WEBSITE ANALYSIS REPORT

http://elinkea3.mail.thescoop.com.br/ss/c/u001.DY7cDGp54IPFnHZyGMipowiRPwA3bkW2D7w7F8ox9QDR9qdRXbdIYMEGphNJRfRlMBNVxeUY2l3vSYnmCwSLUYOp8dSIQxTuH9S-2CuGhmzUiTcF1bZ_IP45Nat21WhqYCUi9s-N1s4MoN_lTCHhLHgv9KLbSq7pqysaj9ppfqK45KwQwexDmdLeAJjLey-LpjsJjBvRGGsiEkjSvr8Tj2oeofRy4cNLft4cPid5s4heCWTEJLfv3kie9IYkkyK68L6OkHjJBcEXjbAPN9kBO3KpBbySh4dmfTtez-kk_i8s6wwUUqNatuD6Y5BC1UIaiMCqI3Uma9LEqpWsckNI97VkjAvqRlesSXiKKdL6bhOMZgi4SWObocvnjjYCE8aSiT1vEqy5u0KN3VzAqi29HA/4nm/DB8ONsG-Qr-jKsfIdACxeg/h9/h001.-JV9QzVyzfG2OYfiZqyzkbv_lyclkWaIqvL8vXW93Cg

26 Jan 2026 · 08:59:01.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

barra.globo.com1 captured requests
buy.tinypass.com18 captured requests
c2.piano.io1 captured requests
cdn.ampproject.org6 captured requests
cdn.tinypass.com1 captured requests
cdnjs.cloudflare.com20 captured requests
d39f98ec-9259-4f8b-896d-7ab58be1f900.edge.permutive.app1 captured requests
d39f98ec-9259-4f8b-896d-7ab58be1f900.prmutv.co1 captured requests
elinkea3.mail.thescoop.com.br1 captured requests
epocanegocios.globo.com2 captured requests
events.newsroom.bi4 captured requests
experience.tinypass.com1 captured requests
flowcards.mrf.io2 captured requests
fonts.googleapis.com4 captured requests
fonts.gstatic.com4 captured requests
fundingchoicesmessages.google.com6 captured requests
gadasource.storage.googleapis.com1 captured requests
geo.privacymanager.io2 captured requests
globo-ab.globo.com1 captured requests
globo-mab.globo.com2 captured requests
goidc.globo.com3 captured requests
horizon-schemas.globo.com1 captured requests
horizon-track.globo.com3 captured requests
horizon.globo.com1 captured requests
imasdk.googleapis.com1 captured requests
launchpad-wrapper.privacymanager.io1 captured requests
launchpad.privacymanager.io1 captured requests
lh3.googleusercontent.com1 captured requests
p.glbimg.com1 captured requests
region1.analytics.google.com2 captured requests
s.glbimg.com5 captured requests
s2-epocanegocios.glbimg.com11 captured requests
s3.glbimg.com34 captured requests
sdk.mrf.io2 captured requests
static.infoglobo.com.br3 captured requests
trackid.globoid.globo.com2 captured requests
usergate.globo.com2 captured requests
web-api.globoid.globo.com2 captured requests
web-ivcbrasil-pixel.s3.us-west-2.amazonaws.com1 captured requests
www.google.no1 captured requests
www.googletagmanager.com10 captured requests
www.npttech.com1 captured requests

Connections

buy.tinypass.com → cdnjs.cloudflare.comLoads from20 captured connections
buy.tinypass.com → fonts.googleapis.comLoads from2 captured connections
buy.tinypass.com → fonts.gstatic.comLoads from2 captured connections
buy.tinypass.com → s3.glbimg.comLoads from1 captured connections
elinkea3.mail.thescoop.com.br → epocanegocios.globo.comRedirects to1 captured connections
epocanegocios.globo.com → barra.globo.comLoads from1 captured connections
epocanegocios.globo.com → buy.tinypass.comCalls3 captured connections
epocanegocios.globo.com → buy.tinypass.comEmbeds2 captured connections
epocanegocios.globo.com → c2.piano.ioCalls1 captured connections
epocanegocios.globo.com → cdn.ampproject.orgCalls1 captured connections
epocanegocios.globo.com → cdn.ampproject.orgLoads from5 captured connections
epocanegocios.globo.com → cdn.tinypass.comLoads from1 captured connections
epocanegocios.globo.com → d39f98ec-9259-4f8b-896d-7ab58be1f900.edge.permutive.appLoads from1 captured connections
epocanegocios.globo.com → d39f98ec-9259-4f8b-896d-7ab58be1f900.prmutv.coCalls1 captured connections
epocanegocios.globo.com → events.newsroom.biCalls4 captured connections
epocanegocios.globo.com → experience.tinypass.comLoads from1 captured connections
epocanegocios.globo.com → flowcards.mrf.ioCalls2 captured connections
epocanegocios.globo.com → fonts.googleapis.comLoads from2 captured connections
epocanegocios.globo.com → fonts.gstatic.comLoads from2 captured connections
epocanegocios.globo.com → fundingchoicesmessages.google.comCalls4 captured connections
epocanegocios.globo.com → fundingchoicesmessages.google.comLoads from2 captured connections
epocanegocios.globo.com → gadasource.storage.googleapis.comLoads from1 captured connections
epocanegocios.globo.com → geo.privacymanager.ioCalls2 captured connections
epocanegocios.globo.com → globo-ab.globo.comCalls1 captured connections
epocanegocios.globo.com → globo-mab.globo.comCalls2 captured connections
epocanegocios.globo.com → goidc.globo.comEmbeds3 captured connections
epocanegocios.globo.com → horizon-schemas.globo.comCalls1 captured connections
epocanegocios.globo.com → horizon-track.globo.comCalls3 captured connections
epocanegocios.globo.com → horizon.globo.comLoads from1 captured connections
epocanegocios.globo.com → imasdk.googleapis.comLoads from1 captured connections
epocanegocios.globo.com → launchpad-wrapper.privacymanager.ioLoads from1 captured connections
epocanegocios.globo.com → launchpad.privacymanager.ioLoads from1 captured connections
epocanegocios.globo.com → lh3.googleusercontent.comLoads from1 captured connections
epocanegocios.globo.com → p.glbimg.comLoads from1 captured connections
epocanegocios.globo.com → region1.analytics.google.comCalls2 captured connections
epocanegocios.globo.com → s.glbimg.comLoads from5 captured connections
epocanegocios.globo.com → s2-epocanegocios.glbimg.comLoads from11 captured connections
epocanegocios.globo.com → s3.glbimg.comLoads from33 captured connections
epocanegocios.globo.com → sdk.mrf.ioLoads from2 captured connections
epocanegocios.globo.com → static.infoglobo.com.brLoads from3 captured connections
epocanegocios.globo.com → trackid.globoid.globo.comCalls2 captured connections
epocanegocios.globo.com → usergate.globo.comCalls2 captured connections
epocanegocios.globo.com → web-api.globoid.globo.comCalls2 captured connections
epocanegocios.globo.com → web-ivcbrasil-pixel.s3.us-west-2.amazonaws.comLoads from1 captured connections
epocanegocios.globo.com → www.google.noLoads from1 captured connections
epocanegocios.globo.com → www.googletagmanager.comEmbeds1 captured connections
epocanegocios.globo.com → www.googletagmanager.comLoads from6 captured connections
epocanegocios.globo.com → www.npttech.comLoads from1 captured connections
goidc.globo.com → epocanegocios.globo.comRedirects to1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

08:58:31.404 GET 302 document 712.2 KB 187 ms —

08:58:31.579 GET 200 document 712.2 KB 2187 ms —

08:58:32.625 GET 200 script 194.3 KB 3564 ms —

08:58:32.627 GET 200 font 10.0 KB 3177 ms —

08:58:32.630 GET 200 font 15.8 KB 3071 ms —

08:58:32.633 GET 200 font 10.1 KB 3140 ms —

08:58:32.634 GET 200 font 10.0 KB 3108 ms —

08:58:32.635 GET 200 script 277.9 KB 2245 ms —

08:58:32.636 GET 200 script 1.8 KB 1392 ms —

08:58:32.645 GET 200 script 13.7 KB 169 ms —

08:58:32.646 GET 200 script 36.8 KB 172 ms —

08:58:32.648 GET 200 script 6.8 KB 173 ms —

08:58:32.650 GET 200 script 50.4 KB 184 ms —

08:58:32.653 GET 200 script 91.4 KB 1371 ms —

08:58:32.660 GET 200 stylesheet 7.6 KB 144 ms —

08:58:32.732 GET 200 stylesheet 22.4 KB 1604 ms —

08:58:33.831 GET 200 img 47.3 KB 3307 ms —

08:58:33.834 GET 200 img 486 B 2289 ms —

08:58:33.838 GET 200 img 608 B 2032 ms —

08:58:33.841 GET 200 img 638 B 2279 ms —

08:58:33.842 GET 200 img 534 B 2294 ms —

08:58:33.843 GET 200 img 516 B 3429 ms —

08:58:33.845 GET 200 img 533 B 1341 ms —

08:58:33.846 GET 200 img 951 B 1340 ms —

08:58:33.849 GET 200 img 446 B 1347 ms —

08:58:33.850 GET 200 script 220.2 KB 887 ms —

08:58:33.852 GET 200 script 42.5 KB 1266 ms —

08:58:33.854 GET 200 stylesheet 11.0 KB 882 ms —

08:58:33.859 GET 200 script 46.8 KB 879 ms —

08:58:33.861 GET 200 script 313.0 KB 775 ms 1 alerts

Transaction #73

Request / response

URL

GET HTTPS

https://static.infoglobo.com.br/paywall/js/tiny.js

IP / ASN

34.151.224.123

AS396982 · GOOGLE-CLOUD-PLATFORM

Requested by: https://epocanegocios.globo.com/ciencia-e-saude/noticia/2026/01/99percent-dos-eventos-cardiovasculares-estao-ligados-a-fatores-de-risco-evitaveis.ghtml?utm_source=www.thescoop.com.br&utm_medium=newsletter&utm_campaign=edicao-044-26-01-2026&_bhlid=f6f9dd27c1115a4336f657aa1e168577869ce486

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
MIME type: application/javascript; charset=utf-8
First seen (UTC): 26 Jan 2026 · 08:59:55.587 UTC
Last seen (UTC): 10 Feb 2026 · 22:24:58.840 UTC
Times seen: 4

Size: 313.0 KB (320462 bytes)
MD5: 99d2ea4f05406fe831de86724254b23a
SHA1: e8cff26cfbf9615227f3a37c90f5cb5b3a047ec5
SHA256: 1e3f96569b9925011eff7f93dad30f01ecfd7d7b9f9a6a1dbf62d119131d5c51

Certificate information

Issuer: DigiCert Inc · RapidSSL TLS RSA CA G1
Subject: static.infoglobo.com.br
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 04:FD:1D:3B:94:13:E5:87:A2:C6:75:E8:9A:8B:48:D0:E7:D2:72:C6
Valid from: Fri, 05 Dec 2025 00:00:00 GMT
Valid until: Fri, 04 Dec 2026 23:59:59 GMT

Technology fingerprints

No technology fingerprints recorded for this response.

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
YARAhub by abuse.ch Scans presence of the found strings using the in-house brute force method	medium	malware

HTTP headers

Request headers

GET /paywall/js/tiny.js HTTP/1.1
Host: static.infoglobo.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://epocanegocios.globo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
date: Mon, 26 Jan 2026 08:58:34 GMT
content-type: application/javascript; charset=utf-8
x-timestamp: 1769171129.09136
x-trans-id: tx5c9cf5e6d0e448579eb8b-00697369c4
x-openstack-request-id: tx5c9cf5e6d0e448579eb8b-00697369c4
vary: Accept-Encoding, Accept-Encoding, Origin
cache-control: max-age=600
x-request-id: d01c6545b70dea28101823f6de315c2e
x-served-from: infoglobo-router-gcp
supportspointer: true
charset: utf-8
x-location-rule: static - tiny.js
expires: Fri, 23 Jan 2026 12:42:37 GMT
access-control-allow-origin: *
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

08:58:33.863 GET 200 script 225.4 KB 1304 ms —

08:58:35.127 GET 200 script 57.5 KB 3625 ms —

08:58:35.315 GET 200 font 10.1 KB 242 ms —

08:58:35.322 GET 200 font 10.0 KB 245 ms —

08:58:35.341 GET 200 font 20.5 KB 254 ms —

08:58:35.625 GET 200 script 4.7 KB 230 ms —

08:58:35.673 GET 200 stylesheet 4.7 KB 231 ms —

08:58:35.704 GET 200 script 32.2 KB 465 ms —

08:58:35.718 POST 202 beacon 0 B 1053 ms —

08:58:35.724 OPTIONS 200 fetch 0 B 1331 ms —

08:58:35.891 GET 200 script 1.8 KB 291 ms —

08:58:35.921 GET 200 font 19.7 KB 256 ms —

08:58:35.938 GET 200 script 28.2 KB 231 ms —

08:58:36.330 GET 200 script 11.0 KB 405 ms —

08:58:36.355 GET 200 script 21.0 KB 230 ms —

08:58:36.359 GET 200 script 40.3 KB 230 ms —

08:58:36.360 GET 200 script 20.3 KB 233 ms —

08:58:36.403 GET 200 subdocument 956 B 181 ms —

08:58:36.412 GET 200 script 470.6 KB 331 ms —

08:58:36.446 GET 200 xhr 223.6 KB 1613 ms —

Domain graph

Hostnames

Connections

Network requests

Transaction #73

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #73

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Domain graph

Network requests