| linkcurto.co/h1lnedorbjsw8 |  104.21.81.61 | 301 Moved Permanently | 0 B |
URL HTTP/1.1linkcurto.co/h1lnedorbjsw8 IP104.21.81.61:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /h1lnedorbjsw8 HTTP/1.1
Host: linkcurto.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 26 Oct 2022 05:25:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 26 Oct 2022 06:25:13 GMT
Location: https://linkcurto.co/h1lnedorbjsw8
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j6sB3qAx1MMwPSeeigkGxakZtMksyt7HBEUOB4ji%2BGoYndFps9FIffQnqlipy1ULmOXTCE%2BBFxDn9IY%2Fxpix2YX3CMbi1tXUMr8SJbPEo%2B%2BtOYaamwfXRst8o%2F2VCBg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7600c52a6f7a1c0e-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe36c852b5e145f2f09fe73111fb162e1 e439c6a462f86a3003d6464a8b9999b1c4d1e210 52a721168d0c41cb0854ff8c730fce3b79db2e804b383238e95ff1401922bd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52A721168D0C41CB0854FF8C730FCE3B79DB2E804B383238E95FF1401922BD74"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14670
Expires: Wed, 26 Oct 2022 09:29:44 GMT
Date: Wed, 26 Oct 2022 05:25:14 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashc2bba4cad162918b17858b60e909e4d9 d9a1d4f7fb7635ab233ebbf776e6de1a2857032b 3a1d27ec3d034d6326b32f6054b6be46079a86a33e75d5a2a3796a0c4c5eadab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2701
Cache-Control: max-age=103858
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:14 GMT
Etag: "6357acdf-1d7"
Expires: Thu, 27 Oct 2022 10:16:12 GMT
Last-Modified: Tue, 25 Oct 2022 09:31:11 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha39eea1096852891690eaee02a64383e c273000f799fc3676e8e3ef3617611a31252cffc d9d95319013d64bc2ef6d9870f4adba902ee970b6f9e96279c9ed86f556e0001
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D9D95319013D64BC2EF6D9870F4ADBA902EE970B6F9E96279C9ED86F556E0001"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4704
Expires: Wed, 26 Oct 2022 06:43:38 GMT
Date: Wed, 26 Oct 2022 05:25:14 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain |  34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ZJadBJ63HMyhTvA81k5PtIkxSQkBCO5ylcEgAK7jTaUtALeq1eO+WoE/0aqBquK0IDzQHGGCcF8=
x-amz-request-id: M8B1RVBTRKAM6J01
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 26 Oct 2022 04:39:04 GMT
age: 2770
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 05:25:14 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash518ff04fd536958e285cf07aaf4a2786 fa5dad2391c2a9957340bd629f0462db4f412a5c 608c78964412d5dc7025e9cbfaef345d448a29eae0f11257c49a41f274917b9a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2520
Cache-Control: max-age=98614
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:14 GMT
Etag: "63579918-1d7"
Expires: Thu, 27 Oct 2022 08:48:48 GMT
Last-Modified: Tue, 25 Oct 2022 08:06:48 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 34.216.192.228 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.216.192.228:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cb0tAhO58IBcuy2SlJ7eJQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lClB/tJKM+tP/vjJF/a2uaKX9ZA=
|
|
| linkcurto.co/h1lnedorbjsw8 | 172.67.157.46 | 301 Moved Permanently | 33 kB |
URL HTTP/2linkcurto.co/h1lnedorbjsw8 IP172.67.157.46:0
Hash31d67a0289d4da32945a55bb1d8e0ede 8fc6c2fca84861f4c8b7185aad9d9bec998520c9 a7aa7500e1430e60b55f0fc4bb55e7f6ddf9373867f220b10e1acf550096b960
GET /h1lnedorbjsw8 HTTP/1.1
Host: linkcurto.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Wed, 26 Oct 2022 05:25:14 GMT
content-type: text/html; charset=UTF-8
location: https://seguro.giftcardsbr.store/cart?cart_token=shopify-8f7bf188da2efa84f531866cba29579c&utm_source=SMS&utm_campaign=Carrinho Abandonado 1&forceCheckout=1&skipToCheckout=1&store_token=af62975f9153506159a052258ce1f69bf8535094&customerToken=e98b2200-54d8-11ed-a854-179e3420a6c2
set-cookie: XSRF-TOKEN=eyJpdiI6IndKOEhTTjRwcmQvNjFZUHllL2xiRWc9PSIsInZhbHVlIjoiazVPUnA5VWt5UTl4Q0RUNi9Ud0tHZUE5SjRMRzN4YUw0aElaY1pCUlh2bFNHRGpPeWkxMkFoeGFkM0ZMa2hRZmg1MENxWXo1blAvbWtoc3cvbEdhYjBKZTJCUVdiQTB0S0ozRG9hbXFIZDd2M25QeFZ5cXIzdDI5aWxuS01JRDQiLCJtYWMiOiJjMmQyNGE0OTJkZTljZTk5YTJjMThkMTBlMmE2NTdjYjgxNDAwOWYyYjdhOTYyZDI2Y2U5MDEzZjVjNDY0Y2QxIn0%3D; expires=Wed, 26-Oct-2022 07:25:14 GMT; Max-Age=7200; path=/; samesite=lax
linkcurto_session=eyJpdiI6IjJIcEx6MXdnd1pzU0MwaTd6RE8vNnc9PSIsInZhbHVlIjoiTzdCRUZPcXoxVDNhdjlBRjg3UHByZy90YkE3dzgrcmJVZlNoR1dtZmZYaFJSTHlZdE5FWC83b1RnM1RHd1VJZ3VucjZIejVZcFdjUVZzNUdvQk1qY3lKYUdyYkUrc1RWVzBsdUVZRmhmWlZxV0tlU2dBK3RvSERhUmhPZk9iWUciLCJtYWMiOiIxZGVhMDQ1NWQwOTE4ZDZkNjczODg4Y2RiMWQ3Zjg2ZTlmMDM5MjJiMGI3Y2EzZDE5NThkM2VjZDk3NzJiODJjIn0%3D; expires=Wed, 26-Oct-2022 07:25:14 GMT; Max-Age=7200; path=/; httponly; samesite=lax
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OXBddm9xyl9p1kWO%2FJJJXecXk5JiRt1KMaWbIMV9mMYJUpLC1Qo5tnd02Pw7%2Be%2B3cu9Kts6BwKN6%2FuIye1lPncvsAh0Z7Q%2F4L6ISsUuPM9sqwYCFlne0tHOH%2B3hBv48%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7600c52bf966b4ed-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash398e3c90084d7d71fc1e9fd833116f5f 3e202da5559a8f219144adee3639d063a98559c0 724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2977
Expires: Wed, 26 Oct 2022 06:14:53 GMT
Date: Wed, 26 Oct 2022 05:25:16 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash398e3c90084d7d71fc1e9fd833116f5f 3e202da5559a8f219144adee3639d063a98559c0 724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2977
Expires: Wed, 26 Oct 2022 06:14:53 GMT
Date: Wed, 26 Oct 2022 05:25:16 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash398e3c90084d7d71fc1e9fd833116f5f 3e202da5559a8f219144adee3639d063a98559c0 724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2977
Expires: Wed, 26 Oct 2022 06:14:53 GMT
Date: Wed, 26 Oct 2022 05:25:16 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash398e3c90084d7d71fc1e9fd833116f5f 3e202da5559a8f219144adee3639d063a98559c0 724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2977
Expires: Wed, 26 Oct 2022 06:14:53 GMT
Date: Wed, 26 Oct 2022 05:25:16 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash398e3c90084d7d71fc1e9fd833116f5f 3e202da5559a8f219144adee3639d063a98559c0 724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2977
Expires: Wed, 26 Oct 2022 06:14:53 GMT
Date: Wed, 26 Oct 2022 05:25:16 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg | 34.120.237.76 | 200 OK | 4.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash91ee720c15dc69de45080d0c951353af 5292b31a99d90bcb7071f327b93d52034bdf9dcb 7fbe9f0f6db08fd539f2e8d4ac22e3b4d5ca14f7cde69f8424cce8b361d026e6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4524
x-amzn-requestid: a493efe7-11c7-4032-b36b-7f838f8180bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aljicH_6IAMFqpQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63587fa9-0f15eae7680ea7b15e5e47ec;Sampled=0
x-amzn-remapped-date: Wed, 26 Oct 2022 00:30:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: NQJHFIbLMzw0aGwCkVGIEIHOMHprTpvLkLQRKgrGeVj35sk7sW4IUg==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 00:36:34 GMT
age: 17322
etag: "5292b31a99d90bcb7071f327b93d52034bdf9dcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7feebb27-e9c6-46cc-a15e-dfe7e14961be.jpeg | 34.120.237.76 | 200 OK | 8.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7feebb27-e9c6-46cc-a15e-dfe7e14961be.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6908328a8d186075fa9e59a172c12913 73771b4bb2eb936ee8efd4039ee4913a51f94f3e 6d1e1ec3b1a3eec27056c711f5f2b957247c7d1e3be6d99c65bb96df74715446
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7feebb27-e9c6-46cc-a15e-dfe7e14961be.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8187
x-amzn-requestid: 9f706dbe-6f9a-4839-9576-fcd45af05ccc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alLLKGUAoAMFiEQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635858ad-1fdc6b1b07249d8501117cf1;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:44:13 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: cxM0T_HLsSl-rXU-lmzlflC66GyChydnPjlAhnKJ4fFzysuyEI0rMQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 22:34:42 GMT
etag: "73771b4bb2eb936ee8efd4039ee4913a51f94f3e"
content-type: image/jpeg
age: 24634
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg | 34.120.237.76 | 200 OK | 8.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5987bcd44ab0db5313aa4f409a8a212f 691a36cde98a9fe1660745dd811e0be2ae67036c e47ce3587c647b52669f675dc7e84e21555f82138091fb04febc951b4c06ba30
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8553
x-amzn-requestid: 69931a9c-027e-428e-a88d-61c5fac64daa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ2iEnzoAMFZAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63585690-12c78c5157fb3fa41a13548c;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: zfjAcNokC0aMpSY3juYAi_Wo1MMRskGGJ0y9jb7x3Ps9R6wfiUg-IQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:57:47 GMT
age: 26849
etag: "691a36cde98a9fe1660745dd811e0be2ae67036c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg | 34.120.237.76 | 200 OK | 14 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb946c4f2f177828cf7b76c5764e97157 c3856686b98e1883133aa1824c496d34512769a0 be818a015fc9c745ea561a0b9c2aca6ba25ade24acd696fa651163d47b195371
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13796
x-amzn-requestid: 90b1e032-78c6-499d-b564-f25c15e20304
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ2OG0SoAMFx-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6358568e-599d0f526fc6a01f77b67dcf;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: sVS9nFgRyVconkkFTOrCO2zA0cICFNQFB2E1q7SQcVQm5_Dm6khvrA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:48:40 GMT
age: 27396
etag: "c3856686b98e1883133aa1824c496d34512769a0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9f8e8b2-cbee-42dd-a8d8-d4165e9a97ae.jpeg | 34.120.237.76 | 200 OK | 3.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9f8e8b2-cbee-42dd-a8d8-d4165e9a97ae.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6dbedb2a47310dcc21ddb2f9c15ca08a aa1c7300ce49a977fc7ed17534d48c04ec8c34fc dc4edcfaa03bcccfd66cdacba33167877be7b0b746b9028fe9d82d71feefed2c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9f8e8b2-cbee-42dd-a8d8-d4165e9a97ae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3695
x-amzn-requestid: 1f93357b-84e1-4d8a-acb9-1dd1cef05850
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alLEGEC7oAMFRdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63585880-2b8258fe17c7b32b32f1e19b;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:43:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: N_LCkzwXowXaHNsLExt-MvDWM1OLJ_RFvTGD_s9KY16q9nHT0mEftQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:56:02 GMT
etag: "aa1c7300ce49a977fc7ed17534d48c04ec8c34fc"
content-type: image/jpeg
age: 26954
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb46a778e-e75b-47e4-aeb6-86c999571ae0.jpeg | 34.120.237.76 | 200 OK | 6.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb46a778e-e75b-47e4-aeb6-86c999571ae0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash83eeb2a673d2d0b119ba37fec52d30d1 e4d440e51b826e2cd69a00f4abf195971b2843df 4a15ba8118e9ecfe75177a4ae36fe97f14f4d9b4c6938d5863e7ae805bccb431
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb46a778e-e75b-47e4-aeb6-86c999571ae0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6090
x-amzn-requestid: ab19f9fb-ebca-468d-9fb4-b70b4812a5b1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alKjiEiNoAMFQ8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635857b0-63fc3f874e6015777194599c;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:40:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: nM-3r-MLfIaGrc1e2d-YfIjT_Zb6JElPb73k2Qmpksg2NxaOqbUZkQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:48:48 GMT
age: 27388
etag: "e4d440e51b826e2cd69a00f4abf195971b2843df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash19132f29a8811a10f90eca2d81e5deb8 3b9e0bbf9f40f46b57dad5567b008e58b5770565 708aeab241760b108d60c1462b1979e59cf473242222e9270705ba70642b04f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash77b5da0f60755df91da1b98333c6d33c 0c36c5f1063e2ef41d02e26ddf9ed1e0a490e6b4 085b499d52d53965301db8affc692e09876290e5d67bf09c83178cc54384999f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| secure.mlstatic.com/sdk/javascript/v1/mercadopago.js | 23.36.79.8 | 200 OK | 9.1 kB |
URL HTTP/1.1secure.mlstatic.com/sdk/javascript/v1/mercadopago.js IP23.36.79.8:0 ASN#20940 Akamai International B.V.
File typeUnicode text, UTF-8 text, with very long lines (25829), with no line terminators Hash13e3cc8ff400bf1da09ba98065151e4a 05da8917634372f71cd2f851e42129fecfb2f45f 9fb8f6afd1ae3d95fbd299a8a9b63fb83e653410c7a9cd0e42fbb75b4faf1c36
GET /sdk/javascript/v1/mercadopago.js HTTP/1.1
Host: secure.mlstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 9065
Server: Tengine
Vary: Accept-Encoding
Content-Encoding: gzip
ETag: "825262-9065-1647036440000"
Last-Modified: Fri, 11 Mar 2022 22:07:20 GMT
x-envoy-upstream-service-time: 2
x-envoy-decorator-operation: production.openplatform-sdk-javascript.melifrontends.com
X-Request-Id: d2e52704-7958-472c-b559-cac792b41f98
X-Request-Device-Id: d2e52704-7958-472c-b559-cac792b41f98
X-D2id: d2e52704-7958-472c-b559-cac792b41f98
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Cache-Access-Control-Allow-Origin: *
Cache-Control: max-age=3600
Date: Wed, 26 Oct 2022 05:25:19 GMT
Connection: keep-alive
|
|
| www.google.com/recaptcha/api.js?render=6LdxeuoUAAAAAP6iiKD6JZKojOflG8Z_w0Ebx6LC | 142.250.74.164 | 200 OK | 585 B |
URL HTTP/2www.google.com/recaptcha/api.js?render=6LdxeuoUAAAAAP6iiKD6JZKojOflG8Z_w0Ebx6LC IP142.250.74.164:0
File typeASCII text, with very long lines (884), with no line terminators Hash1c688e8b7ed088521762f89cbd72e218 1583739e93dd4910cac00db5bfa2ad3a2c8856f7 12d5e7dbe1cc3027cb2663e42a4cd5654433c5bf1d4e370dfefb19475ec67f5c
GET /recaptcha/api.js?render=6LdxeuoUAAAAAP6iiKD6JZKojOflG8Z_w0Ebx6LC HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 26 Oct 2022 05:25:19 GMT
date: Wed, 26 Oct 2022 05:25:19 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 585
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash365b90964da78d42adf726c6c3fcea38 1f59a9394dd64da56ee9e9fe41d3d69094a9833e a968c10dc97f7a3fe59d7a6e37e1d93c44d379e8f936b577543f617827bc405b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=118055
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:19 GMT
Etag: "6357eee6-118"
Expires: Thu, 27 Oct 2022 14:12:54 GMT
Last-Modified: Tue, 25 Oct 2022 14:12:54 GMT
Server: nginx
Content-Length: 280
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash65cf7a596d35a0d33b98e641657eb075 dd63734bbb6a642451e988e1d8b4904041cb7909 68c8cacaab06cab12590bad424c13e6cf0bdd30db4e5d14c7d06669aaab84862
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3398
Cache-Control: max-age=157836
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:19 GMT
Etag: "63587d05-1d7"
Expires: Fri, 28 Oct 2022 01:15:55 GMT
Last-Modified: Wed, 26 Oct 2022 00:19:17 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash760d2d7b95f166f83ebff72a7824c4de 2c4923a7adffb2886c651f78587f1dfcf785ed00 07fdda419c2e7814b392cab889af1c53551295aeb3c7e8ae8161a4552db385db
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=165193
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:19 GMT
Etag: "6358a708-117"
Expires: Fri, 28 Oct 2022 03:18:32 GMT
Last-Modified: Wed, 26 Oct 2022 03:18:32 GMT
Server: nginx
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash760d2d7b95f166f83ebff72a7824c4de 2c4923a7adffb2886c651f78587f1dfcf785ed00 07fdda419c2e7814b392cab889af1c53551295aeb3c7e8ae8161a4552db385db
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=165193
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:19 GMT
Etag: "6358a708-117"
Expires: Fri, 28 Oct 2022 03:18:32 GMT
Last-Modified: Wed, 26 Oct 2022 03:18:32 GMT
Server: nginx
Content-Length: 279
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash19132f29a8811a10f90eca2d81e5deb8 3b9e0bbf9f40f46b57dad5567b008e58b5770565 708aeab241760b108d60c1462b1979e59cf473242222e9270705ba70642b04f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash130509513bc271340f20f1c556b2592a 6fd8b0623344d4c06ecf4e0708eb51a37d79ed9d 6a69bfbb5b21f5cfae366b21ab59426e78d51467926430c7bbf44d7f8ac704de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn.yampi.me/jquery/jquery.js | 104.26.2.88 | 200 OK | 35 kB |
URL HTTP/2cdn.yampi.me/jquery/jquery.js IP104.26.2.88:0
File typeASCII text, with very long lines (32060) Hasha73252b497de6985292d870424f3e248 2e7d7919f1670c0d3fa905fcfbbdcd53bb1514aa d2ee8063e2dad9087b5b2590cae489fe25591f6526be240c634e1553a1a9a206
GET /jquery/jquery.js HTTP/1.1
Host: cdn.yampi.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 05:25:19 GMT
content-type: application/javascript
x-amz-id-2: QsmtL8/nVojRDvW+BmEU501Lw4WV+5t5F8LfBudh5F+R0IvsUm6Z0OFwq4bu2oMNhxhgi4mZaYc=
x-amz-request-id: VXXM8XE9A56HSH68
last-modified: Tue, 24 Sep 2019 11:23:34 GMT
x-amz-version-id: 6XhfNvj9UGB1eWzPJf8PFJnclFrAQqDF
etag: W/"9f7c65c84c8e8c3e317945e8fd89899b"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3303
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zen8QYa3v%2F0cEz4QPGiWTiqT62gS1tImBDpVN%2F%2B7ygRmaJHKMbFwbLM0iNy3lhr9g2UXaqZ8n0zKHOQ5tbyfPimyzDCsOjeH5n%2BSAMVDVt8xLryArGvHFA6Xw49s6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7600c54bdc97b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/s/gts1d4/T24lFG9LNcQ | 142.250.74.3 | 200 OK | 471 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1d4/T24lFG9LNcQ IP142.250.74.3:0
Hash615f7d2e3b7884859d06ac93f7ce5e58 74425494f4e8d3b3e48fc1ff71b82cce5fa924f6 4f0f5d33007a58993ff5bb00955dd3ae45d0ed84cf6f4e737516e7b6537281cc
POST /s/gts1d4/T24lFG9LNcQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:19 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash760d2d7b95f166f83ebff72a7824c4de 2c4923a7adffb2886c651f78587f1dfcf785ed00 07fdda419c2e7814b392cab889af1c53551295aeb3c7e8ae8161a4552db385db
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=165193
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:19 GMT
Etag: "6358a708-117"
Expires: Fri, 28 Oct 2022 03:18:32 GMT
Last-Modified: Wed, 26 Oct 2022 03:18:32 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279
|
|
| js.upnid.com/v0.js | 130.211.14.112 | 200 OK | 8.3 kB |
IP130.211.14.112:0
File typeUnicode text, UTF-8 text, with very long lines (23050) Hash49fa980f95bb3bbff8b7a2857a727d5d 9e931943f03079522318820948018d78610eaca4 4e295d58275798f67bf7b9c48b8cae16238c9a3dabca082238e7bab8eaa34943
GET /v0.js HTTP/1.1
Host: js.upnid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Origin
content-encoding: br
via: 1.1 google
content-length: 8310
date: Wed, 26 Oct 2022 04:40:21 GMT
age: 2698
last-modified: Tue, 19 Jan 2021 20:16:07 GMT
content-type: text/javascript; charset=utf-8
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/s/gts1d4/T24lFG9LNcQ | 142.250.74.3 | 200 OK | 471 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1d4/T24lFG9LNcQ IP142.250.74.3:0
Hash615f7d2e3b7884859d06ac93f7ce5e58 74425494f4e8d3b3e48fc1ff71b82cce5fa924f6 4f0f5d33007a58993ff5bb00955dd3ae45d0ed84cf6f4e737516e7b6537281cc
POST /s/gts1d4/T24lFG9LNcQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:19 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash760d2d7b95f166f83ebff72a7824c4de 2c4923a7adffb2886c651f78587f1dfcf785ed00 07fdda419c2e7814b392cab889af1c53551295aeb3c7e8ae8161a4552db385db
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=165193
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:19 GMT
Etag: "6358a708-117"
Expires: Fri, 28 Oct 2022 03:18:32 GMT
Last-Modified: Wed, 26 Oct 2022 03:18:32 GMT
Server: nginx
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash91b097cbbd92ab69a28e14912c17085e 7007791b7f7ae1a89bca7dd8e69c6baf113705f0 76c10e3aafc236fe7cb41bcafdc313b36e5396455146f847fad5cf323f73afad
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=140019
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:19 GMT
Etag: "635844b2-1d7"
Expires: Thu, 27 Oct 2022 20:18:58 GMT
Last-Modified: Tue, 25 Oct 2022 20:18:58 GMT
Server: nginx
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf53618f3571d7807123a8aa299ac5c2d c311cd66a3d8ab73dcc703e0a177f2d1aa8213e7 05777f06907622db07f6c5a3341419a56d52ec82c04b59d2355b503f183dbe91
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "05777F06907622DB07F6C5A3341419A56D52EC82C04B59D2355B503F183DBE91"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20998
Expires: Wed, 26 Oct 2022 11:15:17 GMT
Date: Wed, 26 Oct 2022 05:25:19 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashe4f7139b125683bac76c2b5638a1a643 2f84ea7104d659754e5962f88f504a7189f6f914 c9c550489201a92e8bbe162bca49d4aa6b21fa22b254a6a29502186423b3b579
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashe4f7139b125683bac76c2b5638a1a643 2f84ea7104d659754e5962f88f504a7189f6f914 c9c550489201a92e8bbe162bca49d4aa6b21fa22b254a6a29502186423b3b579
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashe4f7139b125683bac76c2b5638a1a643 2f84ea7104d659754e5962f88f504a7189f6f914 c9c550489201a92e8bbe162bca49d4aa6b21fa22b254a6a29502186423b3b579
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn.shopify.com/s/files/1/0656/8152/2940/products/Lol_250x250.jpg | 162.159.134.68 | 200 OK | 19 kB |
URL HTTP/2cdn.shopify.com/s/files/1/0656/8152/2940/products/Lol_250x250.jpg IP162.159.134.68:0
File typeISO Media, AVIF Image\012- data Hashd74ce0226838fa14f72b60041c7af701 30daa72cfc16b3b993cf4d353fe0a10481181121 9234059f4534772ef4c44edc349c66d216588275e3f11d89c5b8a8bb15c05474
GET /s/files/1/0656/8152/2940/products/Lol_250x250.jpg HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 05:25:20 GMT
content-type: image/avif
content-length: 19337
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0656/8152/2940/products/Lol_250x250.jpg>; rel="canonical"
server-timing: imagery;dur=644.944, imageryFetch;dur=109.663, imageryProcess;dur=533.408;desc="image"
source-length: 284650
source-type: image/jpeg
timing-allow-origin: *
vary: Accept, Accept-Encoding
x-content-type-options: nosniff
x-request-id: 328a4f3f-cc71-4c99-b14d-11c993a7648e
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-central1
last-modified: Wed, 26 Oct 2022 02:47:14 GMT
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 7600c54fa90db50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2 | 216.58.207.195 | 200 OK | 35 kB |
URL HTTP/2fonts.gstatic.com/s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2 IP216.58.207.195:0
Hash0ad7de681c2a853552176de822ead0c2 63e314850fed94a51b13d1996b7d01dd48593d85 cb2fb06f14e2dfce11d26d18b52807dc2e1bdd68d9e3a470f7797948141a50ab
GET /s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://seguro.giftcardsbr.store
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 24 Oct 2022 21:08:19 GMT
expires: Tue, 24 Oct 2023 21:08:19 GMT
cache-control: public, max-age=31536000
age: 116221
last-modified: Mon, 18 Jul 2022 19:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf53618f3571d7807123a8aa299ac5c2d c311cd66a3d8ab73dcc703e0a177f2d1aa8213e7 05777f06907622db07f6c5a3341419a56d52ec82c04b59d2355b503f183dbe91
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "05777F06907622DB07F6C5A3341419A56D52EC82C04B59D2355B503F183DBE91"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20997
Expires: Wed, 26 Oct 2022 11:15:17 GMT
Date: Wed, 26 Oct 2022 05:25:20 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashe4f7139b125683bac76c2b5638a1a643 2f84ea7104d659754e5962f88f504a7189f6f914 c9c550489201a92e8bbe162bca49d4aa6b21fa22b254a6a29502186423b3b579
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash70db7bfb9d8484f6bfc2b31021c61ffd 02dc591af40fbe5d0e1728cd4bc43eeb1cf8cc02 ec3a801e9f8e2797d8a75b6866d8e016f8f6c712a554a6c33c6a0b15f0372251
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5709
Cache-Control: max-age=164814
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:20 GMT
Etag: "63588f41-1d7"
Expires: Fri, 28 Oct 2022 03:12:14 GMT
Last-Modified: Wed, 26 Oct 2022 01:37:05 GMT
Server: ECS (amb/6B8F)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash70db7bfb9d8484f6bfc2b31021c61ffd 02dc591af40fbe5d0e1728cd4bc43eeb1cf8cc02 ec3a801e9f8e2797d8a75b6866d8e016f8f6c712a554a6c33c6a0b15f0372251
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3759
Cache-Control: max-age=162864
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:20 GMT
Etag: "63588f41-1d7"
Expires: Fri, 28 Oct 2022 02:39:44 GMT
Last-Modified: Wed, 26 Oct 2022 01:37:05 GMT
Server: ECS (amb/6B73)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash70db7bfb9d8484f6bfc2b31021c61ffd 02dc591af40fbe5d0e1728cd4bc43eeb1cf8cc02 ec3a801e9f8e2797d8a75b6866d8e016f8f6c712a554a6c33c6a0b15f0372251
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=159105
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:20 GMT
Etag: "63588f41-1d7"
Expires: Fri, 28 Oct 2022 01:37:05 GMT
Last-Modified: Wed, 26 Oct 2022 01:37:05 GMT
Server: nginx
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash70db7bfb9d8484f6bfc2b31021c61ffd 02dc591af40fbe5d0e1728cd4bc43eeb1cf8cc02 ec3a801e9f8e2797d8a75b6866d8e016f8f6c712a554a6c33c6a0b15f0372251
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=159105
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:20 GMT
Etag: "63588f41-1d7"
Expires: Fri, 28 Oct 2022 01:37:05 GMT
Last-Modified: Wed, 26 Oct 2022 01:37:05 GMT
Server: nginx
Content-Length: 471
|
|
| api.mercadopago.com/v1/devices/widgets?referer=https%3A//seguro.giftcardsbr.store | 52.0.94.219 | 200 OK | 0 B |
URL HTTP/2api.mercadopago.com/v1/devices/widgets?referer=https%3A//seguro.giftcardsbr.store IP52.0.94.219:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/devices/widgets?referer=https%3A//seguro.giftcardsbr.store HTTP/1.1
Host: api.mercadopago.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://seguro.giftcardsbr.store/
Origin: https://seguro.giftcardsbr.store
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 05:25:20 GMT
content-type: application/json
content-length: 0
cache-control: max-age=0, private, no-store, no-cache, must-revalidate
access-control-allow-origin: https://seguro.giftcardsbr.store
access-control-allow-credentials: true
x-content-type-options: nosniff
x-request-id: 43bb7758-4740-4653-8eab-f42e306566fc
x-xss-protection: 1; mode=block
strict-transport-security: max-age=16070400; includeSubDomains; preload
access-control-allow-headers: content-type
access-control-allow-methods: PUT, GET, POST, DELETE, OPTIONS
access-control-max-age: 86400
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| api.mercadopago.com/v1/device_sessions/web_device | 52.0.94.219 | 200 OK | 0 B |
URL HTTP/2api.mercadopago.com/v1/device_sessions/web_device IP52.0.94.219:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/device_sessions/web_device HTTP/1.1
Host: api.mercadopago.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://seguro.giftcardsbr.store/
Origin: https://seguro.giftcardsbr.store
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 05:25:20 GMT
content-type: application/json; charset=utf-8
content-length: 0
access-control-allow-origin: https://seguro.giftcardsbr.store
access-control-allow-methods: PUT, GET, POST, DELETE, OPTIONS
access-control-allow-headers: content-type
access-control-max-age: 86400
x-request-id: 2fc13faf-d3cb-4c6a-8b39-2d703f20f65b
x-trace-digest-keys: x-source-ip,x-trace-source,x-request-id,x-trace-digest-99,x-trace-digest-keys,x-trace-existing-keys
x-source-ip: 91.90.42.154
x-b3-spanid: 1e8eceb2935350f2
x-b3-traceid: 1e8eceb2935350f2
x-trace-source: fury_app
x-trace-digest-99: bkVCQoImsJXGfjEbto93XjRjo+qSyq7dTK4oWsOX1DpiA+nPw49BkjOiCKu9LvtX
x-b3-sampled: 0
x-trace-existing-keys: x-b3-sampled,x-b3-spanid,x-b3-traceid
access-control-allow-credentials: true
vary: Accept,Accept-Encoding
cache-control: max-age=0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=16070400; includeSubDomains; preload
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Rubik:wght@400;500;700&display=swap | 142.250.74.10 | 200 OK | 78 kB |
URL HTTP/2fonts.googleapis.com/css2?family=Rubik:wght@400;500;700&display=swap IP142.250.74.10:0
Hashb66e7732b5328dd5d30a5b108f494ab8 a25307f05dce75d2742d0e3bd53b6a51f9e10a12 68c9a6f00f71a445890a0659c3d9bbb00d4dbf973c5c7cab5de58c1a270f08cb
GET /css2?family=Rubik:wght@400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 26 Oct 2022 05:25:19 GMT
date: Wed, 26 Oct 2022 05:25:19 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.mercadolibre.com/jms/lgz/background/etid | 143.204.55.53 | 200 OK | 0 B |
URL HTTP/2www.mercadolibre.com/jms/lgz/background/etid IP143.204.55.53:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jms/lgz/background/etid HTTP/1.1
Host: www.mercadolibre.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seguro.giftcardsbr.store
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 0
date: Wed, 26 Oct 2022 05:25:20 GMT
server: Tengine
set-cookie: _d2id=b1d72a9b-7b4f-4bb7-b3a7-0023c0c863bf-n; Path=/; Domain=.mercadolibre.com; Expires=Thu, 26 Oct 2023 05:25:20 GMT
access-control-allow-origin: *
access-control-expose-headers: Etag
etag: f443e4be-fc8b-49d2-8075-a35a7bdad4cd-1666761920926
cache-control: private, must-revalidate, proxy-revalidate
x-envoy-upstream-service-time: 1
x-envoy-decorator-operation: production.auth-device-profiles-frontend.melifrontends.com
x-request-id: b1d72a9b-7b4f-4bb7-b3a7-0023c0c863bf
x-request-device-id: b1d72a9b-7b4f-4bb7-b3a7-0023c0c863bf
x-d2id: b1d72a9b-7b4f-4bb7-b3a7-0023c0c863bf
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PUEkqc1IGqauQ2nVnpefEVqMaxmzOCm29a8Xrp_73MPFOT5q4h2mSA==
X-Firefox-Spdy: h2
|
|
| api.mercadopago.com/v1/device_sessions/web_device | 52.0.94.219 | 200 OK | 12 kB |
URL HTTP/2api.mercadopago.com/v1/device_sessions/web_device IP52.0.94.219:0
File typeJSON data\012- HTML document, ASCII text, with very long lines (40662), with no line terminators Hash7e423b0d60ae9d0a7a7500766b137c73 2771a040b856e65b2dfc781d9827d165c54b2d06 eb437a8cb2e23a0b7f575db09fe912fede724ab9254b0e2be28e70eaea7edd3f
POST /v1/device_sessions/web_device HTTP/1.1
Host: api.mercadopago.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Content-Length: 48
Origin: https://seguro.giftcardsbr.store
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 05:25:20 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://seguro.giftcardsbr.store
x-request-id: 0dc50033-2cab-4bc1-82d7-0bc24d7ff87d
x-trace-digest-31: nBYDS39D+BRX48K8mwgUbWcsabwmegLwS9m5QxaqfAfuWlwKEcF9lWogGS+p+apj
x-trace-digest-keys: x-source-ip,x-trace-source,x-request-id,x-trace-digest-31,x-trace-digest-keys,x-trace-existing-keys
x-source-ip: 91.90.42.154
x-b3-spanid: c07068e79fbd6b36
x-b3-traceid: c07068e79fbd6b36
x-trace-source: fury_app
x-b3-sampled: 0
x-trace-existing-keys: x-b3-sampled,x-b3-spanid,x-b3-traceid
access-control-allow-credentials: true
vary: Accept-Encoding, Accept,Accept-Encoding
cache-control: max-age=0
set-cookie: profile=1666761920434;Path=/;Max-Age=220752000;HttpOnly;SameSite=none;Secure
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=16070400; includeSubDomains; preload
access-control-allow-headers: Content-Type
access-control-allow-methods: PUT, GET, POST, DELETE, OPTIONS
access-control-max-age: 86400
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashe7f1de4025eee44eed5a0ada1e998d6c fd8bfad40b964ffd3534ac3aff68aaf31d38ba37 fba4107e5627b68a00dc9c31a657be714c85dc7c648b8e8e1c7373cc305f8228
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash0b21021a9952aee1a74f3bd0a3dab020 df8dd2d33f9505ecdf4b57372050ffe264ea34ca 5fb04e8d818840ea60d750ec6a1230a3318202fc25790f0c45cac8fe8302a1f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.gstatic.com/recaptcha/releases/vP4jQKq0YJFzU6e21-BGy3GP/recaptcha__en.js | 142.250.74.163 | 200 OK | 160 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/vP4jQKq0YJFzU6e21-BGy3GP/recaptcha__en.js IP142.250.74.163:0
File typeASCII text, with very long lines (608) Size160 kB (159789 bytes) Hash1230a090d5cedcb9e764406ab9497c1b 3d175bcf4ad9957c3e32611713c01347299b173e 585cafe3d6a3b932804aaa5aeb19a650688a2c15767f513d0d60c1941475c428
GET /recaptcha/releases/vP4jQKq0YJFzU6e21-BGy3GP/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seguro.giftcardsbr.store
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 159789
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 24 Oct 2022 21:08:18 GMT
expires: Tue, 24 Oct 2023 21:08:18 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 02 Oct 2022 20:02:07 GMT
content-type: text/javascript
age: 116223
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 26 Oct 2022 04:41:09 GMT
expires: Wed, 26 Oct 2022 06:41:09 GMT
cache-control: public, max-age=7200
age: 2652
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashe51b6855c0480724d286847fa91528fe ee6a114e7bc79b1aa1f07b31cb90674c2ba77bbc 174e93f5d04840d025c9807d0c752ad4b96a4350ab968025b0856c5e59599d47
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1912
Cache-Control: max-age=133262
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:21 GMT
Etag: "635822d7-1d7"
Expires: Thu, 27 Oct 2022 18:26:23 GMT
Last-Modified: Tue, 25 Oct 2022 17:54:31 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
|
|
| seguro.giftcardsbr.store/cart/recomm |  170.82.173.30 | 200 OK | 809 B |
URL HTTP/2seguro.giftcardsbr.store/cart/recomm IP170.82.173.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
Hashde51aca32d4b80b1143ef0d090689fba 2df76de896223832127b2245a546950a3aca71a9 f35d339961c3d52b90e55ef4d3a7c9e6d20735b0290d7f2a1feb727afd82e8dd
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /cart/recomm HTTP/1.1
Host: seguro.giftcardsbr.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/checkout/address
Cookie: XSRF-TOKEN=eyJpdiI6InNub2tSOENZWnBBVnJKK0gwWWhsU0E9PSIsInZhbHVlIjoiTmV4cDliQzRhWVFxblhRUWVLNk0zV1dOOFY3aGFmM2o0Y0hTWVU2dFpYSGxFd1FFOVlLbW1ta1U1Q2NhQmFhOEZpZFEzSmcxcmJBbG1pcFRjT0grclE9PSIsIm1hYyI6ImQxNTg3YjY1NTVlMWEzYTJlYTcxYzE5YTBiNTM0NWRjMDZkYjZlMWVhNGU0NWQ3NjAwMDVlYWI3ZTE2ZjdhOWMifQ%3D%3D; bubbstore_checkout=eyJpdiI6Ik1HNUl3TDdvcHUzdHhsa2U4NGs4UUE9PSIsInZhbHVlIjoieE84RCtIZ0dhRkhDc2k3K3BwZW1DTnZYSm5YT3gwQjdcL0tLREEwdUNwRXlVOVhDSVZNaVhJZ0xCOE0yN3hmVVpQVGhxWEZRdUxtQloyVk5CXC9FaEdtUT09IiwibWFjIjoiNmFlNjJlYjY5YzAyNGY5MjQ3ZjUyYTU5MzMzYWEzZDhhYzRhZmU2NmFlMzNlMmU1M2FhZDQ0YzdjZDBmODBlOCJ9; giftcards_cart=eyJpdiI6IkpuNUdsYzdMOVU2NVpuMmNcL3RMVmxBPT0iLCJ2YWx1ZSI6IjVOUnd1M3BWOXdlc0JhaUlhTWxaTERGTlJCUTNJcFpnNGxZN0pJZ2RPaGZ2dURvK2ZaOXpoQ25NdjM3V3FTZDc0N1VcL0xneG1MN0Z3b1BpSWlUejM0UT09IiwibWFjIjoiODYzODc2MTk3MzZhMWViZWNmYTQxZDk5ODg2OGZiMzliZjM3ODBkOWVkMzFlMGJmZTMwYjk1OWVmYjUyODhjNCJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 05:25:20 GMT
content-type: application/json
x-protected-by: Sqreen
access-control-allow-origin: *
set-cookie: XSRF-TOKEN=eyJpdiI6IlRGT1BmZnNMWlNCY05RVlZXMit1SkE9PSIsInZhbHVlIjoiVjVhR3BOaFwvUXE4XC91RW9WcDF3UzBKcUEyNkNnZFdjdmc3NDlpUnlwXC9PRFZvc3dSSFhTWUpwTVFPQVdVa2E4UkcxRHdEUTZTejErM1NPY00xZ1wvbEpRPT0iLCJtYWMiOiJlNTY2YjE4OWFjMDhkNDNiNDM5YTMxNjJhZjlhOTIyMTM1ZThjZDg1ZDI4YjI1MjIyZTE0ZTVjYTQ1NzliZDZiIn0%3D; expires=Wed, 26-Oct-2022 08:25:20 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6ImN2enJLRVhiSUNnSGpMTHB5MlNuU3c9PSIsInZhbHVlIjoiRnd5SmlnNzBaQUg3WmNzQ0l3Z1lYM2VTdmJCbG1EYldlZXpMdWExdHRUY3ExeDdQUFNWcEpSREt0aHpYT05YYXgwdTFxSDQyZzN5Qnp1Q2Z0XC9GVHFnPT0iLCJtYWMiOiIzYzJiZjcxYTQ0NzdmZTMwNDZmMTUyM2RhOWRkZjVkZmNiOTcwMjY1NGEyNTI3NjU1ZGMzN2JlY2NhY2IxMjQ0In0%3D; expires=Wed, 26-Oct-2022 08:25:20 GMT; Max-Age=10800; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashe51b6855c0480724d286847fa91528fe ee6a114e7bc79b1aa1f07b31cb90674c2ba77bbc 174e93f5d04840d025c9807d0c752ad4b96a4350ab968025b0856c5e59599d47
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4054
Cache-Control: max-age=135404
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:21 GMT
Etag: "635822d7-1d7"
Expires: Thu, 27 Oct 2022 19:02:05 GMT
Last-Modified: Tue, 25 Oct 2022 17:54:31 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashd68830f33c12f2aa839ecd5c96146bb2 c4eca00dde1d737943bc2980b58a7288c06f808c 0b8dd5b33360dae55b75de1bb81fc9404103824c8d987372d1c44f425052f0d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-45745009-5&cid=661136210.1666761918&jid=232408415&gjid=2146782475&_gid=1046357910.1666761918&_u=IEDAAAASAAAAAC~&z=1094284605 | 173.194.222.155 | 200 OK | 1 B |
URL HTTP/2stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-45745009-5&cid=661136210.1666761918&jid=232408415&gjid=2146782475&_gid=1046357910.1666761918&_u=IEDAAAASAAAAAC~&z=1094284605 IP173.194.222.155:0
File typevery short file (no magic) Hashc4ca4238a0b923820dcc509a6f75849b 356a192b7913b04c54574d18c28d46e6395428ab 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-45745009-5&cid=661136210.1666761918&jid=232408415&gjid=2146782475&_gid=1046357910.1666761918&_u=IEDAAAASAAAAAC~&z=1094284605 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://seguro.giftcardsbr.store
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://seguro.giftcardsbr.store
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 26 Oct 2022 05:25:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashd68830f33c12f2aa839ecd5c96146bb2 c4eca00dde1d737943bc2980b58a7288c06f808c 0b8dd5b33360dae55b75de1bb81fc9404103824c8d987372d1c44f425052f0d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashf459c29df3b68d729d80ba21de170ed3 138db475c67a66e94e50118f3b7e94856222d435 e1095bdfe68d5230ffcd954b79038eb8af5f5b63d311a12730d485642909f3b8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=140363
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:21 GMT
Etag: "6358460c-1d7"
Expires: Thu, 27 Oct 2022 20:24:45 GMT
Last-Modified: Tue, 25 Oct 2022 20:24:44 GMT
Server: nginx
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashf459c29df3b68d729d80ba21de170ed3 138db475c67a66e94e50118f3b7e94856222d435 e1095bdfe68d5230ffcd954b79038eb8af5f5b63d311a12730d485642909f3b8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=140363
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 05:25:21 GMT
Etag: "6358460c-1d7"
Expires: Thu, 27 Oct 2022 20:24:44 GMT
Last-Modified: Tue, 25 Oct 2022 20:24:44 GMT
Server: nginx
Content-Length: 471
|
|
| cdn.yampi.io/ana/ana.min.js?t=1666828800000 | 104.18.15.227 | 200 OK | 0 B |
URL HTTP/2cdn.yampi.io/ana/ana.min.js?t=1666828800000 IP104.18.15.227:0
GET /ana/ana.min.js?t=1666828800000 HTTP/1.1
Host: cdn.yampi.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 05:25:20 GMT
content-type: application/javascript
x-amz-id-2: aJPeIHNkdsuFKzonazebAc2C2BmhhaMywlOKpKBrP+VKbiKZxwwgXa2n9X9RiFFVo/wRaXeFwd0=
x-amz-request-id: JS0HBTS5CQSAC64A
last-modified: Sun, 26 Jun 2022 23:28:17 GMT
x-amz-version-id: QVByH4DoJS5uOcK0PZ6NhcCV1oJEdR5U
etag: W/"e7cabc20ce5d56c20d8c4577a36e2525"
cf-cache-status: HIT
expires: Thu, 26 Oct 2023 05:25:20 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 7600c54fec0bfab4-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?dsh=S-1224417728%3A1666761921135498&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQDHYWp2kf2R_O1dK5nWwc9NwvlhkrN1WKkVvP18HtMd0xB6i3Zjp9xcv8JJVrN_K5KtBbxD7289 | 216.58.207.237 | 403 Forbidden | 0 B |
URL HTTP/2accounts.google.com/v3/signin/identifier?dsh=S-1224417728%3A1666761921135498&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQDHYWp2kf2R_O1dK5nWwc9NwvlhkrN1WKkVvP18HtMd0xB6i3Zjp9xcv8JJVrN_K5KtBbxD7289 IP216.58.207.237:0
GET /v3/signin/identifier?dsh=S-1224417728%3A1666761921135498&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQDHYWp2kf2R_O1dK5nWwc9NwvlhkrN1WKkVvP18HtMd0xB6i3Zjp9xcv8JJVrN_K5KtBbxD7289 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://seguro.giftcardsbr.store/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 26 Oct 2022 05:25:21 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-07HmU5catuWsKRF5U4_1LA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.mercadolibre.com/jms/lgz/background?dps=armor.1ccb73ae3bac4f6cf055ff5756197ba8b49bbc1470f85223baf223282557b858bb854e1ce12072acc1e7ad6ada19cb28b3ddc4b832a532b02057a40badf70a1d1e66de6e6697adb587b0ac35d706eaa499aa51fe88c3ca1a12f834df1d18e471.406a5da7dbdb589ce9ed81518304f1a5 | 143.204.55.53 | 200 OK | 0 B |
URL HTTP/2www.mercadolibre.com/jms/lgz/background?dps=armor.1ccb73ae3bac4f6cf055ff5756197ba8b49bbc1470f85223baf223282557b858bb854e1ce12072acc1e7ad6ada19cb28b3ddc4b832a532b02057a40badf70a1d1e66de6e6697adb587b0ac35d706eaa499aa51fe88c3ca1a12f834df1d18e471.406a5da7dbdb589ce9ed81518304f1a5 IP143.204.55.53:0
GET /jms/lgz/background?dps=armor.1ccb73ae3bac4f6cf055ff5756197ba8b49bbc1470f85223baf223282557b858bb854e1ce12072acc1e7ad6ada19cb28b3ddc4b832a532b02057a40badf70a1d1e66de6e6697adb587b0ac35d706eaa499aa51fe88c3ca1a12f834df1d18e471.406a5da7dbdb589ce9ed81518304f1a5 HTTP/1.1
Host: www.mercadolibre.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Wed, 26 Oct 2022 05:25:22 GMT
server: Tengine
set-cookie: _d2id=55b2d417-0785-40d4-b877-57ef80f237a9-n; Path=/; Domain=.mercadolibre.com; Expires=Thu, 26 Oct 2023 05:25:22 GMT
access-control-allow-origin: *
x-transaction-name: cross_domain_profiler
content-encoding: gzip
x-envoy-upstream-service-time: 4
x-envoy-decorator-operation: production.auth-device-profiles-frontend.melifrontends.com
x-request-id: 55b2d417-0785-40d4-b877-57ef80f237a9
x-request-device-id: 55b2d417-0785-40d4-b877-57ef80f237a9
x-d2id: 55b2d417-0785-40d4-b877-57ef80f237a9
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GDAV8HaBoeyVz398UshpHdkBp0OuV8qqw4kFXh4iwvvrgWc4sIHdZw==
X-Firefox-Spdy: h2
|
|
| www.mercadolibre.com/jms/lgz/background/session/armor.3bce8a102433453f6174acc7645bbe9dbedfeff99945acfa478e8cc5d147b0986a7dca8028be0931a64a05fa4fe10a65c129a771e3c14dab885c84a412f129168dfa4c3fca926a9d151264fbb42e222459fba5850e41d8b37a38b85bb35531fe.d93c0f9583bfff6f214e7d1b35bb8b17?background=armor.3bce8a102433453f6174acc7645bbe9dbedfeff99945acfa478e8cc5d147b0986a7dca8028be0931a64a05fa4fe10a65c129a771e3c14dab885c84a412f129168dfa4c3fca926a9d151264fbb42e222459fba5850e41d8b37a38b85bb35531fe.d93c0f9583bfff6f214e7d1b35bb8b17&message=eyJqc190eXBlIjoianNfY29va2llIiwidmFsdWUiOiJ4In0%3D | 143.204.55.53 | 200 OK | 0 B |
URL HTTP/2www.mercadolibre.com/jms/lgz/background/session/armor.3bce8a102433453f6174acc7645bbe9dbedfeff99945acfa478e8cc5d147b0986a7dca8028be0931a64a05fa4fe10a65c129a771e3c14dab885c84a412f129168dfa4c3fca926a9d151264fbb42e222459fba5850e41d8b37a38b85bb35531fe.d93c0f9583bfff6f214e7d1b35bb8b17?background=armor.3bce8a102433453f6174acc7645bbe9dbedfeff99945acfa478e8cc5d147b0986a7dca8028be0931a64a05fa4fe10a65c129a771e3c14dab885c84a412f129168dfa4c3fca926a9d151264fbb42e222459fba5850e41d8b37a38b85bb35531fe.d93c0f9583bfff6f214e7d1b35bb8b17&message=eyJqc190eXBlIjoianNfY29va2llIiwidmFsdWUiOiJ4In0%3D IP143.204.55.53:0
GET /jms/lgz/background/session/armor.3bce8a102433453f6174acc7645bbe9dbedfeff99945acfa478e8cc5d147b0986a7dca8028be0931a64a05fa4fe10a65c129a771e3c14dab885c84a412f129168dfa4c3fca926a9d151264fbb42e222459fba5850e41d8b37a38b85bb35531fe.d93c0f9583bfff6f214e7d1b35bb8b17?background=armor.3bce8a102433453f6174acc7645bbe9dbedfeff99945acfa478e8cc5d147b0986a7dca8028be0931a64a05fa4fe10a65c129a771e3c14dab885c84a412f129168dfa4c3fca926a9d151264fbb42e222459fba5850e41d8b37a38b85bb35531fe.d93c0f9583bfff6f214e7d1b35bb8b17&message=eyJqc190eXBlIjoianNfY29va2llIiwidmFsdWUiOiJ4In0%3D HTTP/1.1
Host: www.mercadolibre.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 26 Oct 2022 05:25:22 GMT
server: Tengine
cache-control: max-age=0, private, no-store, no-cache, must-revalidate
x-transaction-name: save_js_profiling
set-cookie: _d2id=f78cd154-75a9-4064-b2c2-e37839f7a565-n; Path=/; Domain=.mercadolibre.com; Expires=Thu, 26 Oct 2023 05:25:22 GMT
dsid=6a64cbb1-a71a-441c-91fb-57ce2784ebeb-1666761922193;Path=/;Max-Age=220752000;HttpOnly;Domain=.mercadolibre.com;SameSite=none;Secure
edsid=653eac76-3c23-4e1f-a9c9-076eb6c9a695-1666761922193;Path=/;Max-Age=220752000;HttpOnly;Domain=.mercadolibre.com;SameSite=none;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 13
x-envoy-decorator-operation: production.auth-device-profiles-frontend.melifrontends.com
x-request-id: f78cd154-75a9-4064-b2c2-e37839f7a565
x-request-device-id: f78cd154-75a9-4064-b2c2-e37839f7a565
x-d2id: f78cd154-75a9-4064-b2c2-e37839f7a565
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: alzy37HdIf-3ovhpPHoDNzN5yqwo-tOrYHBUiJ65Fddg2GJM34uqsw==
X-Firefox-Spdy: h2
|
|
| seguro.giftcardsbr.store/e/t | 170.82.173.30 | 200 OK | 0 B |
URL HTTP/2seguro.giftcardsbr.store/e/t IP170.82.173.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
POST /e/t HTTP/1.1
Host: seguro.giftcardsbr.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 358
Origin: https://seguro.giftcardsbr.store
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/checkout/address
Cookie: XSRF-TOKEN=eyJpdiI6InNub2tSOENZWnBBVnJKK0gwWWhsU0E9PSIsInZhbHVlIjoiTmV4cDliQzRhWVFxblhRUWVLNk0zV1dOOFY3aGFmM2o0Y0hTWVU2dFpYSGxFd1FFOVlLbW1ta1U1Q2NhQmFhOEZpZFEzSmcxcmJBbG1pcFRjT0grclE9PSIsIm1hYyI6ImQxNTg3YjY1NTVlMWEzYTJlYTcxYzE5YTBiNTM0NWRjMDZkYjZlMWVhNGU0NWQ3NjAwMDVlYWI3ZTE2ZjdhOWMifQ%3D%3D; bubbstore_checkout=eyJpdiI6Ik1HNUl3TDdvcHUzdHhsa2U4NGs4UUE9PSIsInZhbHVlIjoieE84RCtIZ0dhRkhDc2k3K3BwZW1DTnZYSm5YT3gwQjdcL0tLREEwdUNwRXlVOVhDSVZNaVhJZ0xCOE0yN3hmVVpQVGhxWEZRdUxtQloyVk5CXC9FaEdtUT09IiwibWFjIjoiNmFlNjJlYjY5YzAyNGY5MjQ3ZjUyYTU5MzMzYWEzZDhhYzRhZmU2NmFlMzNlMmU1M2FhZDQ0YzdjZDBmODBlOCJ9; giftcards_cart=eyJpdiI6IkpuNUdsYzdMOVU2NVpuMmNcL3RMVmxBPT0iLCJ2YWx1ZSI6IjVOUnd1M3BWOXdlc0JhaUlhTWxaTERGTlJCUTNJcFpnNGxZN0pJZ2RPaGZ2dURvK2ZaOXpoQ25NdjM3V3FTZDc0N1VcL0xneG1MN0Z3b1BpSWlUejM0UT09IiwibWFjIjoiODYzODc2MTk3MzZhMWViZWNmYTQxZDk5ODg2OGZiMzliZjM3ODBkOWVkMzFlMGJmZTMwYjk1OWVmYjUyODhjNCJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 05:25:20 GMT
content-type: text/html; charset=UTF-8
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6IjZRYUpldzhndHFaa2hTc3gyS0xYK3c9PSIsInZhbHVlIjoiQ2JoWEN6VlJrTUhBMWF1cTFnMDBDZ043eWJQeWZlMEI5Q2RVTmYrNVJnSHliMitxUXBMcnZweFZEc2l6SmVVc3RXa21tZVJXOVVtOFAzNm8yRGZtcmc9PSIsIm1hYyI6IjQ0M2Q5NzllMTE4NGE1NTA0NzUyNDI2NTFmMzA4ZTlhYzQwN2RmOWVhMzMyNDA0NDI3M2E1OTJkZjg1OTI0YzIifQ%3D%3D; expires=Wed, 26-Oct-2022 08:25:20 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6IlBzMUFNRDd0WE4wcGRVS1FWaHJpUWc9PSIsInZhbHVlIjoibDU1RGlwbmF6R2duTHoxY1lrUjVjNmFWSUgxZ2ttaUJLN004clwvbE52cUNyUitqM05DWHpHaG9mdU1BTktVWnpDVzd3ajBTUVpVajlrVkdlYkFqWkhBPT0iLCJtYWMiOiIwNzBjM2NkYzkwODc0YzM5OTRmNTcwOWZlZTYwYzQ2OTE2N2Q5MmM3MDJkM2ZiMWI4OTc5NjAxN2JhMWQ3MmFkIn0%3D; expires=Wed, 26-Oct-2022 08:25:20 GMT; Max-Age=10800; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.mercadolivre.com/jms/mlb/lgz/background/session/armor.1ccb73ae3bac4f6cf055ff5756197ba8b49bbc1470f85223baf223282557b858bb854e1ce12072acc1e7ad6ada19cb28b3ddc4b832a532b02057a40badf70a1d1e66de6e6697adb587b0ac35d706eaa499aa51fe88c3ca1a12f834df1d18e471.406a5da7dbdb589ce9ed81518304f1a5?background=armor.1ccb73ae3bac4f6cf055ff5756197ba8b49bbc1470f85223baf223282557b858bb854e1ce12072acc1e7ad6ada19cb28b3ddc4b832a532b02057a40badf70a1d1e66de6e6697adb587b0ac35d706eaa499aa51fe88c3ca1a12f834df1d18e471.406a5da7dbdb589ce9ed81518304f1a5&message=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%3D | 143.204.55.70 | 200 OK | 0 B |
URL HTTP/2www.mercadolivre.com/jms/mlb/lgz/background/session/armor.1ccb73ae3bac4f6cf055ff5756197ba8b49bbc1470f85223baf223282557b858bb854e1ce12072acc1e7ad6ada19cb28b3ddc4b832a532b02057a40badf70a1d1e66de6e6697adb587b0ac35d706eaa499aa51fe88c3ca1a12f834df1d18e471.406a5da7dbdb589ce9ed81518304f1a5?background=armor.1ccb73ae3bac4f6cf055ff5756197ba8b49bbc1470f85223baf223282557b858bb854e1ce12072acc1e7ad6ada19cb28b3ddc4b832a532b02057a40badf70a1d1e66de6e6697adb587b0ac35d706eaa499aa51fe88c3ca1a12f834df1d18e471.406a5da7dbdb589ce9ed81518304f1a5&message=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%3D IP143.204.55.70:0
GET /jms/mlb/lgz/background/session/armor.1ccb73ae3bac4f6cf055ff5756197ba8b49bbc1470f85223baf223282557b858bb854e1ce12072acc1e7ad6ada19cb28b3ddc4b832a532b02057a40badf70a1d1e66de6e6697adb587b0ac35d706eaa499aa51fe88c3ca1a12f834df1d18e471.406a5da7dbdb589ce9ed81518304f1a5?background=armor.1ccb73ae3bac4f6cf055ff5756197ba8b49bbc1470f85223baf223282557b858bb854e1ce12072acc1e7ad6ada19cb28b3ddc4b832a532b02057a40badf70a1d1e66de6e6697adb587b0ac35d706eaa499aa51fe88c3ca1a12f834df1d18e471.406a5da7dbdb589ce9ed81518304f1a5&message=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%3D HTTP/1.1
Host: www.mercadolivre.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 26 Oct 2022 05:25:22 GMT
server: Tengine
set-cookie: _d2id=600b578e-b930-4476-b016-afe8a34ad172-n; Path=/; Domain=.mercadolivre.com; Expires=Thu, 26 Oct 2023 05:25:22 GMT
cache-control: max-age=0, private, no-store, no-cache, must-revalidate
x-transaction-name: save_js_profiling
content-encoding: gzip
x-envoy-upstream-service-time: 2
x-envoy-decorator-operation: production.auth-device-profiles-frontend.melifrontends.com
x-request-id: 600b578e-b930-4476-b016-afe8a34ad172
x-request-device-id: 600b578e-b930-4476-b016-afe8a34ad172
x-d2id: 600b578e-b930-4476-b016-afe8a34ad172
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-cache: Miss from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Ry_EbfC84t6F5lwGBXLPYn5v9yHGSgU0QkriGeYXjKOG-_7j3zvbtQ==
X-Firefox-Spdy: h2
|
|
| www.mercadolibre.com/jms/lgz/background?dps=armor.1ccb73ae3bac4f6cf055ff5756197ba8b49bbc1470f85223baf223282557b858bb854e1ce12072acc1e7ad6ada19cb28b3ddc4b832a532b02057a40badf70a1d1e66de6e6697adb587b0ac35d706eaa499aa51fe88c3ca1a12f834df1d18e471.406a5da7dbdb589ce9ed81518304f1a5 | 143.204.55.53 | 200 OK | 0 B |
URL HTTP/2www.mercadolibre.com/jms/lgz/background?dps=armor.1ccb73ae3bac4f6cf055ff5756197ba8b49bbc1470f85223baf223282557b858bb854e1ce12072acc1e7ad6ada19cb28b3ddc4b832a532b02057a40badf70a1d1e66de6e6697adb587b0ac35d706eaa499aa51fe88c3ca1a12f834df1d18e471.406a5da7dbdb589ce9ed81518304f1a5 IP143.204.55.53:0
GET /jms/lgz/background?dps=armor.1ccb73ae3bac4f6cf055ff5756197ba8b49bbc1470f85223baf223282557b858bb854e1ce12072acc1e7ad6ada19cb28b3ddc4b832a532b02057a40badf70a1d1e66de6e6697adb587b0ac35d706eaa499aa51fe88c3ca1a12f834df1d18e471.406a5da7dbdb589ce9ed81518304f1a5 HTTP/1.1
Host: www.mercadolibre.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Wed, 26 Oct 2022 05:25:22 GMT
server: Tengine
set-cookie: _d2id=9770fdea-5fd2-402d-83a5-8fbb2682e01d-n; Path=/; Domain=.mercadolibre.com; Expires=Thu, 26 Oct 2023 05:25:22 GMT
access-control-allow-origin: *
x-transaction-name: cross_domain_profiler
content-encoding: gzip
x-envoy-upstream-service-time: 5
x-envoy-decorator-operation: production.auth-device-profiles-frontend.melifrontends.com
x-request-id: 9770fdea-5fd2-402d-83a5-8fbb2682e01d
x-request-device-id: 9770fdea-5fd2-402d-83a5-8fbb2682e01d
x-d2id: 9770fdea-5fd2-402d-83a5-8fbb2682e01d
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 404a0GxHTXiC4-_78CYoN-NqN_6quDcumuK2TqbFKCytlC_xfGmDLA==
X-Firefox-Spdy: h2
|
|
| www.mercadolibre.com/jms/lgz/background/jsuuid?current=00aa69b0-8f06-42f2-9b2b-617f5574066d-1666761922187 | 143.204.55.53 | 200 OK | 0 B |
URL HTTP/2www.mercadolibre.com/jms/lgz/background/jsuuid?current=00aa69b0-8f06-42f2-9b2b-617f5574066d-1666761922187 IP143.204.55.53:0
GET /jms/lgz/background/jsuuid?current=00aa69b0-8f06-42f2-9b2b-617f5574066d-1666761922187 HTTP/1.1
Host: www.mercadolibre.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mercadolibre.com/jms/lgz/background?dps=armor.1ccb73ae3bac4f6cf055ff5756197ba8b49bbc1470f85223baf223282557b858bb854e1ce12072acc1e7ad6ada19cb28b3ddc4b832a532b02057a40badf70a1d1e66de6e6697adb587b0ac35d706eaa499aa51fe88c3ca1a12f834df1d18e471.406a5da7dbdb589ce9ed81518304f1a5
Connection: keep-alive
Cookie: dsid=819dfaea-1725-49a6-b49c-89072c6b8083-1666761922204; edsid=23d652b7-239e-4969-b057-d6c755dbb486-1666761922204
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Wed, 26 Oct 2022 05:25:22 GMT
server: Tengine
set-cookie: _d2id=5936c888-7fe2-487e-81af-aafc942819c4-n; Path=/; Domain=.mercadolibre.com; Expires=Thu, 26 Oct 2023 05:25:22 GMT
access-control-allow-origin: *
content-encoding: gzip
x-envoy-upstream-service-time: 2
x-envoy-decorator-operation: production.auth-device-profiles-frontend.melifrontends.com
x-request-id: 5936c888-7fe2-487e-81af-aafc942819c4
x-request-device-id: 5936c888-7fe2-487e-81af-aafc942819c4
x-d2id: 5936c888-7fe2-487e-81af-aafc942819c4
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KxgqsGUXhumwS_AoVnnSyT24Cldb1z2JCmCK_leNAjjGOBMe8mJN-g==
X-Firefox-Spdy: h2
|
|
| seguro.giftcardsbr.store/cart?cart_token=shopify-8f7bf188da2efa84f531866cba29579c&utm_source=SMS&utm_campaign=Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=af62975f9153506159a052258ce1f69bf8535094&customerToken=e98b2200-54d8-11ed-a854-179e3420a6c2 | 170.82.173.30 | 302 Found | 0 B |
URL HTTP/2seguro.giftcardsbr.store/cart?cart_token=shopify-8f7bf188da2efa84f531866cba29579c&utm_source=SMS&utm_campaign=Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=af62975f9153506159a052258ce1f69bf8535094&customerToken=e98b2200-54d8-11ed-a854-179e3420a6c2 IP170.82.173.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
GET /cart?cart_token=shopify-8f7bf188da2efa84f531866cba29579c&utm_source=SMS&utm_campaign=Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=af62975f9153506159a052258ce1f69bf8535094&customerToken=e98b2200-54d8-11ed-a854-179e3420a6c2 HTTP/1.1
Host: seguro.giftcardsbr.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Wed, 26 Oct 2022 05:25:17 GMT
content-type: text/html; charset=UTF-8
location: https://seguro.giftcardsbr.store/checkout/payment?cart_token=shopify-8f7bf188da2efa84f531866cba29579c&utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&store_token=af62975f9153506159a052258ce1f69bf8535094&customerToken=e98b2200-54d8-11ed-a854-179e3420a6c2
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6IllEWEVIU2FGdU05V3FcLzM4dkpXS3JRPT0iLCJ2YWx1ZSI6IjhJRTNxbEp5XC9JeXNWM1lNNVhCXC9tMUxub2o0OFwvTHdOanhnNEdsNUtzMUhiYWNnQlZQaFlEOWwzMmxnN2VmcmlrZE5HT1BYUlp2XC9EZE1CQVBpWEh5UT09IiwibWFjIjoiOTNiYWI1YjkxYTBiZjQ3NjczYWNmMTJkZjAxMDRhZTBlNTJkM2I5ZWQ2YjRiMWQyMzY3NTZlZDA3MDQ0NTM4NyJ9; expires=Wed, 26-Oct-2022 08:25:17 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6IlVnWkdCXC9YeU1UU3RvZTM2THdMYlRRPT0iLCJ2YWx1ZSI6IkVxWGg2Y3d6K1BhekFqZmVGWVNIXC9MOW5EdE1jMmhwN3N5cmc0VW9NR0pkYmljM0pqclQxeXRTU0cxd08yZGNTS0RZa3lVZHFndTlKR1lLVnFPRENQZz09IiwibWFjIjoiZjBkNDVjZGRhY2UxMzgwZjllNWFmMzJhYWZmNzNhMGJmZjBkNzYxNzc4MjM0ZDZmZGFlNWYzNTU2ZDA1MGEyMCJ9; expires=Wed, 26-Oct-2022 08:25:17 GMT; Max-Age=10800; path=/; httponly
giftcards_cart=eyJpdiI6IkpuNUdsYzdMOVU2NVpuMmNcL3RMVmxBPT0iLCJ2YWx1ZSI6IjVOUnd1M3BWOXdlc0JhaUlhTWxaTERGTlJCUTNJcFpnNGxZN0pJZ2RPaGZ2dURvK2ZaOXpoQ25NdjM3V3FTZDc0N1VcL0xneG1MN0Z3b1BpSWlUejM0UT09IiwibWFjIjoiODYzODc2MTk3MzZhMWViZWNmYTQxZDk5ODg2OGZiMzliZjM3ODBkOWVkMzFlMGJmZTMwYjk1OWVmYjUyODhjNCJ9; expires=Mon, 31-Oct-2022 05:25:17 GMT; Max-Age=432000; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
X-Firefox-Spdy: h2
|
|
| www.mercadopago.com/v2/security.js | 143.204.55.50 | 200 OK | 0 B |
URL HTTP/2www.mercadopago.com/v2/security.js IP143.204.55.50:0
GET /v2/security.js HTTP/1.1
Host: www.mercadopago.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 26 Oct 2022 05:25:19 GMT
set-cookie: _d2id=b9e247b8-eacf-434e-aee2-2ec7f6dcf945-n; Path=/; Domain=.mercadopago.com; Expires=Thu, 26 Oct 2023 05:25:19 GMT
cache-control: max-age=0, private, no-store, no-cache, must-revalidate
x-transaction-name: get_off_widget
content-encoding: gzip
x-request-id: b9e247b8-eacf-434e-aee2-2ec7f6dcf945
x-request-device-id: b9e247b8-eacf-434e-aee2-2ec7f6dcf945
x-d2id: b9e247b8-eacf-434e-aee2-2ec7f6dcf945
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: Miss from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7hJWfNejj6Dr74o45crob2Gr2dDuOjLp9MwlyjQ46uJPQbCMrRrv-w==
X-Firefox-Spdy: h2
|
|
| www.mercadolivre.com/jms/mlb/lgz/background/session/armor.3bce8a102433453f6174acc7645bbe9dbedfeff99945acfa478e8cc5d147b0986a7dca8028be0931a64a05fa4fe10a65c129a771e3c14dab885c84a412f129168dfa4c3fca926a9d151264fbb42e222459fba5850e41d8b37a38b85bb35531fe.d93c0f9583bfff6f214e7d1b35bb8b17?background=armor.3bce8a102433453f6174acc7645bbe9dbedfeff99945acfa478e8cc5d147b0986a7dca8028be0931a64a05fa4fe10a65c129a771e3c14dab885c84a412f129168dfa4c3fca926a9d151264fbb42e222459fba5850e41d8b37a38b85bb35531fe.d93c0f9583bfff6f214e7d1b35bb8b17&message=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%3D | 143.204.55.70 | 200 OK | 0 B |
URL HTTP/2www.mercadolivre.com/jms/mlb/lgz/background/session/armor.3bce8a102433453f6174acc7645bbe9dbedfeff99945acfa478e8cc5d147b0986a7dca8028be0931a64a05fa4fe10a65c129a771e3c14dab885c84a412f129168dfa4c3fca926a9d151264fbb42e222459fba5850e41d8b37a38b85bb35531fe.d93c0f9583bfff6f214e7d1b35bb8b17?background=armor.3bce8a102433453f6174acc7645bbe9dbedfeff99945acfa478e8cc5d147b0986a7dca8028be0931a64a05fa4fe10a65c129a771e3c14dab885c84a412f129168dfa4c3fca926a9d151264fbb42e222459fba5850e41d8b37a38b85bb35531fe.d93c0f9583bfff6f214e7d1b35bb8b17&message=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%3D IP143.204.55.70:0
GET /jms/mlb/lgz/background/session/armor.3bce8a102433453f6174acc7645bbe9dbedfeff99945acfa478e8cc5d147b0986a7dca8028be0931a64a05fa4fe10a65c129a771e3c14dab885c84a412f129168dfa4c3fca926a9d151264fbb42e222459fba5850e41d8b37a38b85bb35531fe.d93c0f9583bfff6f214e7d1b35bb8b17?background=armor.3bce8a102433453f6174acc7645bbe9dbedfeff99945acfa478e8cc5d147b0986a7dca8028be0931a64a05fa4fe10a65c129a771e3c14dab885c84a412f129168dfa4c3fca926a9d151264fbb42e222459fba5850e41d8b37a38b85bb35531fe.d93c0f9583bfff6f214e7d1b35bb8b17&message=eyJhZF9ibG9jayI6ZmFsc2UsImNhbnZhcyI6IjdiZTAwMmIyODcyMDYzYTM0ZTQzZjM0YmYxYjNkMzc0IiwiY29ubmVjdGlvbiI6bnVsbCwiY29va2llX2VuYWJsZWQiOnRydWUsImRldmljZV9tZW1vcnkiOjAsImRvX25vdF90cmFjayI6InVuc3BlY2lmaWVkIiwiZXRhZyI6ImI2MzgyYmY5LTg0YzAtNDg4MC05ZWRkLTQyNWE2NWQ2ZDk2ZS0xNjY2NzYxOTIwOTg3IiwiZm9udHMiOnsib3MiOjI5MTQsIm90aGVyX29zIjoiW1wie1xcXCJQYWxhdGlubyBMaW5vdHlwZVxcXCIgOjJ9XCIsXCJ7XFxcIlVSVyBHb3RoaWMgTFxcXCIgOjB9XCIsXCJ7XFxcIlVSVyBCb29rbWFuIExcXFwiIDowfVwiLFwie1xcXCJVUlcgUGFsbGFkaW8gTFxcXCIgOjB9XCIsXCJ7XFxcIk5pbWJ1cyBTYW5zIExcXFwiIDowfVwiLFwie1xcXCJCb29rbWFuIE9sZHN0eWxlXFxcIiA6NX1cIixcIntcXFwiSGVsdmV0aWNhXFxcIiA6M31cIixcIntcXFwiQ291cmllclxcXCIgOjN9XCIsXCJ7XFxcIkJpdHN0cmVhbSBWZXJhIFNhbnNcXFwiIDozfVwiLFwie1xcXCJCaXRzdHJlYW0gVmVyYSBTYW5zIE1vbm9cXFwiIDozfVwiLFwie1xcXCJCaXRzdHJlYW0gVmVyYSBTZXJpZlxcXCIgOjN9XCIsXCJ7XFxcIk5ldyBDZW50dXJ5IFNjaG9vbGJvb2tcXFwiIDozfVwiLFwie1xcXCJOaW1idXMgTW9ub1xcXCIgOjB9XCIsXCJ7XFxcIkNlbnR1cnkgU2Nob29sYm9vayBMXFxcIiA6MH1cIixcIntcXFwiVVJXIENoYW5jZXJ5IExcXFwiIDowfVwiLFwie1xcXCJEZWphVnUgU2FucyBNb25vXFxcIiA6MH1cIixcIntcXFwiRGVqYVZ1IFNhbnNcXFwiIDowfVwiLFwie1xcXCJEZWphVnUgU2VyaWZcXFwiIDowfVwiXSIsIm5vdF9vcyI6MjkxNH0sImhhcmR3YXJlX2NvbmN1cnJlbmN5IjoxNiwiaGlzdG9yeSI6MSwiaW5jb2duaXRvIjpmYWxzZSwianNfdHlwZSI6ImpzX2hhc2giLCJsYW5nIjoiZW4tVVMiLCJsYW5ndWFnZXMiOlsiZW4tVVMiLCJlbiJdLCJsaXRlcmFsX2NvbG9ycyI6MTc5NjQwNDIyMCwibG9jYWxfc3RvcmFnZSI6dHJ1ZSwibG9naW5fZGV0ZWN0aW9uIjp7Imdvb2dsZSI6ZmFsc2V9LCJtYXRoX251bWJlciI6MTEwMjMuMzg3NDA2MTUwOTQsIm9wZW5fZGF0YWJhc2UiOmZhbHNlLCJwaXhlbF9yYXRpbyI6MSwicGxhdGZvcm0iOiJMaW51eCB4ODZfNjQiLCJ3ZWJnbCI6bnVsbCwicGx1Z2lucyI6e30sInJlc29sdXRpb24iOiIxMDI0eDEyODB4MjQiLCJzY3JlZW4iOnsib3JpZW50YXRpb24iOjAsInR5cGUiOiJsYW5kc2NhcGUtcHJpbWFyeSIsImF2YWlsX2hlaWdodCI6MTAwMiwiYXZhaWxfbGVmdCI6MCwiYXZhaWxfdG9wIjowLCJhdmFpbF93aWR0aCI6MTI4MH0sInNlc3Npb25fc3RvcmFnZSI6dHJ1ZSwidGltZSI6eyJjYW52YXMiOjMwLCJ3ZWJnbCI6MiwidXNlcmZvbnRzIjo4MiwiYnJvd3NlcnBsdWdpbnMiOjAsInBsdWdpbnMiOjAsImluc3RhbGxlZGZvbnRzIjo1MSwiaGFzaCI6MTk0LCJ0b3RhbCI6MTk0fSwidGltZV9iYXNlZF9mcCI6bnVsbCwidGltZV96b25lX25hbWUiOiJVVEMiLCJ0aW1lX3pvbmVfb2Zmc2V0IjowLCJ0b3VjaF9wb2ludHMiOjAsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2Ojk2LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvOTYuMCIsInZlbmRvciI6IiIsIndpbmRvd19zaXplIjp7ImlubmVyIjoiOTM5eDEyODAiLCJvdXRlciI6IjEwMjR4MTI4MCJ9LCJ3ZWJkcml2ZXIiOmZhbHNlLCJpbnN0YWxsZWRfZm9udHMiOlsiUGFsYXRpbm8iLCJUaW1lcyJdLCJpbnN0YWxsZWRfcGx1Z2lucyI6W10sImxpZ2h0X3ZlcnNpb24iOmZhbHNlLCJyZWZlcmVyIjpudWxsLCJ3ZWJjYW0iOmZhbHNlLCJoYXNfc2Vzc2lvbl9pZCI6dHJ1ZX0%3D HTTP/1.1
Host: www.mercadolivre.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 26 Oct 2022 05:25:22 GMT
server: Tengine
set-cookie: _d2id=0250cbb0-2a83-498a-8f0b-30406c9b776a-n; Path=/; Domain=.mercadolivre.com; Expires=Thu, 26 Oct 2023 05:25:22 GMT
cache-control: max-age=0, private, no-store, no-cache, must-revalidate
x-transaction-name: save_js_profiling
content-encoding: gzip
x-envoy-upstream-service-time: 3
x-envoy-decorator-operation: production.auth-device-profiles-frontend.melifrontends.com
x-request-id: 0250cbb0-2a83-498a-8f0b-30406c9b776a
x-request-device-id: 0250cbb0-2a83-498a-8f0b-30406c9b776a
x-d2id: 0250cbb0-2a83-498a-8f0b-30406c9b776a
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-cache: Miss from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0hIhIidV0zcyOPAHbpg5-iGgxgyeN8i1HNNL8_a9JqvYhgU5uS8Q5Q==
X-Firefox-Spdy: h2
|
|
| www.mercadolibre.com/jms/lgz/background/session/armor.1ccb73ae3bac4f6cf055ff5756197ba8b49bbc1470f85223baf223282557b858bb854e1ce12072acc1e7ad6ada19cb28b3ddc4b832a532b02057a40badf70a1d1e66de6e6697adb587b0ac35d706eaa499aa51fe88c3ca1a12f834df1d18e471.406a5da7dbdb589ce9ed81518304f1a5/cross_domain/jsonp?_method=PUT&_body=%7B%22msg%22%3A%22eyJqc3V1aWQiOiIwMGFhNjliMC04ZjA2LTQyZjItOWIyYi02MTdmNTU3NDA2NmQtMTY2Njc2MTkyMjE4NyIsInN1cHBvcnRfaWRiIjp0cnVlLCJpZGJ1dWlkIjoiZDJjOTY4NjAtNGY2Zi00MTc0LWI0NzItYTY4NGM4ZWUwOGZkLTE2NjY3NjE5MjIxODcifQ%3D%3D%22%7D&callback=dp_jsonp.process | 143.204.55.53 | 200 OK | 0 B |
URL HTTP/2www.mercadolibre.com/jms/lgz/background/session/armor.1ccb73ae3bac4f6cf055ff5756197ba8b49bbc1470f85223baf223282557b858bb854e1ce12072acc1e7ad6ada19cb28b3ddc4b832a532b02057a40badf70a1d1e66de6e6697adb587b0ac35d706eaa499aa51fe88c3ca1a12f834df1d18e471.406a5da7dbdb589ce9ed81518304f1a5/cross_domain/jsonp?_method=PUT&_body=%7B%22msg%22%3A%22eyJqc3V1aWQiOiIwMGFhNjliMC04ZjA2LTQyZjItOWIyYi02MTdmNTU3NDA2NmQtMTY2Njc2MTkyMjE4NyIsInN1cHBvcnRfaWRiIjp0cnVlLCJpZGJ1dWlkIjoiZDJjOTY4NjAtNGY2Zi00MTc0LWI0NzItYTY4NGM4ZWUwOGZkLTE2NjY3NjE5MjIxODcifQ%3D%3D%22%7D&callback=dp_jsonp.process IP143.204.55.53:0
GET /jms/lgz/background/session/armor.1ccb73ae3bac4f6cf055ff5756197ba8b49bbc1470f85223baf223282557b858bb854e1ce12072acc1e7ad6ada19cb28b3ddc4b832a532b02057a40badf70a1d1e66de6e6697adb587b0ac35d706eaa499aa51fe88c3ca1a12f834df1d18e471.406a5da7dbdb589ce9ed81518304f1a5/cross_domain/jsonp?_method=PUT&_body=%7B%22msg%22%3A%22eyJqc3V1aWQiOiIwMGFhNjliMC04ZjA2LTQyZjItOWIyYi02MTdmNTU3NDA2NmQtMTY2Njc2MTkyMjE4NyIsInN1cHBvcnRfaWRiIjp0cnVlLCJpZGJ1dWlkIjoiZDJjOTY4NjAtNGY2Zi00MTc0LWI0NzItYTY4NGM4ZWUwOGZkLTE2NjY3NjE5MjIxODcifQ%3D%3D%22%7D&callback=dp_jsonp.process HTTP/1.1
Host: www.mercadolibre.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mercadolibre.com/jms/lgz/background?dps=armor.1ccb73ae3bac4f6cf055ff5756197ba8b49bbc1470f85223baf223282557b858bb854e1ce12072acc1e7ad6ada19cb28b3ddc4b832a532b02057a40badf70a1d1e66de6e6697adb587b0ac35d706eaa499aa51fe88c3ca1a12f834df1d18e471.406a5da7dbdb589ce9ed81518304f1a5
Connection: keep-alive
Cookie: dsid=819dfaea-1725-49a6-b49c-89072c6b8083-1666761922204; edsid=23d652b7-239e-4969-b057-d6c755dbb486-1666761922204
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
date: Wed, 26 Oct 2022 05:25:22 GMT
server: Tengine
set-cookie: _d2id=e8a2dea9-5511-44a8-9759-964c003f732d-n; Path=/; Domain=.mercadolibre.com; Expires=Thu, 26 Oct 2023 05:25:22 GMT
cache-control: max-age=0, private, no-store, no-cache, must-revalidate
x-transaction-name: save_cross_domain_profiling
content-encoding: gzip
x-envoy-upstream-service-time: 1
x-envoy-decorator-operation: production.auth-device-profiles-frontend.melifrontends.com
x-request-id: e8a2dea9-5511-44a8-9759-964c003f732d
x-request-device-id: e8a2dea9-5511-44a8-9759-964c003f732d
x-d2id: e8a2dea9-5511-44a8-9759-964c003f732d
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hbMf3NQjbV0YWk51Qyjh52ElZg5F_jw_N5fzFTYhmJuvvuD6tLg6kQ==
X-Firefox-Spdy: h2
|
|
| seguro.giftcardsbr.store/e/t | 170.82.173.30 | 200 OK | 0 B |
URL HTTP/2seguro.giftcardsbr.store/e/t IP170.82.173.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
POST /e/t HTTP/1.1
Host: seguro.giftcardsbr.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 366
Origin: https://seguro.giftcardsbr.store
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/checkout/address
Cookie: XSRF-TOKEN=eyJpdiI6InNub2tSOENZWnBBVnJKK0gwWWhsU0E9PSIsInZhbHVlIjoiTmV4cDliQzRhWVFxblhRUWVLNk0zV1dOOFY3aGFmM2o0Y0hTWVU2dFpYSGxFd1FFOVlLbW1ta1U1Q2NhQmFhOEZpZFEzSmcxcmJBbG1pcFRjT0grclE9PSIsIm1hYyI6ImQxNTg3YjY1NTVlMWEzYTJlYTcxYzE5YTBiNTM0NWRjMDZkYjZlMWVhNGU0NWQ3NjAwMDVlYWI3ZTE2ZjdhOWMifQ%3D%3D; bubbstore_checkout=eyJpdiI6Ik1HNUl3TDdvcHUzdHhsa2U4NGs4UUE9PSIsInZhbHVlIjoieE84RCtIZ0dhRkhDc2k3K3BwZW1DTnZYSm5YT3gwQjdcL0tLREEwdUNwRXlVOVhDSVZNaVhJZ0xCOE0yN3hmVVpQVGhxWEZRdUxtQloyVk5CXC9FaEdtUT09IiwibWFjIjoiNmFlNjJlYjY5YzAyNGY5MjQ3ZjUyYTU5MzMzYWEzZDhhYzRhZmU2NmFlMzNlMmU1M2FhZDQ0YzdjZDBmODBlOCJ9; giftcards_cart=eyJpdiI6IkpuNUdsYzdMOVU2NVpuMmNcL3RMVmxBPT0iLCJ2YWx1ZSI6IjVOUnd1M3BWOXdlc0JhaUlhTWxaTERGTlJCUTNJcFpnNGxZN0pJZ2RPaGZ2dURvK2ZaOXpoQ25NdjM3V3FTZDc0N1VcL0xneG1MN0Z3b1BpSWlUejM0UT09IiwibWFjIjoiODYzODc2MTk3MzZhMWViZWNmYTQxZDk5ODg2OGZiMzliZjM3ODBkOWVkMzFlMGJmZTMwYjk1OWVmYjUyODhjNCJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 05:25:20 GMT
content-type: text/html; charset=UTF-8
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6Imo1c25ubFwvYlwvS3pvdVppQVwvV0xiQ3c9PSIsInZhbHVlIjoiMVlCTmpmWVh3UDVpWHlFekE3UkgwQTdmRWV5eXNYbGR4WWZSb0g5UlRZdEdiMUNSaTlvYTMwZ2JYXC9MOEk3VlVaZkkzTW5pUDcrS3N6UGw4d216WG93PT0iLCJtYWMiOiI4MzU3ZjUyMWJjMmFkOWZmNjk3Njk4MTdmZjhhNDI5N2NjOWM1MTk3NGVkYmRiZmYxOWUzZWJmNGY3ZWU3ZWIyIn0%3D; expires=Wed, 26-Oct-2022 08:25:20 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6Ijc3QjVzdkRUU25SS2VmWUcydktNZmc9PSIsInZhbHVlIjoiSmJ2eUtDNEpWazc0NmQ4QWtJckI3TnBReUc2NHVkME84RzZLT1NCalhQXC8wdUl0WUxMd0E2TGh0ZEprVUxGNE9YK0xuZWc2SXQzeVh4aUNSaThxb2xRPT0iLCJtYWMiOiJmY2E1YzkxZTcwYTllOGY0OTkxOWI4YmVhYmEyYTk0ODM1ZDk5YjM3ZjJhNzhmNjJkNDFhYTRlODg0NWQxMTBmIn0%3D; expires=Wed, 26-Oct-2022 08:25:20 GMT; Max-Age=10800; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.dooki.com.br/fa/4.7.0/fa.css | 104.18.1.53 | 200 OK | 0 B |
URL HTTP/2fonts.dooki.com.br/fa/4.7.0/fa.css IP104.18.1.53:0
GET /fa/4.7.0/fa.css HTTP/1.1
Host: fonts.dooki.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 05:25:19 GMT
content-type: text/css
x-amz-id-2: gGNPVnAVZsqONOCg389UDgsIhA1ObjBdpsJMkqSZGddyTo93S8XPm4wvAm36dYfVkX+Cf24ZYFI=
x-amz-request-id: G8BNNJCT1K1R1RT8
last-modified: Sat, 10 Nov 2018 14:21:37 GMT
x-amz-version-id: null
etag: W/"36688de682a76454417c56541b1cf51e"
cf-cache-status: HIT
age: 3303
expires: Thu, 03 Nov 2022 05:25:19 GMT
cache-control: public, max-age=691200
vary: Accept-Encoding
server: cloudflare
cf-ray: 7600c54b8d97b50c-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| awesome-assets.yampi.me/checkout/build/mix/assets/js/app.js?id=d8423ccfea4fbb2f406cea92b04a8737 | 104.26.2.88 | 200 OK | 0 B |
URL HTTP/2awesome-assets.yampi.me/checkout/build/mix/assets/js/app.js?id=d8423ccfea4fbb2f406cea92b04a8737 IP104.26.2.88:0
GET /checkout/build/mix/assets/js/app.js?id=d8423ccfea4fbb2f406cea92b04a8737 HTTP/1.1
Host: awesome-assets.yampi.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 05:25:19 GMT
content-type: application/javascript
x-amz-id-2: t+pRi2mpVP/HsO6DPUQ+MwgdDbnyFwdhufrM6mVKoFcR90+4pnZEZq1LTqPIV+vqrgSsO53OeDg=
x-amz-request-id: 8PNW7DEJ2HZN8VAP
last-modified: Mon, 17 Oct 2022 16:57:49 GMT
x-amz-version-id: XNhG7PkF_3JzSvKaF.22AtqXuyl0wmHr
etag: W/"29013ef444dc3b59ed77c986db2a8f06"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3303
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F%2BU1JEJ0LQMgm6EYTSBzCkQZ%2FhCNMrpEf4KESX5BR914fz6QhU5EyAyxvSBhBwWab4zYSowQXltr7ntiJalBKmdZxSIeGVnOBEn5eujN2iG%2BCU%2BKTCnDcmXrZd8NLcP22aM9ycL9%2Fc%2BZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7600c54bdc95b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.mercadopago.com/v1/devices/widgets?referer=https%3A//seguro.giftcardsbr.store | 52.0.94.219 | 200 OK | 0 B |
URL HTTP/2api.mercadopago.com/v1/devices/widgets?referer=https%3A//seguro.giftcardsbr.store IP52.0.94.219:0
POST /v1/devices/widgets?referer=https%3A//seguro.giftcardsbr.store HTTP/1.1
Host: api.mercadopago.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 45
Origin: https://seguro.giftcardsbr.store
Connection: keep-alive
Referer: https://seguro.giftcardsbr.store/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 05:25:20 GMT
content-type: application/json
cache-control: max-age=0, private, no-store, no-cache, must-revalidate
x-transaction-name: public_get_session_widget
access-control-allow-origin: https://seguro.giftcardsbr.store
access-control-allow-credentials: true
set-cookie: profile=1666761920393;Path=/;Max-Age=220752000;HttpOnly;SameSite=none;Secure
content-encoding: gzip
x-content-type-options: nosniff
x-request-id: 2f65a1f8-ed4b-4afc-a0ae-370732e47fcc
x-xss-protection: 1; mode=block
strict-transport-security: max-age=16070400; includeSubDomains; preload
access-control-allow-headers: Content-Type
access-control-allow-methods: PUT, GET, POST, DELETE, OPTIONS
access-control-max-age: 86400
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| seguro.giftcardsbr.store/checkout/payment?cart_token=shopify-8f7bf188da2efa84f531866cba29579c&utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&store_token=af62975f9153506159a052258ce1f69bf8535094&customerToken=e98b2200-54d8-11ed-a854-179e3420a6c2 | 170.82.173.30 | 302 Found | 0 B |
URL HTTP/2seguro.giftcardsbr.store/checkout/payment?cart_token=shopify-8f7bf188da2efa84f531866cba29579c&utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&store_token=af62975f9153506159a052258ce1f69bf8535094&customerToken=e98b2200-54d8-11ed-a854-179e3420a6c2 IP170.82.173.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
GET /checkout/payment?cart_token=shopify-8f7bf188da2efa84f531866cba29579c&utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&store_token=af62975f9153506159a052258ce1f69bf8535094&customerToken=e98b2200-54d8-11ed-a854-179e3420a6c2 HTTP/1.1
Host: seguro.giftcardsbr.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IllEWEVIU2FGdU05V3FcLzM4dkpXS3JRPT0iLCJ2YWx1ZSI6IjhJRTNxbEp5XC9JeXNWM1lNNVhCXC9tMUxub2o0OFwvTHdOanhnNEdsNUtzMUhiYWNnQlZQaFlEOWwzMmxnN2VmcmlrZE5HT1BYUlp2XC9EZE1CQVBpWEh5UT09IiwibWFjIjoiOTNiYWI1YjkxYTBiZjQ3NjczYWNmMTJkZjAxMDRhZTBlNTJkM2I5ZWQ2YjRiMWQyMzY3NTZlZDA3MDQ0NTM4NyJ9; bubbstore_checkout=eyJpdiI6IlVnWkdCXC9YeU1UU3RvZTM2THdMYlRRPT0iLCJ2YWx1ZSI6IkVxWGg2Y3d6K1BhekFqZmVGWVNIXC9MOW5EdE1jMmhwN3N5cmc0VW9NR0pkYmljM0pqclQxeXRTU0cxd08yZGNTS0RZa3lVZHFndTlKR1lLVnFPRENQZz09IiwibWFjIjoiZjBkNDVjZGRhY2UxMzgwZjllNWFmMzJhYWZmNzNhMGJmZjBkNzYxNzc4MjM0ZDZmZGFlNWYzNTU2ZDA1MGEyMCJ9; giftcards_cart=eyJpdiI6IkpuNUdsYzdMOVU2NVpuMmNcL3RMVmxBPT0iLCJ2YWx1ZSI6IjVOUnd1M3BWOXdlc0JhaUlhTWxaTERGTlJCUTNJcFpnNGxZN0pJZ2RPaGZ2dURvK2ZaOXpoQ25NdjM3V3FTZDc0N1VcL0xneG1MN0Z3b1BpSWlUejM0UT09IiwibWFjIjoiODYzODc2MTk3MzZhMWViZWNmYTQxZDk5ODg2OGZiMzliZjM3ODBkOWVkMzFlMGJmZTMwYjk1OWVmYjUyODhjNCJ9
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 302 Found
date: Wed, 26 Oct 2022 05:25:18 GMT
content-type: text/html; charset=UTF-8
location: https://seguro.giftcardsbr.store/checkout/address
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6IlZLOXFYUWg0N3ROeCtvQTJ2aUVBNEE9PSIsInZhbHVlIjoiODlPZ2dKVUp3VldcLzh1dGNMZjJMRUxuM0lpWXFRcHJqVndQaCtkbTQrc3lIWW93OWQzUE9YZnliUW9MZGFLM0JWdkZxcTVzeU9hUXhBRk1BTmxwTW9RPT0iLCJtYWMiOiI5NTk5MTRkZjVlYjFkYmIzNWE5ZmFlM2I4M2JlOGRjYmNmNjBhOWI3MTQ5MzQ1MmZlMGU5MTA3OWQxNzAxMDhkIn0%3D; expires=Wed, 26-Oct-2022 08:25:17 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6IlFOTTBLanlMaXlTVmhadGY2WWhsREE9PSIsInZhbHVlIjoidHl2NVhDYTlwa1wvWXBESjBaSEdNNkpsT1czY2FNaTRDNlNMUlwvK1pkQkp2NWlJQnhTUlVJZW9tbUJ0RStmbzRGVmozY2dhXC9cL2Z4d2ZGUFNwQmJmZHpnPT0iLCJtYWMiOiI4ZjhhNWI2MmQ4N2M3YWViYWU1M2ZmNTQ4YTdjZjkwMzY2Y2Q4MzJmODI5ZjEwMmFmMzFhZTkyNmZiZTA0MWIwIn0%3D; expires=Wed, 26-Oct-2022 08:25:17 GMT; Max-Age=10800; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
X-Firefox-Spdy: h2
|
|
| seguro.giftcardsbr.store/checkout/address | 170.82.173.30 | 200 OK | 0 B |
URL HTTP/2seguro.giftcardsbr.store/checkout/address IP170.82.173.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /checkout/address HTTP/1.1
Host: seguro.giftcardsbr.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlZLOXFYUWg0N3ROeCtvQTJ2aUVBNEE9PSIsInZhbHVlIjoiODlPZ2dKVUp3VldcLzh1dGNMZjJMRUxuM0lpWXFRcHJqVndQaCtkbTQrc3lIWW93OWQzUE9YZnliUW9MZGFLM0JWdkZxcTVzeU9hUXhBRk1BTmxwTW9RPT0iLCJtYWMiOiI5NTk5MTRkZjVlYjFkYmIzNWE5ZmFlM2I4M2JlOGRjYmNmNjBhOWI3MTQ5MzQ1MmZlMGU5MTA3OWQxNzAxMDhkIn0%3D; bubbstore_checkout=eyJpdiI6IlFOTTBLanlMaXlTVmhadGY2WWhsREE9PSIsInZhbHVlIjoidHl2NVhDYTlwa1wvWXBESjBaSEdNNkpsT1czY2FNaTRDNlNMUlwvK1pkQkp2NWlJQnhTUlVJZW9tbUJ0RStmbzRGVmozY2dhXC9cL2Z4d2ZGUFNwQmJmZHpnPT0iLCJtYWMiOiI4ZjhhNWI2MmQ4N2M3YWViYWU1M2ZmNTQ4YTdjZjkwMzY2Y2Q4MzJmODI5ZjEwMmFmMzFhZTkyNmZiZTA0MWIwIn0%3D; giftcards_cart=eyJpdiI6IkpuNUdsYzdMOVU2NVpuMmNcL3RMVmxBPT0iLCJ2YWx1ZSI6IjVOUnd1M3BWOXdlc0JhaUlhTWxaTERGTlJCUTNJcFpnNGxZN0pJZ2RPaGZ2dURvK2ZaOXpoQ25NdjM3V3FTZDc0N1VcL0xneG1MN0Z3b1BpSWlUejM0UT09IiwibWFjIjoiODYzODc2MTk3MzZhMWViZWNmYTQxZDk5ODg2OGZiMzliZjM3ODBkOWVkMzFlMGJmZTMwYjk1OWVmYjUyODhjNCJ9
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 05:25:18 GMT
content-type: text/html; charset=UTF-8
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6InNub2tSOENZWnBBVnJKK0gwWWhsU0E9PSIsInZhbHVlIjoiTmV4cDliQzRhWVFxblhRUWVLNk0zV1dOOFY3aGFmM2o0Y0hTWVU2dFpYSGxFd1FFOVlLbW1ta1U1Q2NhQmFhOEZpZFEzSmcxcmJBbG1pcFRjT0grclE9PSIsIm1hYyI6ImQxNTg3YjY1NTVlMWEzYTJlYTcxYzE5YTBiNTM0NWRjMDZkYjZlMWVhNGU0NWQ3NjAwMDVlYWI3ZTE2ZjdhOWMifQ%3D%3D; expires=Wed, 26-Oct-2022 08:25:18 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6Ik1HNUl3TDdvcHUzdHhsa2U4NGs4UUE9PSIsInZhbHVlIjoieE84RCtIZ0dhRkhDc2k3K3BwZW1DTnZYSm5YT3gwQjdcL0tLREEwdUNwRXlVOVhDSVZNaVhJZ0xCOE0yN3hmVVpQVGhxWEZRdUxtQloyVk5CXC9FaEdtUT09IiwibWFjIjoiNmFlNjJlYjY5YzAyNGY5MjQ3ZjUyYTU5MzMzYWEzZDhhYzRhZmU2NmFlMzNlMmU1M2FhZDQ0YzdjZDBmODBlOCJ9; expires=Wed, 26-Oct-2022 08:25:18 GMT; Max-Age=10800; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
104.21.81.61