| sacola.influenciadormagalu.com.br/static/output.css |  179.191.188.65 | 200 OK | 4.6 kB |
URL GET HTTP/2sacola.influenciadormagalu.com.br/static/output.css IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.influenciadormagalu.com.br FingerprintE3:10:B3:F0:E3:72:8A:20:2A:25:54:89:83:FE:4D:C3:2A:34:A1:97 ValidityTue, 19 Mar 2024 00:00:00 GMT - Wed, 19 Mar 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash5f1aeff84338be3abfb3bc88082406b5 94b0a8d0bf9d1633509f64c2a6b3ec14efada5f6 c24736eb6250e2ed55861bd9d7361da73fd7b9fdf36e07f2845bb85233772b06
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Magalu | | Quad9 DNS | malicious | Sinkholed |
GET /static/output.css HTTP/1.1
Host: sacola.influenciadormagalu.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:52 GMT
content-type: text/css
vary: Accept-Encoding
x-guploader-uploadid: ABPtcPpeoESOusx8YblfpP4_0s-e71NyEclUcQLV7QovPrnex5NJkeYZhwlCR07iFe8GI1HLEpEOhEMUWg
cache-control: max-age=604800
expires: Thu, 25 Apr 2024 05:37:52 GMT
last-modified: Thu, 04 Apr 2024 12:23:14 GMT
etag: W/"f1923dab150e3f1d183a53bfc6495091"
x-goog-generation: 1712233394741955
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 11372
x-amz-checksum-crc32c: O4IYcw==
x-goog-storage-class: STANDARD
server: UploadServer
x-frame-options: DENY
x-goog-hash: crc32c=O4IYcw==, md5=8ZI9qxUOPx0YOlO/xklQkQ==
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| sacola.influenciadormagalu.com.br/ | 179.191.188.65 | 200 OK | 3.3 kB |
URL User Request GET HTTP/2sacola.influenciadormagalu.com.br/ IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
CertificateIssuerSectigo Limited Subject*.influenciadormagalu.com.br FingerprintE3:10:B3:F0:E3:72:8A:20:2A:25:54:89:83:FE:4D:C3:2A:34:A1:97 ValidityTue, 19 Mar 2024 00:00:00 GMT - Wed, 19 Mar 2025 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2901) Hash3b31060e7b3754574092d65c264acfe2 49a2a31dea0c7cbf4465d01c04d2a66a9a7a28bc 105ae996bb820a59921fe7c63a2b6de833ebf4d22f726dab21cdb6f984589545
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Magalu | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: sacola.influenciadormagalu.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:52 GMT
content-type: text/html
x-guploader-uploadid: ABPtcPpvbonMIw0-RrEeACeWayLALlw0UoCtZjQ_ki55A7Fq-OlQhonMIqRTw-nmM2a46aFI9wRwem3iHg
cache-control: max-age=60
expires: Thu, 18 Apr 2024 05:38:52 GMT
last-modified: Thu, 11 Apr 2024 14:24:46 GMT
etag: W/"3b31060e7b3754574092d65c264acfe2"
x-goog-generation: 1712845485996505
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 8243
x-amz-checksum-crc32c: hObzlg==
x-goog-storage-class: STANDARD
server: UploadServer
x-frame-options: DENY
x-goog-hash: crc32c=hObzlg==, md5=OzEGDns3VFdAktZcJkrP4g==
vary: Accept-Encoding, User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| sacola.influenciadormagalu.com.br/cart/ | 179.191.188.65 | 404 Not Found | 0 B |
URL GET HTTP/2sacola.influenciadormagalu.com.br/cart/ IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.influenciadormagalu.com.br FingerprintE3:10:B3:F0:E3:72:8A:20:2A:25:54:89:83:FE:4D:C3:2A:34:A1:97 ValidityTue, 19 Mar 2024 00:00:00 GMT - Wed, 19 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Magalu | | Quad9 DNS | malicious | Sinkholed |
GET /cart/ HTTP/1.1
Host: sacola.influenciadormagalu.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
traceparent: 00-e5046a6df98ea99290f5832e41a5cf76-b6013e20f3b12b35-01
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Cookie: jeannie=b2d6b9b8-704c-44e1-a24a-ca38f44aaaca
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Thu, 18 Apr 2024 05:37:53 GMT
content-type: application/octet-stream
x-xss-protection: 1;mode=block
x-frame-options: DENY
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-version: 6.115.0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server: Python/3.9 aiohttp/3.7.4.post0
via: 1.1 google
content-length: 0
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-W3XCM3G |  142.250.74.168 | 200 OK | 118 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-W3XCM3G IP142.250.74.168:443
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (46388) Size118 kB (118541 bytes) Hash2cda28a875b74debb62300510608a17b 6f82c69500664a2a32dba85729199704c9d2fa20 95c5fe9cb51058d5329781f1b787d5578f1212408616a3de35577c32bf872bc1
GET /gtm.js?id=GTM-W3XCM3G HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 05:37:53 GMT
expires: Thu, 18 Apr 2024 05:37:53 GMT
cache-control: private, max-age=900
last-modified: Thu, 18 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 118541
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/destination?id=AW-1008861830&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 87 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=AW-1008861830&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hash711a11bf4a5890384bb948d03890ca76 85016ebeb92254be272ab580bbc92342060ace9e 38ca36ac7cef93d537e7caec1d8d5f1aaf359438ee635affa688ba7842d8b879
GET /gtag/destination?id=AW-1008861830&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 05:37:53 GMT
expires: Thu, 18 Apr 2024 05:37:53 GMT
cache-control: private, max-age=900
last-modified: Thu, 18 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 86836
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtm.js?id=GTM-KMD2FQT&l=dataLayer | 142.250.74.168 | 200 OK | 79 kB |
URL GET HTTP/3www.googletagmanager.com/gtm.js?id=GTM-KMD2FQT&l=dataLayer IP142.250.74.168:443
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (15230) Hash8411888a0660b61c1fe04f1f479cb049 4606bcce4b6708a1803174ba4f2b0bc19a93df40 d2e9d0737c10352d52085cc09f8f1509fed07182cca3c48df77d07bf0d556a71
GET /gtm.js?id=GTM-KMD2FQT&l=dataLayer HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 05:37:53 GMT
expires: Thu, 18 Apr 2024 05:37:53 GMT
cache-control: private, max-age=900
last-modified: Thu, 18 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79162
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/destination?id=DC-6590300&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 72 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=DC-6590300&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hash70316f8028fa10e135374e730f690328 8d110b945397dd5a29e9bece8aecc5da0748561b c459b884867c800361b9c2e58ff366ad592ae25b350ac343a1fad0cb6fb0fdd5
GET /gtag/destination?id=DC-6590300&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 05:37:53 GMT
expires: Thu, 18 Apr 2024 05:37:53 GMT
cache-control: private, max-age=900
last-modified: Thu, 18 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72255
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| static.chaordicsystems.com/static/loader.js | 54.230.111.23 | 200 OK | 2.2 kB |
URL GET HTTP/1.1static.chaordicsystems.com/static/loader.js IP54.230.111.23:443
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerAmazon Subject*.chaordicsystems.com FingerprintFD:02:D7:FE:36:5E:54:4E:76:87:A9:91:FC:B0:04:A7:10:C2:3C:98 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 26 Feb 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (4986), with no line terminators Hashb3d1fef43ab78ac9bce515e0d5865210 fce38d953c56838eba4b056baa94bdbafd52caf5 e221adc74657ec607fb5dda377a8ca922ba4f71bdd86dec5b6d33bb9a96a5947
GET /static/loader.js HTTP/1.1
Host: static.chaordicsystems.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 28 Sep 2023 13:39:29 GMT
x-amz-version-id: 5PqYozVcKrrogyEH2JfOC8OSQxh0.8Pj
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 18 Apr 2024 05:32:39 GMT
ETag: W/"b3d1fef43ab78ac9bce515e0d5865210"
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nnqFRaTBof07oE_amPQn2sAeJzklwShqnihJw6T4sYmAU8KK2kAIdg==
Age: 378
Vary: Accept-Encoding, Origin
|
|
| static.chaordicsystems.com/search/generated/magazineluiza/loader.js?t=1713418673963 | 54.230.111.23 | 200 OK | 23 B |
URL GET HTTP/1.1static.chaordicsystems.com/search/generated/magazineluiza/loader.js?t=1713418673963 IP54.230.111.23:443
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerAmazon Subject*.chaordicsystems.com FingerprintFD:02:D7:FE:36:5E:54:4E:76:87:A9:91:FC:B0:04:A7:10:C2:3C:98 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 26 Feb 2025 23:59:59 GMT
Hashb519d08ef66fd54910edbedba6181ec2 8d06436c33a3086259f2f1ccaf03425707eeff17 101ead936a2281d53dcc064b7e2a2ab0d53b92ef3ef7b34b668673007895c860
GET /search/generated/magazineluiza/loader.js?t=1713418673963 HTTP/1.1
Host: static.chaordicsystems.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sacola.influenciadormagalu.com.br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Length: 23
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Last-Modified: Mon, 12 Jun 2017 22:04:58 GMT
Server: nginx
Cache-Control: max-age=1800
Date: Thu, 18 Apr 2024 05:32:37 GMT
Expires: Thu, 18 Apr 2024 06:02:37 GMT
ETag: "593f100a-3"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: pLtFUJ-Gr5ELDbQDJjlFTrPyYk7z9IXk-npVpD9zlvWapFPOafbZbw==
Age: 318
|
|
| www.googletagmanager.com/gtm.js?id=GTM-M6CKQBW&l=dataLayer | 142.250.74.168 | 200 OK | 70 kB |
URL GET HTTP/3www.googletagmanager.com/gtm.js?id=GTM-M6CKQBW&l=dataLayer IP142.250.74.168:443
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (7632) Hashf5e2fca7aa80762d070a2813390074a6 cbba5f5e9bc927e2449430625470ce0be34a80a6 3885b8204958ac082d76cf2a66b86a272496484e2de98e55c78e0b5559606a81
GET /gtm.js?id=GTM-M6CKQBW&l=dataLayer HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 05:37:53 GMT
expires: Thu, 18 Apr 2024 05:37:53 GMT
cache-control: private, max-age=900
last-modified: Thu, 18 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 69897
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| static.chaordicsystems.com/static/magazineluiza/current.js?t=1713418673966 | 54.230.111.23 | 404 Not Found | 366 B |
URL GET HTTP/1.1static.chaordicsystems.com/static/magazineluiza/current.js?t=1713418673966 IP54.230.111.23:443
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerAmazon Subject*.chaordicsystems.com FingerprintFD:02:D7:FE:36:5E:54:4E:76:87:A9:91:FC:B0:04:A7:10:C2:3C:98 ValidityMon, 29 Jan 2024 00:00:00 GMT - Wed, 26 Feb 2025 23:59:59 GMT
File typeHTML document, ASCII text Hashd953d39a5e3be98ccea898ff614d5733 c6851dca80355eabc1f8bf724e689713107bc3e3 628a2ac2ad40c9b418e59fab2fb12fe0c5fc191044739d86182cc1ff03a63cb6
GET /static/magazineluiza/current.js?t=1713418673966 HTTP/1.1
Host: static.chaordicsystems.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sacola.influenciadormagalu.com.br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Content-Length: 366
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3000
Date: Thu, 18 Apr 2024 05:37:53 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: EyJHrcwq7I4ra-xOT2TZvoj2EcnU8a-uyWWD_GvPMgKZL0_OO42OVA==
|
|
| www.googletagmanager.com/gtag/js?id=G-88XVNRG61P&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 99 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-88XVNRG61P&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (7711) Hash95ce2ccd06c7216e15626329e5d6a092 615605abae03224523785267ed4263c31cbc221c c018877c9ed06532d0f09d47dce63b3fcb8e93e041adf08d9cec9a20cfc15328
GET /gtag/js?id=G-88XVNRG61P&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 05:37:54 GMT
expires: Thu, 18 Apr 2024 05:37:54 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 98936
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| mvc.mlcdn.com.br/magazinevoce/img/common/divulgador-magalu-logo-blue.svg | 179.191.188.65 | 200 OK | 22 kB |
URL GET HTTP/2mvc.mlcdn.com.br/magazinevoce/img/common/divulgador-magalu-logo-blue.svg IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.mlcdn.com.br Fingerprint96:85:15:1F:69:33:93:CA:9A:A6:C6:D3:B4:D4:FD:F1:6F:DC:5F:D5 ValidityTue, 14 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashc961dab28254145853bf6bc674551b68 2e5de58f02ac20013db678a84e32e8a48daa15fc 526ee44fa32589162270177b32c682f6dbd4c6760752688a590221d16c354bc4
GET /magazinevoce/img/common/divulgador-magalu-logo-blue.svg HTTP/1.1
Host: mvc.mlcdn.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:54 GMT
content-type: image/svg+xml
content-length: 21773
x-amz-id-2: Al+dx+lvSRp4H6xZRsVRCSk/yuR9rQaIi/Fmoph2dmATrg7F32Bag06KQarmHbuJkMnghEFIge8=
x-amz-request-id: 3C3H4Q1HJTNEZ7PT
last-modified: Fri, 22 Mar 2024 14:38:52 GMT
etag: "c961dab28254145853bf6bc674551b68"
x-amz-server-side-encryption: AES256
cache-control: max-age=3600
expires: Thu, 18 Apr 2024 06:37:54 GMT
server: AmazonS3
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mvc.mlcdn.com.br/magazinevoce/img/common/payment-footer-s8d44b9e8f8.png | 179.191.188.65 | 200 OK | 14 kB |
URL GET HTTP/2mvc.mlcdn.com.br/magazinevoce/img/common/payment-footer-s8d44b9e8f8.png IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.mlcdn.com.br Fingerprint96:85:15:1F:69:33:93:CA:9A:A6:C6:D3:B4:D4:FD:F1:6F:DC:5F:D5 ValidityTue, 14 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT
File typePNG image data, 50 x 214, 8-bit/color RGBA, non-interlaced Hash8ac64461f4dec69c397edc89ead4a3ab d79a5236e96f1591c6fc6ee1a5a68491212d0e88 dd32c6f24c2c717703e1e5c036e2c1f3b20ece26e8a87a6c31c00e0b50c57fe0
GET /magazinevoce/img/common/payment-footer-s8d44b9e8f8.png HTTP/1.1
Host: mvc.mlcdn.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:54 GMT
content-type: image/png
content-length: 13648
x-amz-id-2: yiJqZhvZNQbhySsPu+5Ru/fhZQiHMthIl1h3dV8+HtZQrWN6VZykQV6n/TTrYvy7CVYvii2D40DUAsfPS/dVxw==
x-amz-request-id: J9RR3PEH7E7FZ01X
last-modified: Thu, 24 Aug 2023 14:55:30 GMT
etag: "8ac64461f4dec69c397edc89ead4a3ab"
x-amz-server-side-encryption: AES256
cache-control: max-age=3600
expires: Thu, 18 Apr 2024 06:37:54 GMT
server: AmazonS3
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mvc.mlcdn.com.br/magazinevoce/img/common/logo-ebit.png?1506952006 | 179.191.188.65 | 200 OK | 2.1 kB |
URL GET HTTP/2mvc.mlcdn.com.br/magazinevoce/img/common/logo-ebit.png?1506952006 IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.mlcdn.com.br Fingerprint96:85:15:1F:69:33:93:CA:9A:A6:C6:D3:B4:D4:FD:F1:6F:DC:5F:D5 ValidityTue, 14 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT
File typePNG image data, 80 x 30, 8-bit/color RGBA, non-interlaced Hash9f32701dc7d5de4df85e403506b66c77 ac5f21553b3ee80bcfc85d154001bd48cafb9626 1a7c2a11427869e48853709d0cfd822d6b76f3b8f07a593f3cd44fa55e228a02
GET /magazinevoce/img/common/logo-ebit.png?1506952006 HTTP/1.1
Host: mvc.mlcdn.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:54 GMT
content-type: image/png
content-length: 2073
x-amz-id-2: XfamBMFNZDaLP7L1WG4h2pxZvn/yUVAhz/Jx2dGq8eYwRPOC7ZSWUK4yB5bdRsvw62/PjYxCSgY=
x-amz-request-id: J41QQ7E2XEAMTPPV
last-modified: Mon, 14 Aug 2023 17:31:13 GMT
etag: "9f32701dc7d5de4df85e403506b66c77"
x-amz-server-side-encryption: AES256
cache-control: max-age=3600
expires: Thu, 18 Apr 2024 06:37:54 GMT
server: AmazonS3
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.influenciadormagalu.com.br/fragments/checkout_footer.html | 179.191.188.65 | 200 OK | 1.4 kB |
URL GET HTTP/2www.influenciadormagalu.com.br/fragments/checkout_footer.html IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.influenciadormagalu.com.br FingerprintE3:10:B3:F0:E3:72:8A:20:2A:25:54:89:83:FE:4D:C3:2A:34:A1:97 ValidityTue, 19 Mar 2024 00:00:00 GMT - Wed, 19 Mar 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash67956732c66c8ff70d741a734ff8c5ee 0809e25c9450fd856bace22ba35cba2f400c4e4c 9e09cd7cdee516217a51c30451bf18cc7d2350f2db76ba3b19bbb264f68288bc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fragments/checkout_footer.html HTTP/1.1
Host: www.influenciadormagalu.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sacola.influenciadormagalu.com.br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Cookie: jeannie=b2d6b9b8-704c-44e1-a24a-ca38f44aaaca
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:54 GMT
content-type: text/html; charset=utf-8
server: nginx/1.25.2
vary: Accept-Encoding, Cookie
x-frame-options: SAMEORIGIN
access-control-allow-origin: https://sacola.influenciadormagalu.com.br
access-control-allow-credentials: true
via: 1.1 google
set-cookie: mixer_shipping=AUTO; Domain=influenciadormagalu.com.br; Path=/
mixer_hub_shipping=true; Domain=influenciadormagalu.com.br; Path=/
toggle_wishlist=false; Domain=influenciadormagalu.com.br; Path=/
toggle_sharedbag=true; Domain=influenciadormagalu.com.br; Path=/
toggle_sidebarheading_pmd=true; Domain=influenciadormagalu.com.br; Path=/
toggle_shareurl_pmd_v2=shorten_app; Domain=influenciadormagalu.com.br; Path=/
toggle_shorten_widget=true; Domain=influenciadormagalu.com.br; Path=/
toggle_pmd_nbc=true; Domain=influenciadormagalu.com.br; Path=/
pmd_promoter=; Domain=.influenciadormagalu.com.br; expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Path=/
FCCDCF=; Domain=.influenciadormagalu.com.br; expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Path=/
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| mvc.mlcdn.com.br/magazinevoce/img/s/security.png | 179.191.188.65 | 200 OK | 597 B |
URL GET HTTP/2mvc.mlcdn.com.br/magazinevoce/img/s/security.png IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.mlcdn.com.br Fingerprint96:85:15:1F:69:33:93:CA:9A:A6:C6:D3:B4:D4:FD:F1:6F:DC:5F:D5 ValidityTue, 14 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT
File typePNG image data, 50 x 20, 8-bit colormap, non-interlaced Hashb623aa914104f9af4359ffd8ebd207c5 fa5c9d538c29b0c371c940095967850ae108d210 56845dd1cfc4ce0952311301f06b1ce1494782c6be7858c0cd68c02aeb24f83e
GET /magazinevoce/img/s/security.png HTTP/1.1
Host: mvc.mlcdn.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:54 GMT
content-type: image/png
content-length: 597
x-amz-id-2: tGtKAU7qQYfTYG01uy2ZBMT1Qpareftab9CRV67+S0VkOg9m/u4j04sIZSsQSADI0zwksjGG37s=
x-amz-request-id: HMXP4DM4VWDEX1BD
last-modified: Mon, 14 Aug 2023 17:36:06 GMT
etag: "b623aa914104f9af4359ffd8ebd207c5"
x-amz-server-side-encryption: AES256
cache-control: max-age=3600
expires: Thu, 18 Apr 2024 06:37:54 GMT
server: AmazonS3
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| wx.mlcdn.com.br/site/shared/favicon/favicon-96x96.png | 179.191.188.65 | 200 OK | 2.1 kB |
URL GET HTTP/2wx.mlcdn.com.br/site/shared/favicon/favicon-96x96.png IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.mlcdn.com.br Fingerprint96:85:15:1F:69:33:93:CA:9A:A6:C6:D3:B4:D4:FD:F1:6F:DC:5F:D5 ValidityTue, 14 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hash71d9796322bc26f954385268fc967a3c daa574dc335a0844b9ac6da81aaddbc81bb77ce9 1f7bd396c7a8f2e2dd2df133ffe35de2593f7392bba64b56691444cf5193181a
GET /site/shared/favicon/favicon-96x96.png HTTP/1.1
Host: wx.mlcdn.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:54 GMT
content-type: image/webp
content-length: 2100
expires: Fri, 18 Apr 2025 05:37:54 GMT
vary: Accept
server: Azion IMS
etag: "daa574dc335a0844b9ac6da81aaddbc81bb77ce9"
x-original-image-size: 13697
x-ims: Enabled
cache-control: max-age=31536000
X-Firefox-Spdy: h2
|
|
| wx.mlcdn.com.br/site/shared/favicon/favicon-16x16.png | 179.191.188.65 | 200 OK | 276 B |
URL GET HTTP/2wx.mlcdn.com.br/site/shared/favicon/favicon-16x16.png IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.mlcdn.com.br Fingerprint96:85:15:1F:69:33:93:CA:9A:A6:C6:D3:B4:D4:FD:F1:6F:DC:5F:D5 ValidityTue, 14 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 16x16, Scaling: [none]x[none], YUV color, decoders should clamp Hashdbb331243ca9a1d8889d3c02f116d728 919d38ffc3d1c8ea730915c725b88af57087cf33 a524c5c88e9e4902a5736c0436514232444bd794912ec78bf6e89cbe161f2d73
GET /site/shared/favicon/favicon-16x16.png HTTP/1.1
Host: wx.mlcdn.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:54 GMT
content-type: image/webp
content-length: 276
expires: Fri, 18 Apr 2025 05:37:54 GMT
vary: Accept
server: Azion IMS
etag: "919d38ffc3d1c8ea730915c725b88af57087cf33"
x-original-image-size: 332
x-ims: Enabled
cache-control: max-age=31536000
X-Firefox-Spdy: h2
|
|
| bat.bing.com/bat.js | 13.107.21.237 | 200 OK | 13 kB |
IP13.107.21.237:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerMicrosoft Corporation Subjectwww.bing.com Fingerprint77:7D:3C:1C:6F:BE:03:46:50:D9:71:BC:6C:5F:A0:36:1C:35:1F:02 ValidityThu, 18 Apr 2024 02:05:34 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (46429), with no line terminators Hash72bca04fd669eb89fc65d59052d0fc00 27e60aef86f0cb1b2f6b6ed9df9a4e3ba88efd21 823804a7807864b44093a3843788f4cd076e89cf4a6fdeb8d153ae5c2c2df721
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 13261
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 29 Feb 2024 19:58:06 GMT
accept-ranges: bytes
etag: "01b4e9c496bda1:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B2944753F9CB4A1C94D20CE71459F104 Ref B: OSL30EDGE0209 Ref C: 2024-04-18T05:37:54Z
date: Thu, 18 Apr 2024 05:37:54 GMT
X-Firefox-Spdy: h2
|
|
| bat.bing.com/bat.js | 13.107.21.237 | 200 OK | 13 kB |
IP13.107.21.237:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerMicrosoft Corporation Subjectwww.bing.com Fingerprint77:7D:3C:1C:6F:BE:03:46:50:D9:71:BC:6C:5F:A0:36:1C:35:1F:02 ValidityThu, 18 Apr 2024 02:05:34 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (46429), with no line terminators Hash72bca04fd669eb89fc65d59052d0fc00 27e60aef86f0cb1b2f6b6ed9df9a4e3ba88efd21 823804a7807864b44093a3843788f4cd076e89cf4a6fdeb8d153ae5c2c2df721
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 13261
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 29 Feb 2024 19:58:06 GMT
accept-ranges: bytes
etag: "01b4e9c496bda1:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 36C669B798A441459CC9FD5AFC1BC3C8 Ref B: OSL30EDGE0209 Ref C: 2024-04-18T05:37:54Z
date: Thu, 18 Apr 2024 05:37:54 GMT
X-Firefox-Spdy: h2
|
|
| bat.bing.com/action/0?ti=26346096&tm=gtm002&Ver=2&mid=8a1b1dac-d1fd-4da4-9653-23569cbf4fdf&sid=cdedf840fd4511ee9aae4d7c5a05454b&vid=cdee0380fd4511ee84990d3fff9ee076&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sacola%20de%20compras%20-%20Magazine%20Luiza&p=https%3A%2F%2Fsacola.influenciadormagalu.com.br%2F%23%2F&r=<=1526&evt=pageLoad&sv=1&rn=71183 | 13.107.21.237 | 204 No Content | 0 B |
URL GET HTTP/2bat.bing.com/action/0?ti=26346096&tm=gtm002&Ver=2&mid=8a1b1dac-d1fd-4da4-9653-23569cbf4fdf&sid=cdedf840fd4511ee9aae4d7c5a05454b&vid=cdee0380fd4511ee84990d3fff9ee076&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sacola%20de%20compras%20-%20Magazine%20Luiza&p=https%3A%2F%2Fsacola.influenciadormagalu.com.br%2F%23%2F&r=<=1526&evt=pageLoad&sv=1&rn=71183 IP13.107.21.237:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerMicrosoft Corporation Subjectwww.bing.com Fingerprint77:7D:3C:1C:6F:BE:03:46:50:D9:71:BC:6C:5F:A0:36:1C:35:1F:02 ValidityThu, 18 Apr 2024 02:05:34 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=26346096&tm=gtm002&Ver=2&mid=8a1b1dac-d1fd-4da4-9653-23569cbf4fdf&sid=cdedf840fd4511ee9aae4d7c5a05454b&vid=cdee0380fd4511ee84990d3fff9ee076&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sacola%20de%20compras%20-%20Magazine%20Luiza&p=https%3A%2F%2Fsacola.influenciadormagalu.com.br%2F%23%2F&r=<=1526&evt=pageLoad&sv=1&rn=71183 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=0966706232586D0211F4640733AD6C56; domain=.bing.com; expires=Tue, 13-May-2025 05:37:54 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 3CE090705A754834951E76C5A9430680 Ref B: OSL30EDGE0209 Ref C: 2024-04-18T05:37:54Z
date: Thu, 18 Apr 2024 05:37:54 GMT
X-Firefox-Spdy: h2
|
|
| bat.bing.com/action/0?ti=26346096&tm=gtm002&Ver=2&mid=b89eb1ac-e745-4b49-a2e5-69af7dbfd5e7&sid=cdedf840fd4511ee9aae4d7c5a05454b&vid=cdee0380fd4511ee84990d3fff9ee076&vids=0&msclkid=N&page_path=%2F&spa=Y&p=https%3A%2F%2Fsacola.influenciadormagalu.com.br%2F&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sacola%20de%20compras%20-%20Magazine%20Luiza&r=https%3A%2F%2Fsacola.influenciadormagalu.com.br%2F%23%2F&evt=pageLoad&sv=1&rn=428961 | 13.107.21.237 | 204 No Content | 0 B |
URL GET HTTP/2bat.bing.com/action/0?ti=26346096&tm=gtm002&Ver=2&mid=b89eb1ac-e745-4b49-a2e5-69af7dbfd5e7&sid=cdedf840fd4511ee9aae4d7c5a05454b&vid=cdee0380fd4511ee84990d3fff9ee076&vids=0&msclkid=N&page_path=%2F&spa=Y&p=https%3A%2F%2Fsacola.influenciadormagalu.com.br%2F&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sacola%20de%20compras%20-%20Magazine%20Luiza&r=https%3A%2F%2Fsacola.influenciadormagalu.com.br%2F%23%2F&evt=pageLoad&sv=1&rn=428961 IP13.107.21.237:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerMicrosoft Corporation Subjectwww.bing.com Fingerprint77:7D:3C:1C:6F:BE:03:46:50:D9:71:BC:6C:5F:A0:36:1C:35:1F:02 ValidityThu, 18 Apr 2024 02:05:34 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=26346096&tm=gtm002&Ver=2&mid=b89eb1ac-e745-4b49-a2e5-69af7dbfd5e7&sid=cdedf840fd4511ee9aae4d7c5a05454b&vid=cdee0380fd4511ee84990d3fff9ee076&vids=0&msclkid=N&page_path=%2F&spa=Y&p=https%3A%2F%2Fsacola.influenciadormagalu.com.br%2F&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sacola%20de%20compras%20-%20Magazine%20Luiza&r=https%3A%2F%2Fsacola.influenciadormagalu.com.br%2F%23%2F&evt=pageLoad&sv=1&rn=428961 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=2A6C4D1E35CF64CF1E77597B343A6538; domain=.bing.com; expires=Tue, 13-May-2025 05:37:54 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 36A8CE4341B04CDAB82EA03E337C8B28 Ref B: OSL30EDGE0209 Ref C: 2024-04-18T05:37:54Z
date: Thu, 18 Apr 2024 05:37:54 GMT
X-Firefox-Spdy: h2
|
|
| bat.bing.com/actionp/0?ti=26346096&tm=gtm002&Ver=2&mid=8a1b1dac-d1fd-4da4-9653-23569cbf4fdf&sid=cdedf840fd4511ee9aae4d7c5a05454b&vid=cdee0380fd4511ee84990d3fff9ee076&vids=1&msclkid=N&evt=pageHide | 13.107.21.237 | 204 No Content | 0 B |
URL POST HTTP/2bat.bing.com/actionp/0?ti=26346096&tm=gtm002&Ver=2&mid=8a1b1dac-d1fd-4da4-9653-23569cbf4fdf&sid=cdedf840fd4511ee9aae4d7c5a05454b&vid=cdee0380fd4511ee84990d3fff9ee076&vids=1&msclkid=N&evt=pageHide IP13.107.21.237:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerMicrosoft Corporation Subjectwww.bing.com Fingerprint77:7D:3C:1C:6F:BE:03:46:50:D9:71:BC:6C:5F:A0:36:1C:35:1F:02 ValidityThu, 18 Apr 2024 02:05:34 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /actionp/0?ti=26346096&tm=gtm002&Ver=2&mid=8a1b1dac-d1fd-4da4-9653-23569cbf4fdf&sid=cdedf840fd4511ee9aae4d7c5a05454b&vid=cdee0380fd4511ee84990d3fff9ee076&vids=1&msclkid=N&evt=pageHide HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sacola.influenciadormagalu.com.br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=0EDF0382B708619026AF17E7B6FD60BA; domain=.bing.com; expires=Tue, 13-May-2025 05:37:55 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 837B8790EA2E42E4816D38A69E22D7C7 Ref B: OSL30EDGE0209 Ref C: 2024-04-18T05:37:55Z
date: Thu, 18 Apr 2024 05:37:54 GMT
X-Firefox-Spdy: h2
|
|
| www.influenciadormagalu.com.br/fragments/checkout_header.html | 179.191.188.65 | 200 OK | 5.4 kB |
URL GET HTTP/2www.influenciadormagalu.com.br/fragments/checkout_header.html IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.influenciadormagalu.com.br FingerprintE3:10:B3:F0:E3:72:8A:20:2A:25:54:89:83:FE:4D:C3:2A:34:A1:97 ValidityTue, 19 Mar 2024 00:00:00 GMT - Wed, 19 Mar 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4261) Hashf9615f271387b218c20836f020afd0ad 675e5e8f7f7f5d76199e36e07057b4a4082fd003 f68af2884e545d32f2baad1fa5f5ffff6151619dbb22941860a02dc9e4cf467f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fragments/checkout_header.html HTTP/1.1
Host: www.influenciadormagalu.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sacola.influenciadormagalu.com.br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Cookie: jeannie=b2d6b9b8-704c-44e1-a24a-ca38f44aaaca
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:54 GMT
content-type: text/html; charset=utf-8
server: nginx/1.25.2
vary: Accept-Encoding, Cookie
x-frame-options: SAMEORIGIN
access-control-allow-origin: https://sacola.influenciadormagalu.com.br
access-control-allow-credentials: true
via: 1.1 google
set-cookie: mixer_shipping=AUTO; Domain=influenciadormagalu.com.br; Path=/
mixer_hub_shipping=true; Domain=influenciadormagalu.com.br; Path=/
toggle_wishlist=false; Domain=influenciadormagalu.com.br; Path=/
toggle_sharedbag=true; Domain=influenciadormagalu.com.br; Path=/
toggle_sidebarheading_pmd=true; Domain=influenciadormagalu.com.br; Path=/
toggle_shareurl_pmd_v2=shorten_app; Domain=influenciadormagalu.com.br; Path=/
toggle_shorten_widget=true; Domain=influenciadormagalu.com.br; Path=/
toggle_pmd_nbc=true; Domain=influenciadormagalu.com.br; Path=/
pmd_promoter=; Domain=.influenciadormagalu.com.br; expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Path=/
FCCDCF=; Domain=.influenciadormagalu.com.br; expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Path=/
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| api.soclminer.com.br/v2.1/customers/6e6a8240-c690-4372-bd37-9bfa99486c33?format=json&url=https%3A%2F%2Fsacola.influenciadormagalu.com.br%2F%23%2F&referrer=¶mOnSession=&isMobile=false | 44.196.63.106 | 200 OK | 263 B |
URL GET HTTP/1.1api.soclminer.com.br/v2.1/customers/6e6a8240-c690-4372-bd37-9bfa99486c33?format=json&url=https%3A%2F%2Fsacola.influenciadormagalu.com.br%2F%23%2F&referrer=¶mOnSession=&isMobile=false IP44.196.63.106:443
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerAmazon Subject*.soclminer.com.br Fingerprint61:24:70:05:3A:B7:55:C9:AF:78:2A:75:A0:D3:8F:22:69:EE:01:F9 ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 04 Dec 2024 23:59:59 GMT
Hash68d32f8e797ca4bfbce472798a4d0c1d d31353e86d5eea7c3c9f63057b2bb2fc72f892af 26b47bce09cdbc89c735c65bb98d2da2589dbfe63d7908c02693de609aab96ff
GET /v2.1/customers/6e6a8240-c690-4372-bd37-9bfa99486c33?format=json&url=https%3A%2F%2Fsacola.influenciadormagalu.com.br%2F%23%2F&referrer=¶mOnSession=&isMobile=false HTTP/1.1
Host: api.soclminer.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sacola.influenciadormagalu.com.br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, JSNLog-RequestId
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: private
Content-Type: application/json; charset=utf-8
Date: Thu, 18 Apr 2024 05:37:57 GMT
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ServiceStack/3,971 Win32NT/.NET, ASP.NET
Content-Length: 263
Connection: keep-alive
|
|
| static.socialminer.com/custom/00000000000000000000000000000000/custom.js |  104.26.14.193 | 301 Moved Permanently | 0 B |
URL GET HTTP/2static.socialminer.com/custom/00000000000000000000000000000000/custom.js IP104.26.14.193:443
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerGoogle Trust Services LLC Subjectsocialminer.com FingerprintB3:C8:F1:E3:B2:40:03:8C:54:CA:6F:48:3D:B7:D7:06:5A:A3:5F:37 ValidityFri, 15 Mar 2024 15:51:01 GMT - Thu, 13 Jun 2024 15:51:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /custom/00000000000000000000000000000000/custom.js HTTP/1.1
Host: static.socialminer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 18 Apr 2024 05:37:57 GMT
content-length: 0
location: https://static.socialminer.com/custom/default.js
x-amz-id-2: cpy1pn27i8lBw6Y5diVg5iX3yx08Ft2MHmWFRjhXMt2ZZzJzubGcMa66HRHnzh6prCHC7qZqFeg=
x-amz-request-id: TM3EET7JX153K9VZ
cache-control: max-age=86400
cf-cache-status: HIT
age: 37158
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=45YAG1VO4c4TBqPOIsCOqMkROzvm7zH%2BZosTUWbnaZmdE1UYCy7F4IOO93T8u6prp56BAsctfOgMdyQRoCFzZ%2BsIGCdSe7VGTO1AzACz%2B3buR2%2BqV0g8dBxRv50w%2FWZzmR0cMkx5MAk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87624e4d290bb505-OSL
X-Firefox-Spdy: h2
|
|
| static.socialminer.com/custom/default.js | 104.26.14.193 | 200 OK | 0 B |
URL GET HTTP/2static.socialminer.com/custom/default.js IP104.26.14.193:443
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerGoogle Trust Services LLC Subjectsocialminer.com FingerprintB3:C8:F1:E3:B2:40:03:8C:54:CA:6F:48:3D:B7:D7:06:5A:A3:5F:37 ValidityFri, 15 Mar 2024 15:51:01 GMT - Thu, 13 Jun 2024 15:51:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /custom/default.js HTTP/1.1
Host: static.socialminer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sacola.influenciadormagalu.com.br/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:57 GMT
content-type: application/javascript
content-length: 0
x-amz-id-2: OpnaFKlfoAiYKG2Hpr7Vio1R/AJxy+HXMNAsuBzoO79ey9CTcVLBvxcT3uQtG2RWRnYABwGZKKs=
x-amz-request-id: V5PQ6567VEP40BAK
last-modified: Mon, 27 Jan 2020 21:15:06 GMT
x-amz-version-id: null
etag: "d41d8cd98f00b204e9800998ecf8427e"
cache-control: max-age=86400
cf-cache-status: HIT
age: 37220
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J0EXSm3xNyoA0YirkCtLalUgW8S3ZLt1vKJ9BaAT5vRRk912CqnPCFDpoy6fSbwqDrrFqE%2B9%2F5yGcsrPBLfQCFqLdvNRkHTKjAcXuntzhumjuDUWuGFgIOtDxRGv2OKeSX%2B%2BE75mhnc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87624e4d4937b505-OSL
X-Firefox-Spdy: h2
|
|
| track.influenciadormagalu.com.br/pixel/?a=ping&c=magazine_voce | 179.191.188.65 | 301 Moved Permanently | 127 B |
URL GET HTTP/2track.influenciadormagalu.com.br/pixel/?a=ping&c=magazine_voce IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.influenciadormagalu.com.br FingerprintE3:10:B3:F0:E3:72:8A:20:2A:25:54:89:83:FE:4D:C3:2A:34:A1:97 ValidityTue, 19 Mar 2024 00:00:00 GMT - Wed, 19 Mar 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hashe5c6f777631bec614b4b51cd75f08bee 95eb605f3b290302cbd51c2c2a9592fb588e88cc e742141f781b7bac27473f61e81c88353a42d9a022205cef50a2237a2102cf74
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/?a=ping&c=magazine_voce HTTP/1.1
Host: track.influenciadormagalu.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sacola.influenciadormagalu.com.br/
DNT: 1
Connection: keep-alive
Cookie: jeannie=b2d6b9b8-704c-44e1-a24a-ca38f44aaaca; _gcl_au=1.1.1950467615.1713418674; mixer_shipping=AUTO; mixer_hub_shipping=true; toggle_wishlist=false; toggle_sharedbag=true; toggle_sidebarheading_pmd=true; toggle_shareurl_pmd_v2=shorten_app; toggle_shorten_widget=true; toggle_pmd_nbc=true; _ga_88XVNRG61P=GS1.1.1713418674.1.0.1713418674.0.0.0; _ga=GA1.1.807003896.1713418674; _uetsid=cdedf840fd4511ee9aae4d7c5a05454b; _uetvid=cdee0380fd4511ee84990d3fff9ee076
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Thu, 18 Apr 2024 05:37:58 GMT
content-type: text/plain; charset=utf-8
content-length: 127
location: https://www.magazinevoce.com.br/stw/cb/?stwu=temp_d0784de0-fd45-11ee-bfa9-8dc38075453e&stwt=1
server: nginx
x-powered-by: Express
set-cookie: stwu=temp_d0784de0-fd45-11ee-bfa9-8dc38075453e; Domain=rgr.bob-recs.com; Path=/; Expires=Tue, 17 Apr 2029 05:37:58 GMT; HttpOnly; Secure
p3p: CP='ALL DSP LAW CUR DEV PSAo PSDo IVAo IVDo CONo HISo OUR STP UNI NAV'
cache-control: no-cache
vary: Accept
via: 1.1 google
X-Firefox-Spdy: h2
|
|
| www.magazinevoce.com.br/stw/cb/?stwu=temp_d0784de0-fd45-11ee-bfa9-8dc38075453e&stwt=1 | 179.191.188.65 | 302 Found | 138 B |
URL GET HTTP/2www.magazinevoce.com.br/stw/cb/?stwu=temp_d0784de0-fd45-11ee-bfa9-8dc38075453e&stwt=1 IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.magazinevoce.com.br Fingerprint15:B7:90:59:57:C5:BA:70:0E:D1:F8:E6:C2:B0:39:E2:B2:94:AD:E9 ValidityWed, 03 Jan 2024 00:00:00 GMT - Sat, 01 Feb 2025 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashaff950cab4c0265e21d401db15f1026d f03e18461817f7a6546c8bf8fa8d686d7e30aca0 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /stw/cb/?stwu=temp_d0784de0-fd45-11ee-bfa9-8dc38075453e&stwt=1 HTTP/1.1
Host: www.magazinevoce.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sacola.influenciadormagalu.com.br/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Thu, 18 Apr 2024 05:37:59 GMT
content-type: text/html
content-length: 138
location: https://www.influenciadormagalu.com.br/stw/cb/?stwu=temp_d0784de0-fd45-11ee-bfa9-8dc38075453e&stwt=1
X-Firefox-Spdy: h2
|
|
| www.influenciadormagalu.com.br/stw/cb/?stwu=temp_d0784de0-fd45-11ee-bfa9-8dc38075453e&stwt=1 | 179.191.188.65 | 200 OK | 0 B |
URL GET HTTP/2www.influenciadormagalu.com.br/stw/cb/?stwu=temp_d0784de0-fd45-11ee-bfa9-8dc38075453e&stwt=1 IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.influenciadormagalu.com.br FingerprintE3:10:B3:F0:E3:72:8A:20:2A:25:54:89:83:FE:4D:C3:2A:34:A1:97 ValidityTue, 19 Mar 2024 00:00:00 GMT - Wed, 19 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stw/cb/?stwu=temp_d0784de0-fd45-11ee-bfa9-8dc38075453e&stwt=1 HTTP/1.1
Host: www.influenciadormagalu.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sacola.influenciadormagalu.com.br/
DNT: 1
Connection: keep-alive
Cookie: jeannie=b2d6b9b8-704c-44e1-a24a-ca38f44aaaca; _gcl_au=1.1.1950467615.1713418674; mixer_shipping=AUTO; mixer_hub_shipping=true; toggle_wishlist=false; toggle_sharedbag=true; toggle_sidebarheading_pmd=true; toggle_shareurl_pmd_v2=shorten_app; toggle_shorten_widget=true; toggle_pmd_nbc=true; _ga_88XVNRG61P=GS1.1.1713418674.1.0.1713418674.0.0.0; _ga=GA1.1.807003896.1713418674; _uetsid=cdedf840fd4511ee9aae4d7c5a05454b; _uetvid=cdee0380fd4511ee84990d3fff9ee076
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:59 GMT
content-length: 0
strict-transport-security: max-age=31536000; preload
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' https://*.mglu.io https://*.magalu.com https://*.luizalabs.com https://*.magazineluiza.com.br;
via: 1.1 google
set-cookie: mixer_shipping=AUTO; Domain=influenciadormagalu.com.br; Path=/
mixer_hub_shipping=true; Domain=influenciadormagalu.com.br; Path=/
toggle_wishlist=false; Domain=influenciadormagalu.com.br; Path=/
toggle_sharedbag=true; Domain=influenciadormagalu.com.br; Path=/
toggle_sidebarheading_pmd=true; Domain=influenciadormagalu.com.br; Path=/
toggle_shareurl_pmd_v2=shorten_app; Domain=influenciadormagalu.com.br; Path=/
toggle_shorten_widget=true; Domain=influenciadormagalu.com.br; Path=/
toggle_pmd_nbc=true; Domain=influenciadormagalu.com.br; Path=/
stwu=temp_d0784de0-fd45-11ee-bfa9-8dc38075453e; Domain=.influenciadormagalu.com.br; Expires=Fri, 18 Apr 2025 05:37:59 GMT; path=/; Secure;
stwt=1; Domain=.influenciadormagalu.com.br; Expires=Fri, 18 Apr 2025 05:37:59 GMT; path=/; Secure;
X-Firefox-Spdy: h2
|
|
| opentelemetry-collector-external.luizalabs.com/v1/traces | 179.191.188.65 | 204 No Content | 0 B |
URL OPTIONS HTTP/2opentelemetry-collector-external.luizalabs.com/v1/traces IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.luizalabs.com FingerprintF6:84:7A:F2:A9:7A:B7:F6:40:B4:75:6C:B4:A1:8F:DD:FA:9A:45:CB ValidityWed, 19 Jul 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/traces HTTP/1.1
Host: opentelemetry-collector-external.luizalabs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://sacola.influenciadormagalu.com.br/
Origin: https://sacola.influenciadormagalu.com.br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 05:37:59 GMT
access-control-allow-credentials: true
access-control-allow-headers: Authorization, Content-Type
access-control-allow-methods: POST
access-control-allow-origin: *
access-control-max-age: 7200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
X-Firefox-Spdy: h2
|
|
| opentelemetry-collector-external.luizalabs.com/v1/traces | 179.191.188.65 | 204 No Content | 21 B |
URL OPTIONS HTTP/2opentelemetry-collector-external.luizalabs.com/v1/traces IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.luizalabs.com FingerprintF6:84:7A:F2:A9:7A:B7:F6:40:B4:75:6C:B4:A1:8F:DD:FA:9A:45:CB ValidityWed, 19 Jul 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
Hasheb3e2433aeb742691ad01dfef2b22213 6dbd1935920213ce8289e8549e413d06e9161d7b f56b35823a693646bf987ca07c9cbc4ff72a83b79b34595b20546b539795fdf0
POST /v1/traces HTTP/1.1
Host: opentelemetry-collector-external.luizalabs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Authorization: Basic Z3N4LXJwa3QtcnN6OnhvcS1zc3JiLXR5bg==
Content-Length: 28451
Origin: https://sacola.influenciadormagalu.com.br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:38:00 GMT
content-type: application/json
content-length: 21
access-control-allow-credentials: true
access-control-allow-origin: *
vary: Origin
X-Firefox-Spdy: h2
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-05-20-00-15-28.chain; p384ecdsa=iEFWah-WCxf1A-tl5QzlhJYvlMTQIFHChq1xO4mOhTc6NzbCxZKrt4hFup5mCb2lNKRMat_ShnT6y8ssi65kG_i6OjwsKmoJ-5nnu36tEMZJRMRrkFOFilIPXHOPBkdd
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Thu, 18 Apr 2024 05:37:05 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 66
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| sacola.influenciadormagalu.com.br/settings.js | 179.191.188.65 | 200 OK | 4.1 kB |
URL GET HTTP/2sacola.influenciadormagalu.com.br/settings.js IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.influenciadormagalu.com.br FingerprintE3:10:B3:F0:E3:72:8A:20:2A:25:54:89:83:FE:4D:C3:2A:34:A1:97 ValidityTue, 19 Mar 2024 00:00:00 GMT - Wed, 19 Mar 2025 23:59:59 GMT
File typeASCII text, with very long lines (4471), with no line terminators Hash738e72169f6dc0e4790ea9e60bfd3d84 8b94ba8da2c70a5350b8c5944e90831644d12cb5 7abdd0b6817f2e70d7626d918ec464dd791a55e884eee74ba41b6c2cc3a10bfd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Magalu | | Quad9 DNS | malicious | Sinkholed |
GET /settings.js HTTP/1.1
Host: sacola.influenciadormagalu.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:53 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-xss-protection: 1;mode=block
x-frame-options: DENY
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-version: 6.115.0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: jeannie=b2d6b9b8-704c-44e1-a24a-ca38f44aaaca; Domain=.influenciadormagalu.com.br; Path=/
server: Python/3.9 aiohttp/3.7.4.post0
via: 1.1 google
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| plugins.soclminer.com.br/v3/sdk/all.min.js | 172.67.72.121 | 200 OK | 244 kB |
URL GET HTTP/2plugins.soclminer.com.br/v3/sdk/all.min.js IP172.67.72.121:443
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerGoogle Trust Services LLC Subjectsoclminer.com.br Fingerprint6C:47:6C:B4:FD:66:72:34:8C:3B:22:A2:85:55:07:16:8D:EE:0C:23 ValidityFri, 15 Mar 2024 11:14:20 GMT - Thu, 13 Jun 2024 11:14:19 GMT
Size244 kB (244103 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/sdk/all.min.js HTTP/1.1
Host: plugins.soclminer.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:53 GMT
content-type: application/javascript
x-amz-id-2: YWFy8FE14o3NscN5X6C73l9QWpyic6dgDT5Ha27v6ADiD2PLs2REB5ml9AhigexCJdAEZBK5m+c=
x-amz-request-id: 8MJJ7G00XV0CXWH0
cache-control: public, max-age=86400
last-modified: Mon, 25 Mar 2024 14:13:28 GMT
x-amz-version-id: z3EgEwRLvr2omS1taw2qvrTAtvDXJ25.
etag: W/"5ea92fef3ace8d57aee887a1ec1c5749"
cf-cache-status: HIT
age: 41216
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=plF7muTb1VmZNmtsbKYtSKEdGb4WFxG7PKcne9Zzoq%2BMn%2FXEJP%2Bqmoqsrt9nPmg9jCqvzCMV0dsl19g3%2B9MQ%2BiCDUXAqltMSfqn67IY2th8YcHWUd%2B4kk%2BBclKaDnb8eAiXgVsEcD%2B6kyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87624e370ff656c7-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| smartbmc.com.br/i/mgl/cart/ | 0.0.0.0 | | 0 B |
URL GET smartbmc.com.br/i/mgl/cart/ IP0.0.0.0:0
Requested byhttps://sacola.influenciadormagalu.com.br/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /i/mgl/cart/ HTTP/1.1
Host: smartbmc.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| sacola.influenciadormagalu.com.br/static/styles.abab339bd8de76b79921.css | 179.191.188.65 | 200 OK | 102 kB |
URL GET HTTP/2sacola.influenciadormagalu.com.br/static/styles.abab339bd8de76b79921.css IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.influenciadormagalu.com.br FingerprintE3:10:B3:F0:E3:72:8A:20:2A:25:54:89:83:FE:4D:C3:2A:34:A1:97 ValidityTue, 19 Mar 2024 00:00:00 GMT - Wed, 19 Mar 2025 23:59:59 GMT
Size102 kB (102004 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Magalu | | Quad9 DNS | malicious | Sinkholed |
GET /static/styles.abab339bd8de76b79921.css HTTP/1.1
Host: sacola.influenciadormagalu.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:52 GMT
content-type: text/css
vary: Accept-Encoding
x-guploader-uploadid: ABPtcPohDIm7kkf_l3f0aBavodT4eQnn_GCDoUQR31E1hzexxOaz4XgJZb2Da2CJuKtO-ax_sg
cache-control: max-age=604800
expires: Thu, 25 Apr 2024 05:37:52 GMT
last-modified: Thu, 11 Apr 2024 14:24:46 GMT
etag: W/"f3c06f07e8e7f7b0ccb15ab5b0b81072"
x-goog-generation: 1712845486082993
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 102004
x-amz-checksum-crc32c: +lulAQ==
x-goog-storage-class: STANDARD
server: UploadServer
x-frame-options: DENY
x-goog-hash: crc32c=+lulAQ==, md5=88BvB+jn97DMsVq1sLgQcg==
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| sacola.influenciadormagalu.com.br/static/app.abab339bd8de76b79921.js | 179.191.188.65 | 200 OK | 1.9 MB |
URL GET HTTP/2sacola.influenciadormagalu.com.br/static/app.abab339bd8de76b79921.js IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.influenciadormagalu.com.br FingerprintE3:10:B3:F0:E3:72:8A:20:2A:25:54:89:83:FE:4D:C3:2A:34:A1:97 ValidityTue, 19 Mar 2024 00:00:00 GMT - Wed, 19 Mar 2025 23:59:59 GMT
Size1.9 MB (1911453 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Magalu | | Quad9 DNS | malicious | Sinkholed |
GET /static/app.abab339bd8de76b79921.js HTTP/1.1
Host: sacola.influenciadormagalu.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:52 GMT
content-type: application/javascript
vary: Accept-Encoding
x-guploader-uploadid: ABPtcPq1voaWEzQ1uebE1Y-sS1d8rR4kgmyoOgSAsQQEFJSpG2BenMtV_767WIMttz1OvdCF0A
cache-control: max-age=604800
expires: Thu, 25 Apr 2024 05:37:52 GMT
last-modified: Thu, 11 Apr 2024 14:24:47 GMT
etag: W/"4d0f9eca82fcd959e128126b1cdf150c"
x-goog-generation: 1712845487119910
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1911453
x-amz-checksum-crc32c: PuzpNg==
x-goog-storage-class: STANDARD
server: UploadServer
x-frame-options: DENY
x-goog-hash: crc32c=PuzpNg==, md5=TQ+eyoL82VnhKBJrHN8VDA==
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| wx.mlcdn.com.br/site/shared/stewie/stewie-3.1.0.min.js | 179.191.188.65 | 200 OK | 4.2 kB |
URL GET HTTP/2wx.mlcdn.com.br/site/shared/stewie/stewie-3.1.0.min.js IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.mlcdn.com.br Fingerprint96:85:15:1F:69:33:93:CA:9A:A6:C6:D3:B4:D4:FD:F1:6F:DC:5F:D5 ValidityTue, 14 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (4282), with no line terminators Hashcd066a1ed730f79edab92515c0178f92 f84290a5e749830415c6c156e2062157e6c4cbfb 795b2adcf4d4d15f073e61b4a63e3c6a5a822b2026c5e155074c0b09c0ba1091
GET /site/shared/stewie/stewie-3.1.0.min.js HTTP/1.1
Host: wx.mlcdn.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:53 GMT
content-type: text/javascript
vary: Accept-Encoding
x-guploader-uploadid: ABPtcPqR4lYH-Sw6PfgbbdZgfU7BukDnP2n-oeOkKVyBCm3tFEvqwDXT4fKOXX1sHwJTXF3LRUgxImN06buZie2wpYAimrgTnfd5
x-goog-generation: 1699297954305985
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4153
x-goog-hash: crc32c=NDHuvg==, md5=NDsfw44siN8I6dmPilUUfQ==
x-goog-storage-class: STANDARD
server: UploadServer
expires: Fri, 18 Apr 2025 05:37:53 GMT
cache-control: max-age=31536000
last-modified: Mon, 06 Nov 2023 19:12:34 GMT
etag: W/"343b1fc38e2c88df08e9d98f8a55147d"
age: 11
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bat.bing.com/actionp/0?ti=26346096&tm=gtm002&Ver=2&mid=b89eb1ac-e745-4b49-a2e5-69af7dbfd5e7&sid=cdedf840fd4511ee9aae4d7c5a05454b&vid=cdee0380fd4511ee84990d3fff9ee076&vids=0&msclkid=N&evt=dedup | 13.107.21.237 | 204 No Content | 0 B |
URL POST HTTP/2bat.bing.com/actionp/0?ti=26346096&tm=gtm002&Ver=2&mid=b89eb1ac-e745-4b49-a2e5-69af7dbfd5e7&sid=cdedf840fd4511ee9aae4d7c5a05454b&vid=cdee0380fd4511ee84990d3fff9ee076&vids=0&msclkid=N&evt=dedup IP13.107.21.237:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerMicrosoft Corporation Subjectwww.bing.com Fingerprint77:7D:3C:1C:6F:BE:03:46:50:D9:71:BC:6C:5F:A0:36:1C:35:1F:02 ValidityThu, 18 Apr 2024 02:05:34 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /actionp/0?ti=26346096&tm=gtm002&Ver=2&mid=b89eb1ac-e745-4b49-a2e5-69af7dbfd5e7&sid=cdedf840fd4511ee9aae4d7c5a05454b&vid=cdee0380fd4511ee84990d3fff9ee076&vids=0&msclkid=N&evt=dedup HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sacola.influenciadormagalu.com.br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=1CAE5DEEDEB66549175C498BDF43648D; domain=.bing.com; expires=Tue, 13-May-2025 05:37:55 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 64242BE84A614C779B5DF2E10B24AC42 Ref B: OSL30EDGE0209 Ref C: 2024-04-18T05:37:55Z
date: Thu, 18 Apr 2024 05:37:54 GMT
X-Firefox-Spdy: h2
|
|
| bat.bing.com/p/action/26346096.js | 13.107.21.237 | 200 OK | 3.7 kB |
URL GET HTTP/2bat.bing.com/p/action/26346096.js IP13.107.21.237:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerMicrosoft Corporation Subjectwww.bing.com Fingerprint77:7D:3C:1C:6F:BE:03:46:50:D9:71:BC:6C:5F:A0:36:1C:35:1F:02 ValidityThu, 18 Apr 2024 02:05:34 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3888), with no line terminators Hash7a3dc5de8f6ef3624c72bf388d188d53 e3b4a7641f0f773dfbdf3b570f7fa0b866531159 0f4ee2487a8f4223a0ad76db0244ff6d8eabb607898bed7b4604683e0fba2fb9
GET /p/action/26346096.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=60
content-type: application/javascript; charset=utf-8
content-encoding: br
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6F42B895D3C547D48D07DAD490567363 Ref B: OSL30EDGE0209 Ref C: 2024-04-18T05:37:54Z
date: Thu, 18 Apr 2024 05:37:54 GMT
X-Firefox-Spdy: h2
|
|
| mvc.mlcdn.com.br/magazinevoce/img/s/lock.png | 179.191.188.65 | 200 OK | 398 B |
URL GET HTTP/2mvc.mlcdn.com.br/magazinevoce/img/s/lock.png IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.mlcdn.com.br Fingerprint96:85:15:1F:69:33:93:CA:9A:A6:C6:D3:B4:D4:FD:F1:6F:DC:5F:D5 ValidityTue, 14 Nov 2023 00:00:00 GMT - Fri, 13 Dec 2024 23:59:59 GMT
File typePNG image data, 16 x 20, 8-bit/color RGBA, interlaced Hash9a371a9f04060a203fa76ab34ce38522 c5f63aeb1697106ea72d2ab18cad05b9128386fb fd17fa4b7e856bb1b5fe4372107b9748a5de15bae35fb2d9472e64500c893d85
GET /magazinevoce/img/s/lock.png HTTP/1.1
Host: mvc.mlcdn.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:54 GMT
content-type: image/png
content-length: 398
x-amz-id-2: 88Srl6pw3yOrbQWLxEY8PTKtpbxROz2aTcXkpaRs8MZ4Ifz3n53NoXVXDQr0FnIwcAIsVYT1OEs=
x-amz-request-id: HMXYR4PJF09M381N
last-modified: Mon, 14 Aug 2023 17:35:32 GMT
etag: "9a371a9f04060a203fa76ab34ce38522"
x-amz-server-side-encryption: AES256
cache-control: max-age=3600
expires: Thu, 18 Apr 2024 06:37:54 GMT
server: AmazonS3
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| sacola.influenciadormagalu.com.br/static/TokenEx-Lite.js | 179.191.188.65 | 200 OK | 131 kB |
URL GET HTTP/2sacola.influenciadormagalu.com.br/static/TokenEx-Lite.js IP179.191.188.65:443 ASN#52580 Azion Technologies Ltda.
Requested byhttps://sacola.influenciadormagalu.com.br/ CertificateIssuerSectigo Limited Subject*.influenciadormagalu.com.br FingerprintE3:10:B3:F0:E3:72:8A:20:2A:25:54:89:83:FE:4D:C3:2A:34:A1:97 ValidityTue, 19 Mar 2024 00:00:00 GMT - Wed, 19 Mar 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (661) Size131 kB (130716 bytes) Hashfe3970480dd31670a0fe8557c7b1063a 69e61908ec4471bcc5fb8e95ef719eb45ed4de39 1f2fc2c1175d0e4fb096fbe5791aa619eea034bc52b6f13d6032fc087753ee46
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Magalu | | Quad9 DNS | malicious | Sinkholed |
GET /static/TokenEx-Lite.js HTTP/1.1
Host: sacola.influenciadormagalu.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sacola.influenciadormagalu.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:37:52 GMT
content-type: application/javascript
vary: Accept-Encoding
x-guploader-uploadid: ABPtcPrEblbGUWFnIWeT0ukMuxA_hhV2EV_eQD7_Haxj0nJ7gvlOKjLxYUPUOsRhRNcdtOlrvi8
cache-control: max-age=86400
expires: Fri, 19 Apr 2024 05:37:52 GMT
last-modified: Tue, 02 Apr 2024 21:09:11 GMT
etag: W/"fe3970480dd31670a0fe8557c7b1063a"
x-goog-generation: 1712092151677339
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 130716
x-amz-checksum-crc32c: 3/UI/A==
x-goog-storage-class: STANDARD
server: UploadServer
x-frame-options: DENY
x-goog-hash: crc32c=3/UI/A==, md5=/jlwSA3TFnCg/oVXx7EGOg==
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
0.0.0.0