7B:1F:C5:95:8C:46:28:15:D1:EC:54:2C:88:E6:77:E0:0D:3A"}}},"request":{"raw":"GET /_next/static/ofGVm1fDYD9eG18g9zWFf/pages/index.js HTTP/1.1\r\nHost: kutt.ar-email.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kutt.ar-email.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 01:51:05 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-DNS-Prefetch-Control: off\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains\r\nX-Download-Options: noopen\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Mon, 20 Jan 2020 18:06:13 GMT\r\nETag: W/\"1cd9f-16fc4223208\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118175,"size_decoded":36949,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2ae0611c21626023ab8d2d6a6b2c8281","sha1":"669c84e04e7330ae37516055471eb72dba23a654","sha256":"edfa9b2ac0badb7b1978dabbf56dc504bdde1c9df833d72a2660cacb3be151be","sha512":"7d839742700b4088b8b59671c43f87ac5b0acb0f3ea57f84a986b2163f04db1538fe2eb8f635ec425ac070c025cc2d9c533e68845aa4d04da0fdf256e2858987","ssdeep":"1536:dtn7LFBznxevVIYm5jKMucqsjy6sM7GUhHudgZVhcKOc:dtntBz/50vUvZVhNF","tlshash":"75b36e95b79070b913d392e9a03f3909f1b61525f84ea064f671d0e0a879ede6133fac","first_seen":"2026-06-02T20:05:24.506679Z","last_seen":"2026-09-26T01:58:59.118821Z","times_seen":3,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"kutt.ar-email.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kutt.ar-email.com.br/_next/static/runtime/main-f50d8b6dc8435fd94593.js","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kutt.ar-email.com.br/","date":"2026-09-26T01:51:05.445Z","timestamp":1790387465445,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ar-sms.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:08:35 GMT","end":"Tue, 22 Dec 2026 03:08:34 GMT"},"fingerprint":{"sha1":"48:68:3F:C3:1D:A2:B6:41:30:0F:0A:BF:61:14:EA:01:AA:F4:5D:AD","sha256":"93:16:D0:92:DB:14:51:8E:C1:2B:5E:33:56:FD:7B:1F:C5:95:8C:46:28:15:D1:EC:54:2C:88:E6:77:E0:0D:3A"}}},"request":{"raw":"GET /_next/static/runtime/main-f50d8b6dc8435fd94593.js HTTP/1.1\r\nHost: kutt.ar-email.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kutt.ar-email.com.br/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 01:51:05 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-DNS-Prefetch-Control: off\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains\r\nX-Download-Options: noopen\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Mon, 20 Jan 2020 18:06:13 GMT\r\nETag: W/\"373d-16fc4223208\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14141,"size_decoded":5495,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14141), with no line terminators","md5":"c355beb0041be02f088dcb146afda26f","sha1":"e88acbe3746baf591377061afe5a93b05d22c15a","sha256":"938a1bd8ec6f65dad27c02ee3dccdd9bea8b4f13625277ee9eae880b621f1a9b","sha512":"8840e33a67319c89957311dc53e70c00f22d956b5886af2321bcccc1241df3f24be3790b2f056c370cd5d16b0850b95f072faa00ba7c6039bad6c6a976e3d4c8","ssdeep":"192:JP4qhzIvKGyrDDxjqNjqw5rxRU3PmVYD8uay7iTBABBcROewgeLwWxYATMwiJQHU:hjhzIvzkMU3PBHAOBkOxhzjyxUpM","tlshash":"8252d9adb5c6f42106d3202ca07f250662fa2929c4dd5401b7b6d8c6be79849a637fe4","first_seen":"2026-06-02T20:05:24.507515Z","last_seen":"2026-09-26T01:58:59.11286Z","times_seen":3,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":86,"send":0,"wait":88,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"kutt.ar-email.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kutt.ar-email.com.br/images/googlechrome.svg","fqdn":"kutt.ar-email.com.br","domain":"ar-email.com.br","tld":"com.br"},"ip":{"addr":"74.121.26.75","port":443,"asn":64233,"as":"TERAMUNDI","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kutt.ar-email.com.br/","date":"2026-09-26T01:51:06.381Z","timestamp":1790387466381,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ar-sms.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:08:35 GMT","end":"Tue, 22 Dec 2026 03:08:34 GMT"},"fingerprint":{"sha1":"48:68:3F:C3:1D:A2:B6:41:30:0F:0A:BF:61:14:EA:01:AA:F4:5D:AD","sha256":"93:16:D0:92:DB:14:51:8E:C1:2B:5E:33:56:FD:7B:1F:C5:95:8C:46:28:15:D1:EC:54:2C:88:E6:77:E0:0D:3A"}}},"request":{"raw":"GET /images/googlechrome.svg HTTP/1.1\r\nHost: kutt.ar-email.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kutt.ar-email.com.br/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 01:51:06 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-DNS-Prefetch-Control: off\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains\r\nX-Download-Options: noopen\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: public, max-age=0\r\nLast-Modified: Fri, 17 Jan 2020 16:03:16 GMT\r\nETag: W/\"352-16fb43e8da0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":850,"size_decoded":1025,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7e1d08bcab5662ca2253a5cff2fa2bc","sha1":"191e0b57f859f01419d24c566d61cf03b7b549d8","sha256":"86d6e9e1e06d51241cd26a1f8ed9869054b3ea2397b05fa124141663c30bf450","sha512":"cdf6ffe756ab8eaf598e21ec0a3a4f12297fde6af9daa91f1e5a2672d04f566914a15163ba43b1d5bf1ce1fe8b07a030b192cd5399a44a81cd8f0c00c6218bf0","ssdeep":"","tlshash":"33010ced0b79a9ccd1ea8b98ff29285c974d35b8b6b40096984ecea1005f451e507d44","first_seen":"2024-04-24T14:45:31Z","last_seen":"2026-09-26T01:58:59.104711Z","times_seen":59,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"kutt.ar-email.com.br","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}