{"report_id":"a2f4a905-a4aa-4423-a9a1-4d1a6c94c293","version":6,"status":"done","tags":[],"date":"2026-04-20T10:11:34Z","url":{"schema":"https","addr":"cutt.ly/itAx35LH","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"104.20.37.138","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cutt.ly/guard/itAx35LH","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"title":"Cuttly Safe Redirecting system blocked that redirect","dom":{"size":1160136,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (64645)","md5":"50d30f2c5a86e2fe416a72fe1800a175","sha1":"0bcc6c61076e34201cbce66cf9d11723bdbc9be0","sha256":"cdf9c4088f112d13ea0926a5fcf90f7596fc30cbaa877e00125f5bb0c5dee5d0","sha512":"fa85897bd23803f29e94b1450b4f37cea49f78f67c98847139bdf909164b6c4cd633edacd58f30a589a4e9329e32666b254857978ebffefaeb0e3ceccb3b5654","ssdeep":"12288:ElQegJfI1Sjn9WINX/yeDQpXyuXMWAJ2wjAraLxn3UzDLVqg+eBekxQ08Utx2i:roSj9X6eDxNJ2wjVcDLxDX8sx2i","tlshash":"5c35c0b2f29030795567c229a1d77a4e3d3e9447d6020eecf9577af44a89aca1133f2c","dom_hash":"domhash7f730710a345e7e1f8c4c321c73bd0b2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cutt.ly/itAx35LH","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"104.20.37.138","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-25T10:11:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-20T10:11:10Z","timestamp":1776679870,"ip_dst":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":40626,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)","source":"{\"timestamp\":\"2026-04-20T10:11:10.479189+0000\",\"flow_id\":93677460269918,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":40626,\"dest_ip\":\"172.66.145.80\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038569,\"rev\":1,\"signature\":\"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_08_19\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_12_02\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_08_19\"]}},\"tls\":{\"sni\":\"cutt.ly\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":909,\"bytes_toclient\":5340,\"start\":\"2026-04-20T10:11:10.469854+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cutt.ly","ip":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-13","domain_rank":3479,"first_seen":"2018-01-23T23:29:00Z","last_seen":"2026-04-19T23:45:19.121267Z","alert_count":0,"request_count":4,"received_data":2328012,"sent_data":1991,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cutt.ly/guard/itAx35LH","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b9325ff9aa8fccb734a289e1038ea21","sha1":"513a4612047a087e11a3a2819efcfc393c78e836","sha256":"d95a182f7db4614eca6be522e0514ba037d1e65775892f917c9caff51fd40b44","sha512":"1291a4ae70749b4004ec4f34e88ad921a2d068f9fbf8d895fe697232ad568d9f76b864e6d36c63c8249485c94d79874d63998b5a15c556f8bbf1e73e7919aa4d","ssdeep":"1536:HqHRLi9qxGGs+4Ezy4bx60BWiVkW4A/HbiQKnfp8cCfaEaJmbfB11kqqurVP24BS:gIEbiQKnfpQ9bvuzuVnxuEwJz","tlshash":"529319ddb2cab06347a770ba00bf550bf2361859684d8410f115e8e9bc78b4a927bf7d","size":89845,"data":"","first_seen":"2023-08-19T00:22:52Z","last_seen":"2026-04-20T10:11:35.856664Z","times_seen":513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cutt.ly/guard/itAx35LH","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0391b526fcc8d45aa2abeb559b0e860","sha1":"13c9ceef65dc2f2bab3c623a177d3f70b7d7204b","sha256":"9ced521e714d208e9521b34ff75d2ce52070b2b884da3ec1c63a4071a5f66bd6","sha512":"326dd7ce86a1657032859986f1812d552e5ef271421c0e9777e5c62264ba0c308a9889f39528e1b5fa16587501a6ae5e8747f36c86f164ade8391e8bf432fb78","ssdeep":"384:sVPT+ujPaGdzZpNh1pRQaa7glNUdgULdG//xHXwU/eCJV:QPT+ePaGdz/RQZ7IUdgQdG//RXwkJV","tlshash":"495296c9b5e1a0218bb75128453f4b0ab33a593d680f00e8e664d8e57c75a0ea91fff4","size":13274,"data":"","first_seen":"2023-04-07T19:32:23Z","last_seen":"2026-04-20T10:11:35.859088Z","times_seen":522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cutt.ly/guard/itAx35LH","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8177b0751f520a6176ef0d489d2b2e1a","sha1":"9fda0a885587a6ac7590061e3bc653ab74e2c0ba","sha256":"0754313d891e5ee69a5f4d1e634a42f91a0e93f79d30d4f25ebcd5c344e21317","sha512":"2cd369757d69f3972f3ed1bbedeb7004d55dddfffc997f4aea22ff3b8f33a206655bc78494ef15f8388fca74decede2afbf13352574ebd5d53294e2ca7eb36de","ssdeep":"","tlshash":"1611768c30126afb02f38898212f060e72b3c5abea4954c4dafdd59c193949900a1bb8","size":931,"data":"","first_seen":"2023-03-07T16:28:21Z","last_seen":"2026-04-20T10:11:35.860145Z","times_seen":521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cutt.ly/guard/itAx35LH","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a39ef35ac45f5b7f8812120ef7fbbeb5","sha1":"612a572ba128453890fbb94f016f05d546d6cf74","sha256":"c6f67884babc2f24ab90c7cb4405662f12f864f2834b143f6e153dd8758d7f25","sha512":"c16bc1e2e029ab2b6b7efc1b0ca04e0664797e6774e249e4b234862e1d964f4bd6fb64fe317203e00ac31aed593fcb67619b9f143701da733203b92938772a3a","ssdeep":"768:dratu+hZTVYlNwqu7MThihlRxKCtUeI/+cHCAwC+0VQnn5QN+r7v2GfbbHlXlgY0:dmtpVKCtjhcHVDRtndkeaXo5t","tlshash":"5083a44972a4f472029f6866817b0a0bb6362c4da506b01cbad8d8dd1b7cd8c313bf7d","size":83088,"data":"","first_seen":"2023-08-19T00:22:52Z","last_seen":"2026-04-20T10:11:35.863123Z","times_seen":513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cutt.ly/guard/itAx35LH","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"73d55d65f0c0dda6448d13bb4839a90b","sha1":"34fc65c93b99b23bcc05e7152ed606c84700bba0","sha256":"ad781ec4a84284f1cd5236002905308190cea66cb894b4337d79555617f49909","sha512":"a51c6a9dbc63bf61f4a12a530d521059c5c188f87ea14d496cec9e491e39adb057be73795fbf0260b80906ae310a33dcec13a5fd953748e119445169ecaadf68","ssdeep":"","tlshash":"2e31ea4dba6d7d2606ab20baf6e77b45012d85b2475064c9b2b2102d0bf9d5822b660f","size":1490,"data":"","first_seen":"2023-08-19T00:22:52Z","last_seen":"2026-04-20T10:11:35.864004Z","times_seen":513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cutt.ly/itAx35LH","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-20T10:11:10.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cutt.ly","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Fri, 09 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:38:36:16:E4:6E:4B:B7:77:70:A5:4D:6E:F6:C6:84:1B:33:D7:B4","sha256":"37:86:8C:D8:94:2F:3D:DA:0D:04:FA:60:B2:BD:D6:EE:97:17:BC:B9:5D:8D:6B:43:39:21:24:DC:3C:79:34:2A"}}},"request":{"raw":"GET /itAx35LH HTTP/1.1\r\nHost: cutt.ly\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 20 Apr 2026 10:11:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://cutt.ly/guard/itAx35LH\r\nset-cookie: PHPSESSID=cteovcscmo9ki142jb29s3692r; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreferrer-policy: same-origin\r\nserver: cloudflare\r\ncf-ray: 9ef35d06892656c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1159916,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T12:59:41.832676Z","times_seen":13976190,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":48,"dns":34,"connect":1,"send":0,"wait":131,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cutt.ly/guard/itAx35LH","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-20T10:11:10.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cutt.ly","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Fri, 09 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:38:36:16:E4:6E:4B:B7:77:70:A5:4D:6E:F6:C6:84:1B:33:D7:B4","sha256":"37:86:8C:D8:94:2F:3D:DA:0D:04:FA:60:B2:BD:D6:EE:97:17:BC:B9:5D:8D:6B:43:39:21:24:DC:3C:79:34:2A"}}},"request":{"raw":"GET /guard/itAx35LH HTTP/1.1\r\nHost: cutt.ly\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cteovcscmo9ki142jb29s3692r\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 20 Apr 2026 10:11:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ef35d076a3056c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1159916,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (64618), with CRLF, LF line terminators","md5":"aeb9e60bf32b3428041b569063961a09","sha1":"fe17a089518733936e5a977a5ca901e0882e2079","sha256":"87defad22d6fa3cd404ec7c159f5b7645f17b49377c570a1957e46cf630ad775","sha512":"9ac1fe272d4bbdeec3369ba2d8d9fff418cb454d6af6af138d58d8e64f42e30e3514585b1eb2817ffeee14e9d707046f9bed472a0fd47148c6d232294a9866d3","ssdeep":"12288:mlQegJfI1Sjn9WINX/yeDQpXyuXMWAJ2wjAraLxn3UzDLVqg+eBekxQ08UtL:9oSj9X6eDxNJ2wjVcDLxDX8sL","tlshash":"ee25d0b3f290306da577c229a1c67aad2d3ed043d6120ee9f9577b74868a6c70573e0c","first_seen":"2025-08-01T04:32:00.285981Z","last_seen":"2026-04-20T10:11:35.850925Z","times_seen":32,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cutt.ly/img/icon152x152.png","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cutt.ly/guard/itAx35LH","date":"2026-04-20T10:11:11.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cutt.ly","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Fri, 09 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:38:36:16:E4:6E:4B:B7:77:70:A5:4D:6E:F6:C6:84:1B:33:D7:B4","sha256":"37:86:8C:D8:94:2F:3D:DA:0D:04:FA:60:B2:BD:D6:EE:97:17:BC:B9:5D:8D:6B:43:39:21:24:DC:3C:79:34:2A"}}},"request":{"raw":"GET /img/icon152x152.png HTTP/1.1\r\nHost: cutt.ly\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cutt.ly/guard/itAx35LH\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cteovcscmo9ki142jb29s3692r\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Apr 2026 10:11:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 16 May 2018 07:22:04 GMT\r\netag: \"fd2-5afbdc1c-4d49b6658f119eca;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4050\r\ndate: Mon, 20 Apr 2026 10:11:11 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\nreferrer-policy: same-origin\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncf-ray: 9ef35d0a7f512efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4050,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit/color RGBA, interlaced","md5":"d2bba02746681e241e0fb4985d030157","sha1":"dd402eeb8f903d3a34fa3b96534de246fdd10945","sha256":"362f57f1cd338c0d41b579ea9188ce59820571e89ee752b8720312da27f21ade","sha512":"f9b861b40a50ee2257509ad743af6c1f531d802a1dc8f7047cb6617381199a4daaa9f8e6fcd7239ad8ea6b9cdcfc5fca94b9ef45e6ede992966bd07cdf3acca2","ssdeep":"","tlshash":"2f81af24744240b226625ae0dc89b055d4fc6b5fee435f973d130d3134ea3c0e9e4b94","first_seen":"2023-05-07T17:16:18Z","last_seen":"2026-04-20T10:11:35.852853Z","times_seen":734,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cutt.ly/img/icon.png","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cutt.ly/guard/itAx35LH","date":"2026-04-20T10:11:11.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cutt.ly","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Fri, 09 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:38:36:16:E4:6E:4B:B7:77:70:A5:4D:6E:F6:C6:84:1B:33:D7:B4","sha256":"37:86:8C:D8:94:2F:3D:DA:0D:04:FA:60:B2:BD:D6:EE:97:17:BC:B9:5D:8D:6B:43:39:21:24:DC:3C:79:34:2A"}}},"request":{"raw":"GET /img/icon.png HTTP/1.1\r\nHost: cutt.ly\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cutt.ly/guard/itAx35LH\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=cteovcscmo9ki142jb29s3692r\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Apr 2026 10:11:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 16 May 2018 07:22:05 GMT\r\netag: \"669-5afbdc1d-db352ca8135f1f44;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1641\r\ndate: Mon, 20 Apr 2026 10:11:11 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nreferrer-policy: same-origin\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncf-ray: 9ef35d0a7f522efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1641,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, interlaced","md5":"756fa9e8d4387ffeb48837fb49667395","sha1":"8cd70bb1fa94cb74b5e5be78837d38213a781a70","sha256":"cf1059be78b12a26ec7a3d8d05fda33f9bec29e6a155b22e54dfce2eb0cb10be","sha512":"4111280d5160a08dd4df530a89d360e82a766dc3ab1beb8efc5841e8dfdad4973a7ff844331ea95f0a92b523a845b37f9bee6a9773e5a9774368a2a09d27ce2d","ssdeep":"","tlshash":"df31fada81c80fb3d1e8e0c301299361e5ab3c6e51e4d180702cee56a12057220a17cb","first_seen":"2023-04-07T19:32:49Z","last_seen":"2026-04-20T10:11:35.854935Z","times_seen":734,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}