| linkcurto.co/8l4bnq3zfk004 |  172.67.157.46 | 301 Moved Permanently | 0 B |
URL HTTP/1.1linkcurto.co/8l4bnq3zfk004 IP172.67.157.46:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /8l4bnq3zfk004 HTTP/1.1
Host: linkcurto.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 08 Nov 2022 06:55:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 08 Nov 2022 07:55:14 GMT
Location: https://linkcurto.co/8l4bnq3zfk004
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WuEyG%2F9Zq4KgaEWicBKLf9ovsIAl8YVqsiMTtMW3OIDLhrdJeZJuHJQpX3wFlvmyaPlf2CFsuE%2FReubwhTRgrnjXRuxaIthjeohZunSUOBdaDd8P3WiULFXB7xPZqmU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766c66e55ce7b521-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash9e164a845d32db8fa51fdb5b1aa218d9 169099b4d2f8e119ab6cf6fca279b6fb535b1759 402ffbf1404cf05c0516c5a8cd5344bd53537ac5150d387730a90c81c17dc9e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "402FFBF1404CF05C0516C5A8CD5344BD53537AC5150D387730A90C81C17DC9E4"
Last-Modified: Sun, 06 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9820
Expires: Tue, 08 Nov 2022 09:38:54 GMT
Date: Tue, 08 Nov 2022 06:55:14 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash9fd081ea88e8b8563986b3e558496d21 60700393dce5eb42c0db0d5feef340f4832e3c65 d92555957857423ed02f0d0435739bcd40a996591c73f40315564b372f6e2395
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6229
Cache-Control: max-age=105592
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:15 GMT
Etag: "6368de76-1d7"
Expires: Wed, 09 Nov 2022 12:15:07 GMT
Last-Modified: Mon, 07 Nov 2022 10:31:18 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash9fd081ea88e8b8563986b3e558496d21 60700393dce5eb42c0db0d5feef340f4832e3c65 d92555957857423ed02f0d0435739bcd40a996591c73f40315564b372f6e2395
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1714
Cache-Control: max-age=101077
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:15 GMT
Etag: "6368de76-1d7"
Expires: Wed, 09 Nov 2022 10:59:52 GMT
Last-Modified: Mon, 07 Nov 2022 10:31:18 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd8c32b2fb818533a5b3fe5c69157bde9 93594fd3fc50d9d444c28660eabba1edbe4f0588 df8b8ce7a83d11fbe075c8780103c509654f288b5d757d64b696d861a11f3c7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF8B8CE7A83D11FBE075C8780103C509654F288B5D757D64B696D861A11F3C7F"
Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15956
Expires: Tue, 08 Nov 2022 11:21:11 GMT
Date: Tue, 08 Nov 2022 06:55:15 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: m2nRvPufjJteAT5YZAxmGAq1duHuab81jT3GyZ16LbwIETIv8/6jDExoIJO6zQYVekZNme1wztVPrsHcPDyTRQ==
x-amz-request-id: 26M48VJQ4WGK93ZV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 08 Nov 2022 06:48:24 GMT
age: 411
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 08 Nov 2022 06:55:15 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashe6f4643306be10417c47176a6e67306f 940a13818904add9e1cacd12610f37ba1efd7bc5 67e51095b5da59b3eeda8a28c81789e69064a0a19a93347c2fcb05fd4b21e6d0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4928
Cache-Control: max-age=99219
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:15 GMT
Etag: "6368caa6-1d7"
Expires: Wed, 09 Nov 2022 10:28:54 GMT
Last-Modified: Mon, 07 Nov 2022 09:06:46 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 35.164.56.167 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.164.56.167:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: REb4zrDi9oYf5DKm0fheVA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: x1FOwYuyiGL0t8qHCwtzJng5aa0=
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash80d0206780717d3bda7664e68267dc3a 4ef6538905dd665d8a93df646b32ab7a369d9849 bf263854b2400d0fad1ed16c376e81bbec32d44b69aee9c3737436ed8c068f0b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF263854B2400D0FAD1ED16C376E81BBEC32D44B69AEE9C3737436ED8C068F0B"
Last-Modified: Tue, 08 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 08 Nov 2022 12:55:17 GMT
Date: Tue, 08 Nov 2022 06:55:17 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash4599ea4ab89bca0461dfc4e86cf90610 d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a 6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13735
Expires: Tue, 08 Nov 2022 10:44:12 GMT
Date: Tue, 08 Nov 2022 06:55:17 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash4599ea4ab89bca0461dfc4e86cf90610 d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a 6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13735
Expires: Tue, 08 Nov 2022 10:44:12 GMT
Date: Tue, 08 Nov 2022 06:55:17 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash4599ea4ab89bca0461dfc4e86cf90610 d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a 6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13735
Expires: Tue, 08 Nov 2022 10:44:12 GMT
Date: Tue, 08 Nov 2022 06:55:17 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash4599ea4ab89bca0461dfc4e86cf90610 d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a 6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13735
Expires: Tue, 08 Nov 2022 10:44:12 GMT
Date: Tue, 08 Nov 2022 06:55:17 GMT
Connection: keep-alive
|
|
| linkcurto.co/8l4bnq3zfk004 |  104.21.81.61 | 301 Moved Permanently | 38 kB |
URL HTTP/2linkcurto.co/8l4bnq3zfk004 IP104.21.81.61:0
Hashacbe2d6c1305e36213fb4771244c9518 7ee05b718823055a8d6104e5f6a4ac733a529292 c9b5f0808f1edb24125eef3a661894a1c76ab7821d96ac21821cdbd1ef8e4c06
GET /8l4bnq3zfk004 HTTP/1.1
Host: linkcurto.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Tue, 08 Nov 2022 06:55:15 GMT
content-type: text/html; charset=UTF-8
location: https://seguro.lojasacolazul.com.br/cart?cart_token=shopify-152f7f87b3ba581bb0c57a88fbac52b3&utm_source=facebook&utm_campaign=SMS Carrinho Abandonado 1&forceCheckout=1&skipToCheckout=1&store_token=2747b149ce2f370b4eb0a8c275630e11436abfa3&customerToken=acc21fa0-5f1c-11ed-be4e-c3c4bd8be4a7
set-cookie: XSRF-TOKEN=eyJpdiI6IkpucUFlT3ErVkR2VFp5bjdQK3Nhd1E9PSIsInZhbHVlIjoiTXpYMWNiUS9yRmhhcFp2dGp1Sm1LdStRbStsbG5lS09IbU9oOWp5MjFrS25yR3JOT1RrQkVLVWNpQUkwTmNkTnIzZ0h2U01nS2cyMlN0K0FoaEdaUzdUUnZPdnl4QzBBRnRkKzZ5emtTbnZxSWhFMm5VQk5paG9WRXZRQk54NlAiLCJtYWMiOiI2ZGE2NWZlZGE4MWI2MmU5ZjQ3ZWE4MThlYmFhZjY0Y2RhOGE3OGY4ZGM3ZDAyYWE5MDg4Y2JjOTRiYWQ0Zjc4In0%3D; expires=Tue, 08-Nov-2022 08:55:15 GMT; Max-Age=7200; path=/; samesite=lax
linkcurto_session=eyJpdiI6IjJJZ2RJMmtqY0VseVVQSUt1MEVsaUE9PSIsInZhbHVlIjoiZkF1SFhxTFY0MzM0cVJPeWIrcFN0SmJNVkRxM1JRZHZNVW5NRkRhOCt6OWMwcHAwSkhKVkRPbk4xL3hZUE5RRGpFUnN5L3RtMmRpTCtqeDVxaWdZb2RxeWdZZEc2NU4wUXpOczdQamtnMytGQmRmVVBZejJObDQ3akVQSEk0RUwiLCJtYWMiOiJhOGJmOWQ3YjJiNzRhZmIxNzVhYmFjOTgzODc2MDE2NjBhMGU0MWE1YzhhZWQxM2ZlODE3MmMxYmEyN2M1Mzk4In0%3D; expires=Tue, 08-Nov-2022 08:55:15 GMT; Max-Age=7200; path=/; httponly; samesite=lax
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tg1fF%2BJivtozGV%2FgARWpT5%2BBObK4%2FyyPg8L78GQ9aIp0PIcyBVDa3ObLADcQpvCfCvTUjy3o%2BvAuyzndVBOml3P9yHiXluRRZ3utEo6yNYYeAFTq7lFpdRWPvh8Iy%2F0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 766c66e729d30b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fff802202-24f1-4a0e-a772-7eb845e5afd6.webp | 34.120.237.76 | 200 OK | 3.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fff802202-24f1-4a0e-a772-7eb845e5afd6.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash889ad23c83914b0c4ece74ac23c5089a cb3e3135ab5744389231c9d2601765803f560017 257685b33ec5195f3ab99466dfb45adfa612872711f7d92e8441f7d2d06a7e1b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fff802202-24f1-4a0e-a772-7eb845e5afd6.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3914
x-amzn-requestid: 6c3e2774-e55a-453a-bd01-fc4aeb3679e2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bKLHKE_ToAMFfOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63672560-3a205de84cb3382f15ee30bc;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 03:09:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: vU8Y2Ud9wK8OemuUyAknpiT9iBDawRppZ2LaSYCvT9Wj5zhdTMitmA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Tue, 08 Nov 2022 04:25:40 GMT
age: 8977
etag: "cb3e3135ab5744389231c9d2601765803f560017"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a2bb539-06cb-47fd-8d3c-7043929bfeaa.jpeg | 34.120.237.76 | 200 OK | 9.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a2bb539-06cb-47fd-8d3c-7043929bfeaa.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash71473fb15e07b9c973e7368bdd2c2eb7 e5e369ed7b77ff7639bffc16da2f2ca6c035421c a7e72e22f9d0204e2be1f21fe1c66c8469c5b14ef3b4c64f3cf2335ba5365618
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a2bb539-06cb-47fd-8d3c-7043929bfeaa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9336
x-amzn-requestid: fb33f029-9d6c-40df-aab2-bdb139d8dedb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAKOGdEIAMFujA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697a41-53c235ce324b4e896b401a40;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wiVqhBy98fSb32WK61Z0nQQH1XMnTnD-XPqmNZkCYqnvMY7dzsSudw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:40:30 GMT
age: 33287
etag: "e5e369ed7b77ff7639bffc16da2f2ca6c035421c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3564993-11e9-4914-840f-9a1b924c950a.jpeg | 34.120.237.76 | 200 OK | 4.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3564993-11e9-4914-840f-9a1b924c950a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7884b85a4b30e918a0b44f73a301a78b f7ae1b83a0199b76dd0d31a21db4072b867e4f37 9576f9ad95c958887de953dee72b267cd0ed7293ed62fb540df76a2d49fac035
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3564993-11e9-4914-840f-9a1b924c950a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4527
x-amzn-requestid: c3be9447-c43a-48d6-9aef-c0999742886c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQA1GFN5IAMFaRw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697b53-3bb315de52dcf6114da9ad05;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:40:35 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: _nFA59k8ERwiA6Ct_pZJs0WkFuagosyyiOkeQc1PuWMcno-Lpz4UfA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 22:01:04 GMT
age: 32053
etag: "f7ae1b83a0199b76dd0d31a21db4072b867e4f37"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg | 34.120.237.76 | 200 OK | 4.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash39446652ee66d20bd73df20f1a29589c 349ea78f3ad0f2f7376ba22e417226b2e06806d7 655a00944a319ba167e99b43055044cb18bc48d53605ff0d1b6c8b1ba8ee8237
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4737
x-amzn-requestid: ad230e08-9f4e-46cf-9a86-f8e013a1c498
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQBFkEhLIAMFq_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697bbd-7e8b686a23a84c5d473c9ef5;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:42:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FoOPmZEjC6nhw801dgqENVL-9-aC0pyFAF-fMS57XzQyfxck2GGUvA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:55:45 GMT
age: 32372
etag: "349ea78f3ad0f2f7376ba22e417226b2e06806d7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4e2853cc6ec6223160471401e6871f4b f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 6dc7dc5c-88e9-4550-abf0-f16965ab7cd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bF_38GKXoAMFwSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636579cc-28ea4125437c31cc34683fb7;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 20:45:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q0yZmbExDP4tH0n1n2qj_NR2Mv_y_dsO0LJ1RKZoS6Me-NLbhpUWqw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 09:11:38 GMT
age: 78219
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash3549d49ec9ef3b66f2f3da1f6172ef93 54fa67ac88099ed2d4cdf7e24c8b301c7a098d0b 0af6a29f343dcbc612e18ab821ae8555975e27c363d72205366a3c5bb85b7211
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash96791bd486db22c41012d25318835bdf b32c813f16b84a6b2660bd527843da5e368af8eb 61a4589c35910af9f8d20ff0c7eca296a77a336ab00730573fe9ce7cf2cc72c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/recaptcha/api.js?render=6LdxeuoUAAAAAP6iiKD6JZKojOflG8Z_w0Ebx6LC | 142.250.74.164 | 200 OK | 586 B |
URL HTTP/2www.google.com/recaptcha/api.js?render=6LdxeuoUAAAAAP6iiKD6JZKojOflG8Z_w0Ebx6LC IP142.250.74.164:0
File typeASCII text, with very long lines (884), with no line terminators Hashd99d9b30939eb9febd57937df91db1b0 88a3fa999d4361ab21bfd2d9dd17790b8f994907 f3644a850aba122a325057e65b625086f69525108721ce715aad775d9c285f05
GET /recaptcha/api.js?render=6LdxeuoUAAAAAP6iiKD6JZKojOflG8Z_w0Ebx6LC HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Tue, 08 Nov 2022 06:55:19 GMT
date: Tue, 08 Nov 2022 06:55:19 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 586
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hasha73cbb0206a91486357d82a803410ddc add0c392d9ccae550244530404055781df826883 4b0459c7289fcc9c4dec7a4f7414bc771c1134cf0434e9a0faa75dcc0aa16655
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 811
Cache-Control: max-age=164205
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:19 GMT
Etag: "6369d899-116"
Expires: Thu, 10 Nov 2022 04:32:04 GMT
Last-Modified: Tue, 08 Nov 2022 04:18:33 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash281d92c0a63ce7483719c9bd9abda0c6 1802ce687123ebb0546ce7d228a993011eaaa6d2 b3b219ad97a0e050bb45b8302ec0c5f3a0a27901e05e6302eea6a1a08d3b8d0b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B3B219AD97A0E050BB45B8302EC0C5F3A0A27901E05E6302EEA6A1A08D3B8D0B"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9850
Expires: Tue, 08 Nov 2022 09:39:29 GMT
Date: Tue, 08 Nov 2022 06:55:19 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hasha73cbb0206a91486357d82a803410ddc add0c392d9ccae550244530404055781df826883 4b0459c7289fcc9c4dec7a4f7414bc771c1134cf0434e9a0faa75dcc0aa16655
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4199
Cache-Control: max-age=167593
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:19 GMT
Etag: "6369d899-116"
Expires: Thu, 10 Nov 2022 05:28:32 GMT
Last-Modified: Tue, 08 Nov 2022 04:18:33 GMT
Server: ECS (amb/6B82)
X-Cache: HIT
Content-Length: 278
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hasha7716aa517da11ab22a8212c5f2bb088 4e48490692b535f656926911b5928046ba65435d 4aa19446a5a4794ab5544278f778610730b8dd2390171ad8800d5219a32b160d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=116253
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:19 GMT
Etag: "63692074-117"
Expires: Wed, 09 Nov 2022 15:12:52 GMT
Last-Modified: Mon, 07 Nov 2022 15:12:52 GMT
Server: nginx
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hasha73cbb0206a91486357d82a803410ddc add0c392d9ccae550244530404055781df826883 4b0459c7289fcc9c4dec7a4f7414bc771c1134cf0434e9a0faa75dcc0aa16655
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 811
Cache-Control: max-age=164205
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:19 GMT
Etag: "6369d899-116"
Expires: Thu, 10 Nov 2022 04:32:04 GMT
Last-Modified: Tue, 08 Nov 2022 04:18:33 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash6e8ee97ec58f7d2991905f88bd3a463f b87a69e7b938d01a4ac7d74ec69bffb4051695f0 1fe031e258c6a541e040de89c4ebcdfd9ddf78d391f77e858b44aef18469373d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hasha73cbb0206a91486357d82a803410ddc add0c392d9ccae550244530404055781df826883 4b0459c7289fcc9c4dec7a4f7414bc771c1134cf0434e9a0faa75dcc0aa16655
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=163394
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:19 GMT
Etag: "6369d899-116"
Expires: Thu, 10 Nov 2022 04:18:33 GMT
Last-Modified: Tue, 08 Nov 2022 04:18:33 GMT
Server: nginx
Content-Length: 278
|
|
| ocsp.pki.goog/s/gts1d4/T24lFG9LNcQ | 142.250.74.35 | 200 OK | 471 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1d4/T24lFG9LNcQ IP142.250.74.35:0
Hash514e727692bd00cb2c7cc1d865f73100 d49cee12f427784ece42cd1aecfacbb003a05e7b f9c6334ae2224518006092c012ac1ced0c5f94ab430a6c95235b052346ba3c78
POST /s/gts1d4/T24lFG9LNcQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:19 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hasha73cbb0206a91486357d82a803410ddc add0c392d9ccae550244530404055781df826883 4b0459c7289fcc9c4dec7a4f7414bc771c1134cf0434e9a0faa75dcc0aa16655
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=163394
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:19 GMT
Etag: "6369d899-116"
Expires: Thu, 10 Nov 2022 04:18:33 GMT
Last-Modified: Tue, 08 Nov 2022 04:18:33 GMT
Server: nginx
Content-Length: 278
|
|
| seguro.lojasacolazul.com.br/checkout/address |  170.82.174.30 | 200 OK | 51 kB |
URL HTTP/2seguro.lojasacolazul.com.br/checkout/address IP170.82.174.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
Hash2550463222da8e4c78a8e2e24d049a84 0fa4df6441aff3ceee7523fc7de70f8f079e3ff4 96bac93717510c21fcc0cd3127d039a29a295e16d0757e9452241ed25f0ec9b9
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /checkout/address HTTP/1.1
Host: seguro.lojasacolazul.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Im9ybnp5ekpVNTV5NTZWMFoxdVwvcCtRPT0iLCJ2YWx1ZSI6IkFmMys3eDgxQWhcL01ZRVBxMldIK2xYa1ZUbDdmVHpqN09GMkZPTVNRRDZOWkdTRWRmbjZZa2kwSG8xK29nZnE5S2dYM3hHVVpWRk9sVnRlaDBueHpWQT09IiwibWFjIjoiZDg2ZTZlODNiZWVhYjY3MDQ0MzMxNmRmNjdkNzhkNGJjOGFmYzYxNGQ2MzYwNGY5NGEwNWMxNTVkZjRlYjUyNiJ9; bubbstore_checkout=eyJpdiI6IktGRFlmTFpVYXNybmkrZXYxWEhlXC9BPT0iLCJ2YWx1ZSI6ImhodUNsQ3g1MVRSRnhLYURDU1YwMm5Takk5NWhGd2RMTFZPbDRROUNuM1dvVGZRMmVpbUtMcUJpdXpaYVBlSHg3eFwvV0FEOXg3aWhJODU3ekRMbkFvUT09IiwibWFjIjoiZDQ1YWYxZTg2NTgzNDg0ZDc1MjkxMDdlZjdhNzYyYWEwMjZjODc2NTkwYmVmZGM0ZjBiZTQ2NTI2NjBlMGYwMiJ9; storeamigocanino_cart=eyJpdiI6IlByYUprZ0duOGtVKytMZk4yWnIybWc9PSIsInZhbHVlIjoiZ3F1SUhZdVlCSVBUK0dEMllTMmtqbWhpbFBJMHRxXC9BY2NXK1hOS1ppQlphXC9oT2lVVzB2MFQ3eGFVQmR2YWErSFN1MFZraW1ORmFXWjg4ejdNS0FDUT09IiwibWFjIjoiNTNkMTEzMThjMGI2ZmRkNWU5NWQwODM4MjVjZTYxMzlkZDQ4MDc2ZWUxNGIwMGNhYWE3NjJmZDYyNDE2NzBmOCJ9
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 06:55:19 GMT
content-type: text/html; charset=UTF-8
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6ImtHUmdoOFdGS0dQSUhBVnFTSkcwUkE9PSIsInZhbHVlIjoiSjZVMlJsQXkyMG5NZldDNTFOZzhMZWRUaW9qRU9rQ1JrbTFzU3RKUnpyZFNlQWcwbXlCVnRhckJGd1U4d2FiRGxEcEhYYzQ1cWV1QWw4ZHpRUmsxdFE9PSIsIm1hYyI6IjUzODQ0YjQ4MWU0OTM0ZDRmMmY1MDM5OTRjMDVmODE0Yzk1ODYzMTUxYzhkODVlZjMyYjcwOThmYjk1ZWRjODkifQ%3D%3D; expires=Tue, 08-Nov-2022 09:55:19 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6IjBOa25yU09FYVhGcEx1Y0JnbTRcL0RBPT0iLCJ2YWx1ZSI6ImFEU3dZUmxnM3l1RXdzMlwvYnUyOWFyMWZyZU1IUWRFTmNxR1JJeDZIckk3bHBLOHZUWXJpNysyZGNTeWsxaVAyXC9Db0pXVFlnSGhQalwvVlhRS0NFOGZRPT0iLCJtYWMiOiJmMGQ4NDExNTVhOWJjMTdkMTFmNmQyMTMyNGZlMzJmNjNjMWI0NzRjNWQ3OWQ3MGVjMjk2OTJkMDVjNDI0OWJjIn0%3D; expires=Tue, 08-Nov-2022 09:55:19 GMT; Max-Age=10800; path=/; httponly
cart_auth_275428847=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; expires=Tue, 08-Nov-2022 07:05:19 GMT; Max-Age=600; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash281d92c0a63ce7483719c9bd9abda0c6 1802ce687123ebb0546ce7d228a993011eaaa6d2 b3b219ad97a0e050bb45b8302ec0c5f3a0a27901e05e6302eea6a1a08d3b8d0b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B3B219AD97A0E050BB45B8302EC0C5F3A0A27901E05E6302EEA6A1A08D3B8D0B"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9849
Expires: Tue, 08 Nov 2022 09:39:29 GMT
Date: Tue, 08 Nov 2022 06:55:20 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/s/gts1d4/T24lFG9LNcQ | 142.250.74.35 | 200 OK | 471 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1d4/T24lFG9LNcQ IP142.250.74.35:0
Hash514e727692bd00cb2c7cc1d865f73100 d49cee12f427784ece42cd1aecfacbb003a05e7b f9c6334ae2224518006092c012ac1ced0c5f94ab430a6c95235b052346ba3c78
POST /s/gts1d4/T24lFG9LNcQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| images.yampi.me/assets/stores/storeamigocanino/uploads/testimonies/60ef570aa0049.png | 104.26.3.88 | 200 OK | 6.8 kB |
URL HTTP/2images.yampi.me/assets/stores/storeamigocanino/uploads/testimonies/60ef570aa0049.png IP104.26.3.88:0
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data Hash8f3791c8afcf903f973123bebcbb4df5 ab203e222e490b5190f60f7ccd183fb05559614b 360d581e73bf54f316310352baf8731ceae06221c7a71fced7570bb72a61fc06
GET /assets/stores/storeamigocanino/uploads/testimonies/60ef570aa0049.png HTTP/1.1
Host: images.yampi.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 06:55:20 GMT
content-type: image/png
content-length: 6849
x-amz-id-2: 1Wz18Hf1u94rkFkUyW0CdGrK68gueAswxUHwEoQvwHBvOj9jHODAWS3o6kjZU3cGMyK8xyF45KE=
x-amz-request-id: YTAMCPBVQ1PKD0N3
last-modified: Wed, 21 Jul 2021 21:47:00 GMT
x-amz-version-id: TNdYAhd9H.G.uSmJEQxPKNXDHsLIa1np
etag: "8f3791c8afcf903f973123bebcbb4df5"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zvYqsZbC0f11g4L7f6fOE8vk7cbhDo5Mvjnt%2Fnf7Njm0AeH1qKHNDC99ZplvGFIplwfxeBzuhhE97DFjnSjGBxYSCtNfcqei0xX%2B%2F4bUiEvnQNq%2BCcqUu8Z6cSWH05A55w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 766c6704cf691c12-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| images.yampi.me/assets/stores/storeamigocanino/uploads/testimonies/60ef578b5b385.png | 104.26.3.88 | 200 OK | 4.1 kB |
URL HTTP/2images.yampi.me/assets/stores/storeamigocanino/uploads/testimonies/60ef578b5b385.png IP104.26.3.88:0
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data Hash08c95c5d8cdd8198da019526cbb9721f 6a44266ac0265c3f8161327ea88ceea240c067bb f17c93ef73aa7634ea546aa9922e7c740164013c4ee270a62b688cd061643a45
GET /assets/stores/storeamigocanino/uploads/testimonies/60ef578b5b385.png HTTP/1.1
Host: images.yampi.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 06:55:20 GMT
content-type: image/png
content-length: 4074
x-amz-id-2: Z/FW+xfJFtiLa6lNo0MO3AL4QZBghM4ZoSA9j6YS25WrW5+E13sj7F5q4Uu6D0ZzJ2teULr4UUY=
x-amz-request-id: YTANVFYB5KN00NNH
last-modified: Wed, 21 Jul 2021 21:47:00 GMT
x-amz-version-id: f0WqkcTHQAt2CWOZNXtu6MdwDRvxqhpz
etag: "08c95c5d8cdd8198da019526cbb9721f"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=No6irjBHhTMf9ErXB9AdF70DdjnMuL874SY%2FXxDhItKvjJuendKpixfi6eTsVC1bV7i9bISeu6J%2FU44lIJImvfGCFQIIFAPSzseXOEnnshWaipnMiRfyAWzeynrKpfSOZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 766c6704cf681c12-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash03fc468285706210a3ce339d5a223c61 fd32b7fa20b5c53cc2aebc09a3defe4c890f61be 9401d1803a9bac1dd2297405f8cf32dffdc375912ccc1c7bcf884f59a0ed64ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash03fc468285706210a3ce339d5a223c61 fd32b7fa20b5c53cc2aebc09a3defe4c890f61be 9401d1803a9bac1dd2297405f8cf32dffdc375912ccc1c7bcf884f59a0ed64ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2 | 216.58.207.195 | 200 OK | 34 kB |
URL HTTP/2fonts.gstatic.com/s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 33580, version 1.0\012- data Hash848cd2ecd011428969dc6b90431bc482 6b1a7b562a56bd54510e0f6f95e26babca331a1b 981307dcbbd348f6fb4e3eab184077392f9ee15097ea868f630debefad9044e9
GET /s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://seguro.lojasacolazul.com.br
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Nov 2022 21:38:57 GMT
expires: Fri, 03 Nov 2023 21:38:57 GMT
cache-control: public, max-age=31536000
age: 378983
last-modified: Mon, 18 Jul 2022 19:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe9d2747e329c82a9982ef8b376e5983b 58a54b2bc320b07240fb60a8debe63cf80316413 a851ea600ddc70a9440d80e13daa453e126457007cecb115e36790b89f5d0223
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A851EA600DDC70A9440D80E13DAA453E126457007CECB115E36790B89F5D0223"
Last-Modified: Sat, 05 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5107
Expires: Tue, 08 Nov 2022 08:20:27 GMT
Date: Tue, 08 Nov 2022 06:55:20 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe9d2747e329c82a9982ef8b376e5983b 58a54b2bc320b07240fb60a8debe63cf80316413 a851ea600ddc70a9440d80e13daa453e126457007cecb115e36790b89f5d0223
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A851EA600DDC70A9440D80E13DAA453E126457007CECB115E36790B89F5D0223"
Last-Modified: Sat, 05 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5107
Expires: Tue, 08 Nov 2022 08:20:27 GMT
Date: Tue, 08 Nov 2022 06:55:20 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash03fc468285706210a3ce339d5a223c61 fd32b7fa20b5c53cc2aebc09a3defe4c890f61be 9401d1803a9bac1dd2297405f8cf32dffdc375912ccc1c7bcf884f59a0ed64ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| rawartsites.neocities.org/img/Yampi/PNG/cards.png | 198.51.233.2 | 200 OK | 17 kB |
URL HTTP/2rawartsites.neocities.org/img/Yampi/PNG/cards.png IP198.51.233.2:0
File typePNG image data, 550 x 79, 8-bit/color RGBA, non-interlaced\012- data Hash0543bc152c1d671b172c669ac4ad567c 74ebc201c113fea327d5283367e94fd31c4e7cdf bb251e481ffcb42fd58ecb6e04d4388471bafac9b3a01c448a0674307b11d6a2
GET /img/Yampi/PNG/cards.png HTTP/1.1
Host: rawartsites.neocities.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 06:55:20 GMT
content-type: image/png
content-length: 16901
last-modified: Thu, 19 May 2022 18:16:04 GMT
etag: "62868964-4205"
server: neocities
x-ipfs-path: /ipns/rawartsites.neocities.org
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
content-security-policy: upgrade-insecure-requests; default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: *
x-neocities-cdn: cdn-fra
upgrade-insecure-requests: 1
x-cached: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.110 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.110:0
Hashae9796971c80290ede9ef87b2259c2f5 65b4541b2200fd50b6c1dbdb657086b20c4aef17 799ec50ee7108811f5680dc11e42916eb03fa750ba39f303526804091253c4cd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=137069
Date: Tue, 08 Nov 2022 06:55:20 GMT
Etag: "6369627d-1d7"
Expires: Wed, 09 Nov 2022 20:59:49 GMT
Last-Modified: Mon, 07 Nov 2022 19:54:37 GMT
Server: ECS (nyb/1D1D)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: rvPQOi29_LNvV6Uc11VrqiMH_vfuynURJGWXJ9oFSnyjkQ2i-ED0Jw==
Age: 3912
|
|
| s3.sa-east-1.amazonaws.com/king-assets.yampi.me/dooki/62e56d851091b/62e56d851091e.png | 52.95.165.58 | 200 OK | 6.6 kB |
URL HTTP/1.1s3.sa-east-1.amazonaws.com/king-assets.yampi.me/dooki/62e56d851091b/62e56d851091e.png IP52.95.165.58:0
File typePNG image data, 300 x 90, 8-bit/color RGBA, non-interlaced\012- data Hashd8ee34489e4721bf2227dc744063ddd0 7294ad4f18212697ea5fc73dd41beb3ef24d0318 140309c28e57ad8a43689700035ba7faed9eb63e2e81390ee3432a96ded546d2
GET /king-assets.yampi.me/dooki/62e56d851091b/62e56d851091e.png HTTP/1.1
Host: s3.sa-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: fPaNWR+XCCE4Ima/Z5mrKYmGJy+sEPe11LewyNXTjKQuJuUuaQ0FSkSiJxwrthcX3preRuSSsjs=
x-amz-request-id: FYKNQGJ0745BEABT
Date: Tue, 08 Nov 2022 06:55:21 GMT
Last-Modified: Sat, 30 Jul 2022 17:42:30 GMT
ETag: "d8ee34489e4721bf2227dc744063ddd0"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 6551
|
|
| fonts.dooki.com.br/fa/4.7.0/fa.woff2?v=4.7.0 | 104.18.0.53 | 200 OK | 77 kB |
URL HTTP/2fonts.dooki.com.br/fa/4.7.0/fa.woff2?v=4.7.0 IP104.18.0.53:0
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /fa/4.7.0/fa.woff2?v=4.7.0 HTTP/1.1
Host: fonts.dooki.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://seguro.lojasacolazul.com.br
Connection: keep-alive
Referer: https://fonts.dooki.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 06:55:20 GMT
content-type: binary/octet-stream
content-length: 77160
x-amz-id-2: kPclMnbrrVkgu/DIcTXCyfpQEASAyLIKuIiWAEhllBU1MdQX5h9gB/LmWy7x5i/vVn1UBq99U98=
x-amz-request-id: FYKPPP27QGZTB3D0
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 1800
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Sat, 10 Nov 2018 14:21:40 GMT
x-amz-version-id: null
etag: "af7ae505a9eed503f8b8e6982036873e"
cf-cache-status: MISS
expires: Wed, 16 Nov 2022 06:55:20 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 766c67068923fac4-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 2.3 kB |
IP93.184.220.29:0
Hash551d8fd9179382b1e0add8e8fd65911a 528f6ef914c0c915b9afd76b15395c42c74cba51 f54427a4b01d8a566a7201f1274fa464badadbb4bfe8f030dc61c3b3fc93f669
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3290
Cache-Control: max-age=87886
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:21 GMT
Etag: "6368a4cd-1d7"
Expires: Wed, 09 Nov 2022 07:20:07 GMT
Last-Modified: Mon, 07 Nov 2022 06:25:17 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashd6dbaa7f1a697305cfaabdc859cdb9d3 680fa363852fb33b9b76b83d3ba5c0a4c51499cb 2ccc20d4d484d91da7e9fb07056d62a620af07b21f495be49f54e7e83c988dda
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| connect.facebook.net/en_US/fbevents.js |  31.13.72.12 | 200 OK | 27 kB |
URL HTTP/2connect.facebook.net/en_US/fbevents.js IP31.13.72.12:0
File typeASCII text, with very long lines (64348) Hash0ac10debd3a9ea8147a26d045bb93e6e ff45f3442508e8695f2303701682ebdb6e016464 5dee7b453b2c72c07ff1d62432493a044507835a8031ea62edf2fa7cc26219b9
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: TDABPFcU6+m9msuabzmuxTYs2zbpH0Wpaj0qAHyjnVhqTnG7yUndoSn1KYrAFxxt44f4477SpnCIdgkQMXDmSA==
content-length: 27337
x-fb-trip-id: 2074150462
date: Tue, 08 Nov 2022 06:55:21 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/Ixi5IiChXmIG6rRkjUa1qXHT/recaptcha__en.js | 142.250.74.163 | 200 OK | 162 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/Ixi5IiChXmIG6rRkjUa1qXHT/recaptcha__en.js IP142.250.74.163:0
File typeASCII text, with very long lines (590) Size162 kB (162282 bytes) Hash05e06c50dab6f3d7f8bfde22301888db 64b3c20c788d298a672fabf9627eac914d95ed08 95176711feca1110e764a31e36764d5b331b033ed56fb372b42250329b33e1d6
GET /recaptcha/releases/Ixi5IiChXmIG6rRkjUa1qXHT/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seguro.lojasacolazul.com.br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162282
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 07 Nov 2022 15:58:35 GMT
expires: Tue, 07 Nov 2023 15:58:35 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 31 Oct 2022 04:02:45 GMT
content-type: text/javascript
age: 53806
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 08 Nov 2022 06:41:09 GMT
expires: Tue, 08 Nov 2022 08:41:09 GMT
cache-control: public, max-age=7200
age: 852
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashd6dbaa7f1a697305cfaabdc859cdb9d3 680fa363852fb33b9b76b83d3ba5c0a4c51499cb 2ccc20d4d484d91da7e9fb07056d62a620af07b21f495be49f54e7e83c988dda
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hasha9374206851834987bb6f42fdbde6965 1e7632ba7b83a2258cb88662d2fb2783d400dec3 854af7f8daaf516b72c709bf1c9e6ba2637431efac48d977c520440cb3b99dca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-45745009-5&cid=1505716726.1667890519&jid=1604211456&gjid=1782844561&_gid=20764691.1667890519&_u=IEHAAEATAAAAACAAI~&z=188942374 | 64.233.165.154 | 200 OK | 1 B |
URL HTTP/2stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-45745009-5&cid=1505716726.1667890519&jid=1604211456&gjid=1782844561&_gid=20764691.1667890519&_u=IEHAAEATAAAAACAAI~&z=188942374 IP64.233.165.154:0
File typevery short file (no magic) Hashc4ca4238a0b923820dcc509a6f75849b 356a192b7913b04c54574d18c28d46e6395428ab 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-45745009-5&cid=1505716726.1667890519&jid=1604211456&gjid=1782844561&_gid=20764691.1667890519&_u=IEHAAEATAAAAACAAI~&z=188942374 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://seguro.lojasacolazul.com.br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://seguro.lojasacolazul.com.br
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 08 Nov 2022 06:55:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hasha9374206851834987bb6f42fdbde6965 1e7632ba7b83a2258cb88662d2fb2783d400dec3 854af7f8daaf516b72c709bf1c9e6ba2637431efac48d977c520440cb3b99dca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 08 Nov 2022 06:55:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| s3.sa-east-1.amazonaws.com/king-assets.yampi.me/dooki/6363029de551e/6363029de5523.png | 52.95.165.58 | 200 OK | 74 kB |
URL HTTP/1.1s3.sa-east-1.amazonaws.com/king-assets.yampi.me/dooki/6363029de551e/6363029de5523.png IP52.95.165.58:0
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data Hash2a7099a5254bd5acf1ab9174bbf55139 2e46f24bfc0f8e8eaebacf1b35bfcff762ba96f1 37d406753447555c433ef581a27d80e223208e6c4a8517611e31c5e7c2ce4718
GET /king-assets.yampi.me/dooki/6363029de551e/6363029de5523.png HTTP/1.1
Host: s3.sa-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 7iqFClcLXaCCzd2gYL1oaTTQckv1aPv/+U/jwZkgIgYjwc5OTq+4WjZknTKYV++0mGrXKaa8to8=
x-amz-request-id: VCJ6KZSZT1V5ECDP
Date: Tue, 08 Nov 2022 06:55:22 GMT
Last-Modified: Wed, 02 Nov 2022 23:51:58 GMT
ETag: "2a7099a5254bd5acf1ab9174bbf55139"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 74450
|
|
| www.facebook.com/tr/?id=875327580122575&ev=PageView&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519647&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=PageView_6lzrg9qj2&rqm=GET | 31.13.72.36 | 200 OK | 0 B |
URL HTTP/2www.facebook.com/tr/?id=875327580122575&ev=PageView&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519647&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=PageView_6lzrg9qj2&rqm=GET IP31.13.72.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=875327580122575&ev=PageView&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519647&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=PageView_6lzrg9qj2&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 08 Nov 2022 06:55:22 GMT
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=806344003871027&ev=PageView&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519644&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=PageView_6lzrg9qj2&rqm=GET | 31.13.72.36 | 200 OK | 86 kB |
URL HTTP/2www.facebook.com/tr/?id=806344003871027&ev=PageView&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519644&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=PageView_6lzrg9qj2&rqm=GET IP31.13.72.36:0
File typegzip compressed data, from Unix\012- data Hasha1c0bccd34b326f01cb255874129132c 3483e8769bca54ab24cca11e4de3f79e003d5775 b1dd37bf9567b64648052907bb1f0c23652cd3465864a1ca1d16d05a8d35017e
GET /tr/?id=806344003871027&ev=PageView&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519644&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=PageView_6lzrg9qj2&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 08 Nov 2022 06:55:22 GMT
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=877190239879362&ev=PageView&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519640&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=PageView_6lzrg9qj2&exp=d0&rqm=GET | 31.13.72.36 | 200 OK | 0 B |
URL HTTP/2www.facebook.com/tr/?id=877190239879362&ev=PageView&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519640&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=PageView_6lzrg9qj2&exp=d0&rqm=GET IP31.13.72.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=877190239879362&ev=PageView&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519640&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=PageView_6lzrg9qj2&exp=d0&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 08 Nov 2022 06:55:22 GMT
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=877190239879362&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519649&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=InitiateCheckout_gl3i5cy4h&tm=1&rqm=GET | 31.13.72.36 | 200 OK | 0 B |
URL HTTP/2www.facebook.com/tr/?id=877190239879362&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519649&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=InitiateCheckout_gl3i5cy4h&tm=1&rqm=GET IP31.13.72.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=877190239879362&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519649&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=InitiateCheckout_gl3i5cy4h&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 08 Nov 2022 06:55:22 GMT
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=806344003871027&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519651&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=InitiateCheckout_4duud1ial&tm=1&rqm=GET | 31.13.72.36 | 200 OK | 0 B |
URL HTTP/2www.facebook.com/tr/?id=806344003871027&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519651&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=InitiateCheckout_4duud1ial&tm=1&rqm=GET IP31.13.72.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=806344003871027&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519651&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=InitiateCheckout_4duud1ial&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 08 Nov 2022 06:55:22 GMT
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=875327580122575&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519653&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=InitiateCheckout_w0zmtrgbe&tm=1&rqm=GET | 31.13.72.36 | 200 OK | 0 B |
URL HTTP/2www.facebook.com/tr/?id=875327580122575&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519653&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=InitiateCheckout_w0zmtrgbe&tm=1&rqm=GET IP31.13.72.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=875327580122575&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.lojasacolazul.com.br%2Fcheckout%2Faddress&rl=&if=false&ts=1667890519653&cd[content_ids]=%5B%227077438685393%22%5D&cd[content_type]=product_group&cd[value]=129.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.89&r=stable&ec=1&o=29&fbp=fb.2.1667890519639.2133078558&it=1667890518535&coo=false&eid=InitiateCheckout_w0zmtrgbe&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 08 Nov 2022 06:55:22 GMT
X-Firefox-Spdy: h2
|
|
| cdn.shopify.com/s/files/1/0585/3924/5777/products/Capturadetela2022-09-29125000_250x250.png | 162.159.134.68 | 404 Not Found | 0 B |
URL HTTP/2cdn.shopify.com/s/files/1/0585/3924/5777/products/Capturadetela2022-09-29125000_250x250.png IP162.159.134.68:0
GET /s/files/1/0585/3924/5777/products/Capturadetela2022-09-29125000_250x250.png HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Tue, 08 Nov 2022 06:55:20 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=30
server-timing: imagery;dur=19.260, imageryFetch;dur=19.038
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 3f982045-dc6e-4f8a-9667-c0cd301dd7e3
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-central1
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ed5XSt3W5BDK859wuCqbRt42sH0h2rjysV2nVKOyLiUzn3p3v%2BdSkpFbCJR4sia1WIUc1IMUus1AJEeRPX4XEvC3mIpnShjEDGtoSnPUuG6wGtFL%2Bj0rxGnLIKBTQuDmnA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 766c6704df2e1c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.dooki.com.br/fa/4.7.0/fa.css | 104.18.0.53 | 200 OK | 0 B |
URL HTTP/2fonts.dooki.com.br/fa/4.7.0/fa.css IP104.18.0.53:0
GET /fa/4.7.0/fa.css HTTP/1.1
Host: fonts.dooki.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 06:55:19 GMT
content-type: text/css
x-amz-id-2: gGNPVnAVZsqONOCg389UDgsIhA1ObjBdpsJMkqSZGddyTo93S8XPm4wvAm36dYfVkX+Cf24ZYFI=
x-amz-request-id: G8BNNJCT1K1R1RT8
last-modified: Sat, 10 Nov 2018 14:21:37 GMT
x-amz-version-id: null
etag: W/"36688de682a76454417c56541b1cf51e"
cf-cache-status: HIT
age: 4201
expires: Wed, 16 Nov 2022 06:55:19 GMT
cache-control: public, max-age=691200
vary: Accept-Encoding
server: cloudflare
cf-ray: 766c67050f7d0b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.yampi.io/ana/ana.min.js?t=1667952000000 | 104.18.15.227 | 200 OK | 0 B |
URL HTTP/2cdn.yampi.io/ana/ana.min.js?t=1667952000000 IP104.18.15.227:0
GET /ana/ana.min.js?t=1667952000000 HTTP/1.1
Host: cdn.yampi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 06:55:20 GMT
content-type: application/javascript
x-amz-id-2: L9dVYcAxBPbSwN2wjMDdtLFwZaXyUDjGycma7taHbcOgSnulwTzWhONKlIOyWLFyyH3bBlSjwJc=
x-amz-request-id: 231M3Z0AG1RPQ22C
last-modified: Sun, 26 Jun 2022 23:28:17 GMT
x-amz-version-id: QVByH4DoJS5uOcK0PZ6NhcCV1oJEdR5U
etag: W/"e7cabc20ce5d56c20d8c4577a36e2525"
cf-cache-status: HIT
age: 4201
expires: Wed, 08 Nov 2023 06:55:20 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 766c67065c720b49-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| seguro.lojasacolazul.com.br/e/t | 170.82.174.30 | 200 OK | 0 B |
URL HTTP/2seguro.lojasacolazul.com.br/e/t IP170.82.174.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
POST /e/t HTTP/1.1
Host: seguro.lojasacolazul.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg8EVFRXARAJVldbDwQGVVU=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI5MzUyNDkiLCJhcCI6IjExMzQxNzA4MjMiLCJpZCI6ImMwMDg5MTc4M2I3ZTg3NTYiLCJ0ciI6IjIwN2FkNzE1Njk2NjdlNDZiZGVkZjMyMTM2Mjg1NjNlIiwidGkiOjE2Njc4OTA1MTczNzV9fQ==
traceparent: 00-207ad71569667e46bdedf3213628563e-c00891783b7e8756-01
tracestate: 2935249@nr=0-1-2935249-1134170823-c00891783b7e8756----1667890517375
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 357
Origin: https://seguro.lojasacolazul.com.br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/checkout/address
Cookie: XSRF-TOKEN=eyJpdiI6ImtHUmdoOFdGS0dQSUhBVnFTSkcwUkE9PSIsInZhbHVlIjoiSjZVMlJsQXkyMG5NZldDNTFOZzhMZWRUaW9qRU9rQ1JrbTFzU3RKUnpyZFNlQWcwbXlCVnRhckJGd1U4d2FiRGxEcEhYYzQ1cWV1QWw4ZHpRUmsxdFE9PSIsIm1hYyI6IjUzODQ0YjQ4MWU0OTM0ZDRmMmY1MDM5OTRjMDVmODE0Yzk1ODYzMTUxYzhkODVlZjMyYjcwOThmYjk1ZWRjODkifQ%3D%3D; bubbstore_checkout=eyJpdiI6IjBOa25yU09FYVhGcEx1Y0JnbTRcL0RBPT0iLCJ2YWx1ZSI6ImFEU3dZUmxnM3l1RXdzMlwvYnUyOWFyMWZyZU1IUWRFTmNxR1JJeDZIckk3bHBLOHZUWXJpNysyZGNTeWsxaVAyXC9Db0pXVFlnSGhQalwvVlhRS0NFOGZRPT0iLCJtYWMiOiJmMGQ4NDExNTVhOWJjMTdkMTFmNmQyMTMyNGZlMzJmNjNjMWI0NzRjNWQ3OWQ3MGVjMjk2OTJkMDVjNDI0OWJjIn0%3D; storeamigocanino_cart=eyJpdiI6IlByYUprZ0duOGtVKytMZk4yWnIybWc9PSIsInZhbHVlIjoiZ3F1SUhZdVlCSVBUK0dEMllTMmtqbWhpbFBJMHRxXC9BY2NXK1hOS1ppQlphXC9oT2lVVzB2MFQ3eGFVQmR2YWErSFN1MFZraW1ORmFXWjg4ejdNS0FDUT09IiwibWFjIjoiNTNkMTEzMThjMGI2ZmRkNWU5NWQwODM4MjVjZTYxMzlkZDQ4MDc2ZWUxNGIwMGNhYWE3NjJmZDYyNDE2NzBmOCJ9; cart_auth_275428847=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
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 06:55:21 GMT
content-type: text/html; charset=UTF-8
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6Im5LWXFON2JuT2w3SVlWbjVXckJjc3c9PSIsInZhbHVlIjoiZFZOZEFyZ0ZDdVpiRk9jR3IxN0prUTRXZUk2dnpxc2g4R2FcL3h0WDdtTlFPVUNPT2lSTDZcLzB1OEtpcTlONTdFcm1JUFhNbVZTaGFNNm9aUjRiZ2NWZz09IiwibWFjIjoiNzBiNzkyZDEzZmQzOGNiMTUzNjc4NzU1MWRmOTkwNjZjMTllMTJiMTAyYTE0YzRlNWE4YTY0MDJkZDExMmE2ZSJ9; expires=Tue, 08-Nov-2022 09:55:20 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6IjZJMzZsWkdDT25YdUZ3ekNIdzJzMnc9PSIsInZhbHVlIjoiRENwWnNyb3N0bmRVTXRlOEJ1a29VK3d5eWc5endxQXVEZHd5anlnT1lPSEJCYXoydDBEMWJcLzVKZFg0WDNGcVVZM1JNenU2RHU1UlwvR0Fvb3lneVhcL1E9PSIsIm1hYyI6IjQ4YTA5OTliODg4ZWE4OGRlMTNlZDNjZjJiNjUyZmJiNGE0ZDJjZTAzYmUxMjNjZTgxZWY3ZmZmYTU1NTlmMzEifQ%3D%3D; expires=Tue, 08-Nov-2022 09:55:20 GMT; Max-Age=10800; path=/; httponly
x-newrelic-app-data: PxQFWFVWCgcJR1hQAQgPU1UCBxFORDQHUjZKA1ZLVVFHDFYPbU5yARBfWA86THlDQDg9KkNFRzo4clldFhQMDlwHShFkZGRTVABKIl4PRxALWlsEFCNMQVEHCgtZVhVKVB8GA1JWU04ATAlbAQAFHh5UFUMEWQcGB1MFBQQGWgUCVllUFR1RBwhCU24=
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| seguro.lojasacolazul.com.br/cart?cart_token=shopify-152f7f87b3ba581bb0c57a88fbac52b3&utm_source=facebook&utm_campaign=SMS%20Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=2747b149ce2f370b4eb0a8c275630e11436abfa3&customerToken=acc21fa0-5f1c-11ed-be4e-c3c4bd8be4a7 | 170.82.174.30 | 302 Found | 0 B |
URL HTTP/2seguro.lojasacolazul.com.br/cart?cart_token=shopify-152f7f87b3ba581bb0c57a88fbac52b3&utm_source=facebook&utm_campaign=SMS%20Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=2747b149ce2f370b4eb0a8c275630e11436abfa3&customerToken=acc21fa0-5f1c-11ed-be4e-c3c4bd8be4a7 IP170.82.174.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
GET /cart?cart_token=shopify-152f7f87b3ba581bb0c57a88fbac52b3&utm_source=facebook&utm_campaign=SMS%20Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=2747b149ce2f370b4eb0a8c275630e11436abfa3&customerToken=acc21fa0-5f1c-11ed-be4e-c3c4bd8be4a7 HTTP/1.1
Host: seguro.lojasacolazul.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Tue, 08 Nov 2022 06:55:17 GMT
content-type: text/html; charset=UTF-8
location: https://seguro.lojasacolazul.com.br/checkout/payment?cart_token=shopify-152f7f87b3ba581bb0c57a88fbac52b3&utm_source=facebook&utm_campaign=SMS+Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&store_token=2747b149ce2f370b4eb0a8c275630e11436abfa3&customerToken=acc21fa0-5f1c-11ed-be4e-c3c4bd8be4a7
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6Im0zVWtseG0yb3Y5c0wxbHFJcVByXC9RPT0iLCJ2YWx1ZSI6IkJFSkpvQ3d1cjZaVmRTaXZtYkhWV2VtaDFjVEs4UkNVWVkxUDA4SHF2aWRtZnlhRVdLVDlLXC9tXC9VNnFaMHNmQ1ZZVERcL1NtUnZCK1wvd1Q3M0xvN0hqdz09IiwibWFjIjoiNDlhNGVkNmRjNzM0OWQ1MDllZjhkNWU1YzA5YzFmYWYwYjYzZjUwNGZkMjIwZDdmZDcxNzA1M2YyOWUyYjUzZiJ9; expires=Tue, 08-Nov-2022 09:55:17 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6ImNMVjNNb2JKMG5VRU9xYXFleVNhMUE9PSIsInZhbHVlIjoiUGZENE5jakI1ODVCaDBnb2d1RkJTNDJncWQxTUdaaXl6emxvRWUxMk9QbHdhUWo0Rzl3dW9RVnpzNTJuT2w2dnRnYlU4ZlgybkJtRXVEcXpJWjZDT2c9PSIsIm1hYyI6IjAxOTU0NGRlMzVmNjVkNTEyYzlhZjBkYTIyMzAyZjAxMmRlNzllZjM0YjJiNjBhOThkOGZjYjg0NzA2OGZkMDgifQ%3D%3D; expires=Tue, 08-Nov-2022 09:55:17 GMT; Max-Age=10800; path=/; httponly
storeamigocanino_cart=eyJpdiI6IlByYUprZ0duOGtVKytMZk4yWnIybWc9PSIsInZhbHVlIjoiZ3F1SUhZdVlCSVBUK0dEMllTMmtqbWhpbFBJMHRxXC9BY2NXK1hOS1ppQlphXC9oT2lVVzB2MFQ3eGFVQmR2YWErSFN1MFZraW1ORmFXWjg4ejdNS0FDUT09IiwibWFjIjoiNTNkMTEzMThjMGI2ZmRkNWU5NWQwODM4MjVjZTYxMzlkZDQ4MDc2ZWUxNGIwMGNhYWE3NjJmZDYyNDE2NzBmOCJ9; expires=Sun, 13-Nov-2022 06:55:17 GMT; Max-Age=432000; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Rubik:wght@400;500;700&display=swap | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css2?family=Rubik:wght@400;500;700&display=swap IP142.250.74.10:0
GET /css2?family=Rubik:wght@400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 08 Nov 2022 06:55:19 GMT
date: Tue, 08 Nov 2022 06:55:19 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| cdn.yampi.me/jquery/jquery.js | 104.26.3.88 | 200 OK | 0 B |
URL HTTP/2cdn.yampi.me/jquery/jquery.js IP104.26.3.88:0
GET /jquery/jquery.js HTTP/1.1
Host: cdn.yampi.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 06:55:19 GMT
content-type: application/javascript
x-amz-id-2: ILZmLC/8xna6FmsXdPeQFmrthYLTeDP76FAp+EitPECkMWcmbW/VCwRc3PP3cCFdNanDgCUhpQQ=
x-amz-request-id: DJMKDNPKPYM8B8XF
last-modified: Tue, 24 Sep 2019 11:23:34 GMT
x-amz-version-id: 6XhfNvj9UGB1eWzPJf8PFJnclFrAQqDF
etag: W/"9f7c65c84c8e8c3e317945e8fd89899b"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4201
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4whXkgqQCP3Xxt7t%2F7XCTZZlxvoHjY9lDjZsJg3YUnT41l6oJks1y6SJFj5%2ByeRVbHWJOtfik9z1M6prHU7AehTPHyM83X90fTFL%2FHb8DfQmOSFNJfOUmQaan5DQ5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 766c6704cf731c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| seguro.lojasacolazul.com.br/api/v1/pixels/events | 170.82.174.30 | 200 OK | 0 B |
URL HTTP/2seguro.lojasacolazul.com.br/api/v1/pixels/events IP170.82.174.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
POST /api/v1/pixels/events HTTP/1.1
Host: seguro.lojasacolazul.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg8EVFRXARAJVldbDwQGVVU=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI5MzUyNDkiLCJhcCI6IjExMzQxNzA4MjMiLCJpZCI6IjI2N2NmOTBkYTgxMWQ3NGEiLCJ0ciI6IjE3ZmU2ZjI5MDY3Nzk0NWVkODc4NTkyMGRjODNlOTRmIiwidGkiOjE2Njc4OTA1MTczNjV9fQ==
traceparent: 00-17fe6f290677945ed8785920dc83e94f-267cf90da811d74a-01
tracestate: 2935249@nr=0-1-2935249-1134170823-267cf90da811d74a----1667890517365
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 250
Origin: https://seguro.lojasacolazul.com.br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/checkout/address
Cookie: XSRF-TOKEN=eyJpdiI6ImtHUmdoOFdGS0dQSUhBVnFTSkcwUkE9PSIsInZhbHVlIjoiSjZVMlJsQXkyMG5NZldDNTFOZzhMZWRUaW9qRU9rQ1JrbTFzU3RKUnpyZFNlQWcwbXlCVnRhckJGd1U4d2FiRGxEcEhYYzQ1cWV1QWw4ZHpRUmsxdFE9PSIsIm1hYyI6IjUzODQ0YjQ4MWU0OTM0ZDRmMmY1MDM5OTRjMDVmODE0Yzk1ODYzMTUxYzhkODVlZjMyYjcwOThmYjk1ZWRjODkifQ%3D%3D; bubbstore_checkout=eyJpdiI6IjBOa25yU09FYVhGcEx1Y0JnbTRcL0RBPT0iLCJ2YWx1ZSI6ImFEU3dZUmxnM3l1RXdzMlwvYnUyOWFyMWZyZU1IUWRFTmNxR1JJeDZIckk3bHBLOHZUWXJpNysyZGNTeWsxaVAyXC9Db0pXVFlnSGhQalwvVlhRS0NFOGZRPT0iLCJtYWMiOiJmMGQ4NDExNTVhOWJjMTdkMTFmNmQyMTMyNGZlMzJmNjNjMWI0NzRjNWQ3OWQ3MGVjMjk2OTJkMDVjNDI0OWJjIn0%3D; storeamigocanino_cart=eyJpdiI6IlByYUprZ0duOGtVKytMZk4yWnIybWc9PSIsInZhbHVlIjoiZ3F1SUhZdVlCSVBUK0dEMllTMmtqbWhpbFBJMHRxXC9BY2NXK1hOS1ppQlphXC9oT2lVVzB2MFQ3eGFVQmR2YWErSFN1MFZraW1ORmFXWjg4ejdNS0FDUT09IiwibWFjIjoiNTNkMTEzMThjMGI2ZmRkNWU5NWQwODM4MjVjZTYxMzlkZDQ4MDc2ZWUxNGIwMGNhYWE3NjJmZDYyNDE2NzBmOCJ9; cart_auth_275428847=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
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 06:55:20 GMT
content-type: text/html; charset=UTF-8
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6IjdkcTNmK2pPVVFMWjA4QXNSV0hSbFE9PSIsInZhbHVlIjoiWmFWNDdMNGVsdmU0OSsyblRPNnBPTjkxRlJycXpiamVUZ01FUHJQVE1XZWZuMTZBM0JyRnlKZDBSXC9RaGs0UjRCS2hRVVk1cXA4MDhPd0lTVEo0dU1BPT0iLCJtYWMiOiIzMGVjN2NhODU5ZTZjY2JjODRkZDY2NTFmN2IzZGM4MTMxN2IxMzdmNzU2MGNjNjg2ZTdlODFjZDQ5YWYxOTJlIn0%3D; expires=Tue, 08-Nov-2022 09:55:20 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6IitYakxPeFwvUmVJeVY0MERqRkZHcVwvUT09IiwidmFsdWUiOiJod2E2Sjk5Z29TcmhiY29HV3FMR3o0UWtmTHVlcUhuOFFVQVhmcDdDVlRESVYxXC94U0h4WVFQN0wwTjUzc1JnanZ4cGxRdktLalZMTTUzQzF3WDBXSEE9PSIsIm1hYyI6IjEzM2Y5NzczYjNhOTZkMDFmM2I0ZDcwOWU2ZDE3YzY5NWU3OGIwZWM1NWYwMGM4MmRmMjU3Y2U1NmQ4MjhlNzMifQ%3D%3D; expires=Tue, 08-Nov-2022 09:55:20 GMT; Max-Age=10800; path=/; httponly
x-newrelic-app-data: PxQFWFVWCgcJR1hQAQgPU1UCBxFORDQHUjZKA1ZLVVFHDFYPbU5yARBfWA86TFlDWUoRC09UWxVKRURSAQ0KDFdAFFIWCAQCA1UVUR9QA1dQAxtMV08aUFVWV1QGUwNXU1UPC1QCU0AcBFkOS11p
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| awesome-assets.yampi.me/checkout/build/mix/assets/js/app.js?id=e004bdab01653a468c960c3569c402cb | 104.26.2.88 | 200 OK | 0 B |
URL HTTP/2awesome-assets.yampi.me/checkout/build/mix/assets/js/app.js?id=e004bdab01653a468c960c3569c402cb IP104.26.2.88:0
GET /checkout/build/mix/assets/js/app.js?id=e004bdab01653a468c960c3569c402cb HTTP/1.1
Host: awesome-assets.yampi.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 06:55:19 GMT
content-type: application/javascript
x-amz-id-2: NRHsa6qucHQaiD3sC5dsd4mSTMl5ptA1rb1WB9pZudapWSWc7E9FXAqQiJ6YpdV9UR90y0pT+ZM=
x-amz-request-id: P200TN7ZJ2GWP78Q
last-modified: Fri, 04 Nov 2022 18:19:16 GMT
x-amz-version-id: vBH8I8U4Fk_cBjCH4K7uyIx8AtomnPkt
etag: W/"634f1880f47f3e97d885f3f34d5bf07b"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4201
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q92hh8WCloyOMWyLYu4pWc566qSfKSBvUTPhkes3hiT4ZedjNLpUkYCGHMDcakP%2BbDm%2FbjCFxI9dWW2Ajw1HsWY6lYOabwOqvhKJvA5EVuTaDPXxNDOlKiqtBbp0KRMyxRv2c9ekgdDr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 766c6704cb480b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| seguro.lojasacolazul.com.br/api/v1/pixels/events | 170.82.174.30 | 200 OK | 0 B |
URL HTTP/2seguro.lojasacolazul.com.br/api/v1/pixels/events IP170.82.174.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
POST /api/v1/pixels/events HTTP/1.1
Host: seguro.lojasacolazul.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg8EVFRXARAJVldbDwQGVVU=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI5MzUyNDkiLCJhcCI6IjExMzQxNzA4MjMiLCJpZCI6IjkwOTdkZWQwNDQ0ODA5MDciLCJ0ciI6ImY4NmE5OGNmNGJhZjFiYzQ3ZTk0NmUwMGIzOTdhMzY5IiwidGkiOjE2Njc4OTA1MTczNzF9fQ==
traceparent: 00-f86a98cf4baf1bc47e946e00b397a369-9097ded044480907-01
tracestate: 2935249@nr=0-1-2935249-1134170823-9097ded044480907----1667890517371
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 250
Origin: https://seguro.lojasacolazul.com.br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/checkout/address
Cookie: XSRF-TOKEN=eyJpdiI6ImtHUmdoOFdGS0dQSUhBVnFTSkcwUkE9PSIsInZhbHVlIjoiSjZVMlJsQXkyMG5NZldDNTFOZzhMZWRUaW9qRU9rQ1JrbTFzU3RKUnpyZFNlQWcwbXlCVnRhckJGd1U4d2FiRGxEcEhYYzQ1cWV1QWw4ZHpRUmsxdFE9PSIsIm1hYyI6IjUzODQ0YjQ4MWU0OTM0ZDRmMmY1MDM5OTRjMDVmODE0Yzk1ODYzMTUxYzhkODVlZjMyYjcwOThmYjk1ZWRjODkifQ%3D%3D; bubbstore_checkout=eyJpdiI6IjBOa25yU09FYVhGcEx1Y0JnbTRcL0RBPT0iLCJ2YWx1ZSI6ImFEU3dZUmxnM3l1RXdzMlwvYnUyOWFyMWZyZU1IUWRFTmNxR1JJeDZIckk3bHBLOHZUWXJpNysyZGNTeWsxaVAyXC9Db0pXVFlnSGhQalwvVlhRS0NFOGZRPT0iLCJtYWMiOiJmMGQ4NDExNTVhOWJjMTdkMTFmNmQyMTMyNGZlMzJmNjNjMWI0NzRjNWQ3OWQ3MGVjMjk2OTJkMDVjNDI0OWJjIn0%3D; storeamigocanino_cart=eyJpdiI6IlByYUprZ0duOGtVKytMZk4yWnIybWc9PSIsInZhbHVlIjoiZ3F1SUhZdVlCSVBUK0dEMllTMmtqbWhpbFBJMHRxXC9BY2NXK1hOS1ppQlphXC9oT2lVVzB2MFQ3eGFVQmR2YWErSFN1MFZraW1ORmFXWjg4ejdNS0FDUT09IiwibWFjIjoiNTNkMTEzMThjMGI2ZmRkNWU5NWQwODM4MjVjZTYxMzlkZDQ4MDc2ZWUxNGIwMGNhYWE3NjJmZDYyNDE2NzBmOCJ9; cart_auth_275428847=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
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 06:55:20 GMT
content-type: text/html; charset=UTF-8
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6Ik5GcG1HSG1XbTlpbmdOM2xPNUFDM3c9PSIsInZhbHVlIjoiOXZYRlhYdis5SlkwTXFiZ0lwNWV4M2VXejh4VWsrZDZpWmV3UzJRVEFwdjE3bG1WeXpEM0dXT1AwTnhORnZDZVwvSytMMUhUSHVqU1oxVmRLcktRSkxnPT0iLCJtYWMiOiIzNjk3YTA3NDA0MjM3NmY3ODFkMGFkYzQzYWQzODI1OTU2NzllZDEyOThhYWI4NDA4YjI2NjY3MTNjMGMyM2EwIn0%3D; expires=Tue, 08-Nov-2022 09:55:20 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6InB5SHZ5VEV5UmFSY1BQR3JvN2JrQmc9PSIsInZhbHVlIjoiMzZGbVBIRURYK2xGYTliTmFGRlF1UU91S0ZrT3EzNGg4Q01LMXlEWHVHXC9MbGl6WEtTK1Y5Z3N1WElEaWlwRnppZlwvcjhoQ3BXNk5XbzB6RStIV0M2dz09IiwibWFjIjoiMzZiNWFiY2NkNTRkYmI1YmQwODdjYWViNzUxNTIxYmVjMWRmZTFlNDkzMzFjZWY2NTJiNDM5Nzk4Y2ViYmZkYyJ9; expires=Tue, 08-Nov-2022 09:55:20 GMT; Max-Age=10800; path=/; httponly
x-newrelic-app-data: PxQFWFVWCgcJR1hQAQgPU1UCBxFORDQHUjZKA1ZLVVFHDFYPbU5yARBfWA86TFlDWUoRC09UWxVKRURSAQ0KDFdAFFIWCAQCA1UVUR9QAVdcDxtMV08aC1UHVFsBAAdRUFAOUFBeVkAcBFkOS11p
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| seguro.lojasacolazul.com.br/cart/recomm | 170.82.174.30 | 200 OK | 0 B |
URL HTTP/2seguro.lojasacolazul.com.br/cart/recomm IP170.82.174.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /cart/recomm HTTP/1.1
Host: seguro.lojasacolazul.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg8EVFRXARAJVldbDwQGVVU=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI5MzUyNDkiLCJhcCI6IjExMzQxNzA4MjMiLCJpZCI6ImRlZDk1OGYyOTcwY2M4OWUiLCJ0ciI6IjBkMDkwNTY3ZTVhY2NjOTExMjU0NzNmYTQ5MzBjOTYwIiwidGkiOjE2Njc4OTA1MTczNTR9fQ==
traceparent: 00-0d090567e5accc91125473fa4930c960-ded958f2970cc89e-01
tracestate: 2935249@nr=0-1-2935249-1134170823-ded958f2970cc89e----1667890517354
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/checkout/address
Cookie: XSRF-TOKEN=eyJpdiI6ImtHUmdoOFdGS0dQSUhBVnFTSkcwUkE9PSIsInZhbHVlIjoiSjZVMlJsQXkyMG5NZldDNTFOZzhMZWRUaW9qRU9rQ1JrbTFzU3RKUnpyZFNlQWcwbXlCVnRhckJGd1U4d2FiRGxEcEhYYzQ1cWV1QWw4ZHpRUmsxdFE9PSIsIm1hYyI6IjUzODQ0YjQ4MWU0OTM0ZDRmMmY1MDM5OTRjMDVmODE0Yzk1ODYzMTUxYzhkODVlZjMyYjcwOThmYjk1ZWRjODkifQ%3D%3D; bubbstore_checkout=eyJpdiI6IjBOa25yU09FYVhGcEx1Y0JnbTRcL0RBPT0iLCJ2YWx1ZSI6ImFEU3dZUmxnM3l1RXdzMlwvYnUyOWFyMWZyZU1IUWRFTmNxR1JJeDZIckk3bHBLOHZUWXJpNysyZGNTeWsxaVAyXC9Db0pXVFlnSGhQalwvVlhRS0NFOGZRPT0iLCJtYWMiOiJmMGQ4NDExNTVhOWJjMTdkMTFmNmQyMTMyNGZlMzJmNjNjMWI0NzRjNWQ3OWQ3MGVjMjk2OTJkMDVjNDI0OWJjIn0%3D; storeamigocanino_cart=eyJpdiI6IlByYUprZ0duOGtVKytMZk4yWnIybWc9PSIsInZhbHVlIjoiZ3F1SUhZdVlCSVBUK0dEMllTMmtqbWhpbFBJMHRxXC9BY2NXK1hOS1ppQlphXC9oT2lVVzB2MFQ3eGFVQmR2YWErSFN1MFZraW1ORmFXWjg4ejdNS0FDUT09IiwibWFjIjoiNTNkMTEzMThjMGI2ZmRkNWU5NWQwODM4MjVjZTYxMzlkZDQ4MDc2ZWUxNGIwMGNhYWE3NjJmZDYyNDE2NzBmOCJ9; cart_auth_275428847=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
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 06:55:20 GMT
content-type: application/json
x-protected-by: Sqreen
access-control-allow-origin: *
set-cookie: XSRF-TOKEN=eyJpdiI6InY5ckh4ZFZqb0gyZmErdHRpd3RzdEE9PSIsInZhbHVlIjoiTDhIMU83MGZkSkk5RnRIUlwvOWtOVkdmTkt6N2dFdFo4SFplT2xMc0I0V3NZV0oyQmtZWEZcL0xaVWhQWU1nc2w4d3VxWXd4MGxYekY2UGFTQkhQXC93ZlE9PSIsIm1hYyI6ImM3Y2RjMTZhNzI4YTgxMTI2YzZhYjUwYTY4OWNlMzVhZjViOTQ3NzUxOGRmNmQ5NGRiMTcwNjBhNjQ1ZTU0YjQifQ%3D%3D; expires=Tue, 08-Nov-2022 09:55:20 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6IjdLRzFiNUtRVGRtbStBQ29KV2h0Y0E9PSIsInZhbHVlIjoibUUxZ1g1dVpNcFNIS1p1K0tVcVRVU2xBcEcxSEVxenkzNDhKUDFuQWFcL3FKR2doZGlodGNqRStZOG1tTGV4OWxLQldkc2dlOTViM25BNnBUb0M2VEhBPT0iLCJtYWMiOiI2MmYyZDdjNzQ3NzkyMWI2MDY4ZjMwNTA2NTI3OTcyZjk3NDYyNTAwNDdhNTVmYmM3MTNhZTVhZTVhYTU1NGJkIn0%3D; expires=Tue, 08-Nov-2022 09:55:20 GMT; Max-Age=10800; path=/; httponly
x-newrelic-app-data: PxQFWFVWCgcJR1hQAQgPU1UCBxFORDQHUjZKA1ZLVVFHDFYPbU5yARBfWA86TFtSQhBPEFJSWAsJExoDTFZTUgBSFFIWCAYKBlwVTABNEQEGBgNQBAcAA1FcAlsOVABESFdXXxEDPg==
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| seguro.lojasacolazul.com.br/checkout/payment?cart_token=shopify-152f7f87b3ba581bb0c57a88fbac52b3&utm_source=facebook&utm_campaign=SMS+Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&store_token=2747b149ce2f370b4eb0a8c275630e11436abfa3&customerToken=acc21fa0-5f1c-11ed-be4e-c3c4bd8be4a7 | 170.82.174.30 | 302 Found | 0 B |
URL HTTP/2seguro.lojasacolazul.com.br/checkout/payment?cart_token=shopify-152f7f87b3ba581bb0c57a88fbac52b3&utm_source=facebook&utm_campaign=SMS+Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&store_token=2747b149ce2f370b4eb0a8c275630e11436abfa3&customerToken=acc21fa0-5f1c-11ed-be4e-c3c4bd8be4a7 IP170.82.174.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
GET /checkout/payment?cart_token=shopify-152f7f87b3ba581bb0c57a88fbac52b3&utm_source=facebook&utm_campaign=SMS+Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&store_token=2747b149ce2f370b4eb0a8c275630e11436abfa3&customerToken=acc21fa0-5f1c-11ed-be4e-c3c4bd8be4a7 HTTP/1.1
Host: seguro.lojasacolazul.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Im0zVWtseG0yb3Y5c0wxbHFJcVByXC9RPT0iLCJ2YWx1ZSI6IkJFSkpvQ3d1cjZaVmRTaXZtYkhWV2VtaDFjVEs4UkNVWVkxUDA4SHF2aWRtZnlhRVdLVDlLXC9tXC9VNnFaMHNmQ1ZZVERcL1NtUnZCK1wvd1Q3M0xvN0hqdz09IiwibWFjIjoiNDlhNGVkNmRjNzM0OWQ1MDllZjhkNWU1YzA5YzFmYWYwYjYzZjUwNGZkMjIwZDdmZDcxNzA1M2YyOWUyYjUzZiJ9; bubbstore_checkout=eyJpdiI6ImNMVjNNb2JKMG5VRU9xYXFleVNhMUE9PSIsInZhbHVlIjoiUGZENE5jakI1ODVCaDBnb2d1RkJTNDJncWQxTUdaaXl6emxvRWUxMk9QbHdhUWo0Rzl3dW9RVnpzNTJuT2w2dnRnYlU4ZlgybkJtRXVEcXpJWjZDT2c9PSIsIm1hYyI6IjAxOTU0NGRlMzVmNjVkNTEyYzlhZjBkYTIyMzAyZjAxMmRlNzllZjM0YjJiNjBhOThkOGZjYjg0NzA2OGZkMDgifQ%3D%3D; storeamigocanino_cart=eyJpdiI6IlByYUprZ0duOGtVKytMZk4yWnIybWc9PSIsInZhbHVlIjoiZ3F1SUhZdVlCSVBUK0dEMllTMmtqbWhpbFBJMHRxXC9BY2NXK1hOS1ppQlphXC9oT2lVVzB2MFQ3eGFVQmR2YWErSFN1MFZraW1ORmFXWjg4ejdNS0FDUT09IiwibWFjIjoiNTNkMTEzMThjMGI2ZmRkNWU5NWQwODM4MjVjZTYxMzlkZDQ4MDc2ZWUxNGIwMGNhYWE3NjJmZDYyNDE2NzBmOCJ9
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 302 Found
date: Tue, 08 Nov 2022 06:55:18 GMT
content-type: text/html; charset=UTF-8
location: https://seguro.lojasacolazul.com.br/checkout/address
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6Im9ybnp5ekpVNTV5NTZWMFoxdVwvcCtRPT0iLCJ2YWx1ZSI6IkFmMys3eDgxQWhcL01ZRVBxMldIK2xYa1ZUbDdmVHpqN09GMkZPTVNRRDZOWkdTRWRmbjZZa2kwSG8xK29nZnE5S2dYM3hHVVpWRk9sVnRlaDBueHpWQT09IiwibWFjIjoiZDg2ZTZlODNiZWVhYjY3MDQ0MzMxNmRmNjdkNzhkNGJjOGFmYzYxNGQ2MzYwNGY5NGEwNWMxNTVkZjRlYjUyNiJ9; expires=Tue, 08-Nov-2022 09:55:18 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6IktGRFlmTFpVYXNybmkrZXYxWEhlXC9BPT0iLCJ2YWx1ZSI6ImhodUNsQ3g1MVRSRnhLYURDU1YwMm5Takk5NWhGd2RMTFZPbDRROUNuM1dvVGZRMmVpbUtMcUJpdXpaYVBlSHg3eFwvV0FEOXg3aWhJODU3ekRMbkFvUT09IiwibWFjIjoiZDQ1YWYxZTg2NTgzNDg0ZDc1MjkxMDdlZjdhNzYyYWEwMjZjODc2NTkwYmVmZGM0ZjBiZTQ2NTI2NjBlMGYwMiJ9; expires=Tue, 08-Nov-2022 09:55:18 GMT; Max-Age=10800; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
X-Firefox-Spdy: h2
|
|
| rawartsites.neocities.org/img/Yampi/SVG/selo.svg | 198.51.233.2 | 200 OK | 0 B |
URL HTTP/2rawartsites.neocities.org/img/Yampi/SVG/selo.svg IP198.51.233.2:0
GET /img/Yampi/SVG/selo.svg HTTP/1.1
Host: rawartsites.neocities.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 08 Nov 2022 06:55:20 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 19 May 2022 23:45:02 GMT
etag: W/"6286d67e-5004"
server: neocities
x-ipfs-path: /ipns/rawartsites.neocities.org
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
content-security-policy: upgrade-insecure-requests; default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: *
x-neocities-cdn: cdn-fra
upgrade-insecure-requests: 1
x-cached: HIT
content-encoding: br
X-Firefox-Spdy: h2
|
|
| seguro.lojasacolazul.com.br/api/v1/pixels/events | 170.82.174.30 | 200 OK | 0 B |
URL HTTP/2seguro.lojasacolazul.com.br/api/v1/pixels/events IP170.82.174.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
POST /api/v1/pixels/events HTTP/1.1
Host: seguro.lojasacolazul.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg8EVFRXARAJVldbDwQGVVU=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI5MzUyNDkiLCJhcCI6IjExMzQxNzA4MjMiLCJpZCI6ImRlNDIzMTBlZGE4YzVhZTEiLCJ0ciI6IjhhNzgyNTU3NmNlOTFjOWIyNjZmNjU5NmIxY2YwNTY3IiwidGkiOjE2Njc4OTA1MTczNjh9fQ==
traceparent: 00-8a7825576ce91c9b266f6596b1cf0567-de42310eda8c5ae1-01
tracestate: 2935249@nr=0-1-2935249-1134170823-de42310eda8c5ae1----1667890517368
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 250
Origin: https://seguro.lojasacolazul.com.br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/checkout/address
Cookie: XSRF-TOKEN=eyJpdiI6ImtHUmdoOFdGS0dQSUhBVnFTSkcwUkE9PSIsInZhbHVlIjoiSjZVMlJsQXkyMG5NZldDNTFOZzhMZWRUaW9qRU9rQ1JrbTFzU3RKUnpyZFNlQWcwbXlCVnRhckJGd1U4d2FiRGxEcEhYYzQ1cWV1QWw4ZHpRUmsxdFE9PSIsIm1hYyI6IjUzODQ0YjQ4MWU0OTM0ZDRmMmY1MDM5OTRjMDVmODE0Yzk1ODYzMTUxYzhkODVlZjMyYjcwOThmYjk1ZWRjODkifQ%3D%3D; bubbstore_checkout=eyJpdiI6IjBOa25yU09FYVhGcEx1Y0JnbTRcL0RBPT0iLCJ2YWx1ZSI6ImFEU3dZUmxnM3l1RXdzMlwvYnUyOWFyMWZyZU1IUWRFTmNxR1JJeDZIckk3bHBLOHZUWXJpNysyZGNTeWsxaVAyXC9Db0pXVFlnSGhQalwvVlhRS0NFOGZRPT0iLCJtYWMiOiJmMGQ4NDExNTVhOWJjMTdkMTFmNmQyMTMyNGZlMzJmNjNjMWI0NzRjNWQ3OWQ3MGVjMjk2OTJkMDVjNDI0OWJjIn0%3D; storeamigocanino_cart=eyJpdiI6IlByYUprZ0duOGtVKytMZk4yWnIybWc9PSIsInZhbHVlIjoiZ3F1SUhZdVlCSVBUK0dEMllTMmtqbWhpbFBJMHRxXC9BY2NXK1hOS1ppQlphXC9oT2lVVzB2MFQ3eGFVQmR2YWErSFN1MFZraW1ORmFXWjg4ejdNS0FDUT09IiwibWFjIjoiNTNkMTEzMThjMGI2ZmRkNWU5NWQwODM4MjVjZTYxMzlkZDQ4MDc2ZWUxNGIwMGNhYWE3NjJmZDYyNDE2NzBmOCJ9; cart_auth_275428847=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
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 06:55:20 GMT
content-type: text/html; charset=UTF-8
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6ImJOUjNhMEY4MmN1NkpcLzhZQlMzV0VRPT0iLCJ2YWx1ZSI6IjNMREVtVlNtXC9ySU93YjJGcElBb1Z3dUE3NzBTd0FKVTFcL0JUNUVNaGpSZENQK2dZSXhvMWErSk9HS3lnWnRnVFhtQU5cL09aNnU3U1Vna3VVcXdsZk1nPT0iLCJtYWMiOiI4NDE5YjczY2ZmNzUxZTlmMWI4ZmYwNTcwNjc3NmFmNjY3MzBiNTlmMTkzOTc5YTU0OWMyMmFjNmZkNjNlNWIzIn0%3D; expires=Tue, 08-Nov-2022 09:55:20 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6IlNoTWdYa1dzYk5saUFKdEY1c212OWc9PSIsInZhbHVlIjoidHFDYW9GaU0ydWRwa2VaZUE0UTN6V3kxcGw4Tnd1MzhqRmNobTIxS3JVQTErRlh5Wnp4TUNmeGtKd0l6cXNDMG5DS2hFVUhCY1B4TGtEV2hPR3J5Tmc9PSIsIm1hYyI6IjBhMjg3YTZjMjA3YzZjMDc3NGU3NDAyNDViNmM0YTAyZTljZjZiZTY0MjU4NDkzMjU4MDc2YTZiNzU3NTJhNmMifQ%3D%3D; expires=Tue, 08-Nov-2022 09:55:20 GMT; Max-Age=10800; path=/; httponly
x-newrelic-app-data: PxQFWFVWCgcJR1hQAQgPU1UCBxFORDQHUjZKA1ZLVVFHDFYPbU5yARBfWA86TFlDWUoRC09UWxVKRURSAQ0KDFdAFFIWCAQCA1UVUR9QAVVXAhtMV08aUQIBVVBVVQEFVlIPUAdVAEAcBFkOS11p
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| seguro.lojasacolazul.com.br/e/t | 170.82.174.30 | 200 OK | 0 B |
URL HTTP/2seguro.lojasacolazul.com.br/e/t IP170.82.174.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
POST /e/t HTTP/1.1
Host: seguro.lojasacolazul.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg8EVFRXARAJVldbDwQGVVU=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI5MzUyNDkiLCJhcCI6IjExMzQxNzA4MjMiLCJpZCI6ImJkY2I5Y2IwNjg4N2E4ZGQiLCJ0ciI6ImE1NTRlN2FhODVlMTQyN2ZhYzA5MWVkNWQxMDllMzQ2IiwidGkiOjE2Njc4OTA1MTczNzN9fQ==
traceparent: 00-a554e7aa85e1427fac091ed5d109e346-bdcb9cb06887a8dd-01
tracestate: 2935249@nr=0-1-2935249-1134170823-bdcb9cb06887a8dd----1667890517373
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 365
Origin: https://seguro.lojasacolazul.com.br
Connection: keep-alive
Referer: https://seguro.lojasacolazul.com.br/checkout/address
Cookie: XSRF-TOKEN=eyJpdiI6ImtHUmdoOFdGS0dQSUhBVnFTSkcwUkE9PSIsInZhbHVlIjoiSjZVMlJsQXkyMG5NZldDNTFOZzhMZWRUaW9qRU9rQ1JrbTFzU3RKUnpyZFNlQWcwbXlCVnRhckJGd1U4d2FiRGxEcEhYYzQ1cWV1QWw4ZHpRUmsxdFE9PSIsIm1hYyI6IjUzODQ0YjQ4MWU0OTM0ZDRmMmY1MDM5OTRjMDVmODE0Yzk1ODYzMTUxYzhkODVlZjMyYjcwOThmYjk1ZWRjODkifQ%3D%3D; bubbstore_checkout=eyJpdiI6IjBOa25yU09FYVhGcEx1Y0JnbTRcL0RBPT0iLCJ2YWx1ZSI6ImFEU3dZUmxnM3l1RXdzMlwvYnUyOWFyMWZyZU1IUWRFTmNxR1JJeDZIckk3bHBLOHZUWXJpNysyZGNTeWsxaVAyXC9Db0pXVFlnSGhQalwvVlhRS0NFOGZRPT0iLCJtYWMiOiJmMGQ4NDExNTVhOWJjMTdkMTFmNmQyMTMyNGZlMzJmNjNjMWI0NzRjNWQ3OWQ3MGVjMjk2OTJkMDVjNDI0OWJjIn0%3D; storeamigocanino_cart=eyJpdiI6IlByYUprZ0duOGtVKytMZk4yWnIybWc9PSIsInZhbHVlIjoiZ3F1SUhZdVlCSVBUK0dEMllTMmtqbWhpbFBJMHRxXC9BY2NXK1hOS1ppQlphXC9oT2lVVzB2MFQ3eGFVQmR2YWErSFN1MFZraW1ORmFXWjg4ejdNS0FDUT09IiwibWFjIjoiNTNkMTEzMThjMGI2ZmRkNWU5NWQwODM4MjVjZTYxMzlkZDQ4MDc2ZWUxNGIwMGNhYWE3NjJmZDYyNDE2NzBmOCJ9; cart_auth_275428847=eyJpdiI6InAwbWFiQnhqQTFxclczVFpEbzV3d2c9PSIsInZhbHVlIjoidmc4cDZDNVVXcVVCOFNKeENIeVErWnRNR05Wb1dHeE5ySlM0SnF0RXM0ZUx3bHgwNndVSHRDZEhpNjlvTzM3MUlPb3pLUjNXMjYxR1BBQmI3RlEzVGcxeEF1bU9UMXdYdG9QQW1kOUJFZklXMktpenl3Z3RRQ01xK05ybU1uSEpFeUFrQ1FyUlk1QXZzSG1uVUpsV0NzNXpuQ3lvMTRGaklJVEE5TEh1V0E0WVlzN3o4SE1wWm80XC94SkMzVHduczA4ZXVxU2luUDNyWmJXdnRMUzdtUElmNHNObTkrMTh5Q29pa2VtVGZ2MUkzaUgzZ2lWNDE2OTc0WGt2Y3REd0xZMEJzZ25mRWpvRVhjd0QxTlF5R21yQitmVUI1SFRFVjdpeFZrTEZEWmRySU4xZTNPNnVvQW1lYWFVclV1Wk94QVY2QjNlMExJZU1iMlFqNFNkQWVuQTJ0MFdDWDB3eFgyVTk4b0RcLzUwV2pkQzlPblN1d0tndG41RXpxUE5JZ2dJRHZmTE9Ha1R1NnRJM3Z0ZXo2c3J6dk5Ud0t5cTFPemdLS0FYV3BNcFN2cEpvZGR3ZlVwVW0wWHFrSTA2ZUNBMmZzODQ0Z0x4T2FSNG9ZbjVtWmJqM2QxUGN1NW9vejF1aVY1QmN0a2JkdFdqUElFejlQbDNsOTRrbUZwREJ1TU9BUHF4bkRpcUJDb1NWM1dZcXVQSWZNVEoxT0tZUlVEYU9MamtGZTNmakRYV2RJMHNwMUxsZGphMDdRS2tiaXpyXC9LQlVpbkpKakxPSkNHblFVdjcwQT09IiwibWFjIjoiNGU3MTIzNzhlZjk3MTI5YzczZWUyMzZhNDk2MjVhMDYyOWUyNjZkZjNkMmY3MTY2NzBiZDU2N2YyOWYyZjY0OSJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 08 Nov 2022 06:55:21 GMT
content-type: text/html; charset=UTF-8
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6ImpnT3FpUUhEbFZKQzZDR3JVVGNaQXc9PSIsInZhbHVlIjoiUGtJNGw5N0pTb1RMY0huQTFsRVZOTGRTbUlRYk1kVVRPWStBbk1iV0cwMm1JMnBnS05QU0RYblk1RElwVGZWQ1E4RzFpVUljaUZEbHlFVlNqSGhjS3c9PSIsIm1hYyI6ImU5ZWY1YTEzZjYzM2IzNmVkZTYyZDMxYmM2MzUzNTVkNDZjYjc0ZTIwNTRhNGI0ZjE5M2Y3ZDNiNTJlZjM3YzkifQ%3D%3D; expires=Tue, 08-Nov-2022 09:55:20 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6ImhmUXBSeG9aWnRORlR2UDRSbStrK1E9PSIsInZhbHVlIjoic3JIQXRqODAxUTU1Qnp0MHpQb2wwTzFIR3BqSlNvb083U3pwTkJaako1a2ZQUTRPSEl5QmZvcTZXQkdcL0NiYytnNUg0RkVDZmFmS3I1Z3UrV3hoZkFnPT0iLCJtYWMiOiJiZWE2MzBlYzZhNGUxOTUwNjliNDkyNmZkMjJmYTMxYWQ5YzgyODg3NTVhNWQyZDNmM2NiM2NiYmJhOWI2NDYyIn0%3D; expires=Tue, 08-Nov-2022 09:55:20 GMT; Max-Age=10800; path=/; httponly
x-newrelic-app-data: PxQFWFVWCgcJR1hQAQgPU1UCBxFORDQHUjZKA1ZLVVFHDFYPbU5yARBfWA86THlDQDg9KkNFRzo4clldFhQMDlwHShFkZGRTVABKIl4PRxALWlsEFCNMQVEHCgtZVhVKVB8GA1JWU04ATApTDwgHHh5UFUMDVAcHUgMOAFYADQEJBlIAFR1RBwhCU24=
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
104.21.81.61