{"report_id":"8d77b469-f6c7-4e0f-a2dd-878b07cae9b2","version":6,"status":"done","tags":[],"date":"2026-02-21T21:35:50Z","url":{"schema":"https","addr":"colchoesemmapromo.com/","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"colchoesemmapromo.com/","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"title":"Colchões Emma | O Melhor Colchão do Brasil","dom":{"size":1482,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (446)","md5":"6b1cbf883f908d3a90acc1fd2c31d942","sha1":"5f5d6edf0279e2958eda991ceb01579bc0a099d1","sha256":"ddca46e4f4ed555124aad27e6ff06111542b9c7a7827c41a8523edb8ebe7b5bd","sha512":"5f57cd791d124c1004715af3712c06b080aa947239101608e5a4ea2ddede36a1cd17c5ad9a16f1bb7db9a68dadb4f4e8eaeb47dd833aba397b183a5ad067cbae","ssdeep":"","tlshash":"b931aea3e38f684d7101c06850f1f2b81e3ea159b7414e35bd2177336b8dac65892956","dom_hash":"domhash003fb3f0de8126b803198d4c3d676989","first_seen":"2026-02-20T16:42:31.157142Z","last_seen":"2026-02-23T15:43:13.917131Z","times_seen":7,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"colchoesemmapromo.com/","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-28T21:35:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-15T22:20:44.607116Z","alert_count":0,"request_count":1,"received_data":402847,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-02-16T02:52:01.84846Z","alert_count":0,"request_count":20,"received_data":1056059,"sent_data":9319,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"colchoesemmapromo.com","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-02-18","domain_rank":0,"first_seen":"2026-02-21T20:28:21.542199Z","last_seen":"2026-02-21T20:28:21.542199Z","alert_count":67,"request_count":67,"received_data":16006323,"sent_data":38053,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.143.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-02-15T22:26:20.540622Z","alert_count":0,"request_count":1,"received_data":438,"sent_data":965,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vsa41.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3121140,"first_seen":"2020-03-11T12:09:33Z","last_seen":"2026-02-14T00:24:15.77061Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1085,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-02-16T04:03:54.869077Z","alert_count":0,"request_count":5,"received_data":6756,"sent_data":2660,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"colchoesemmapromo.com/","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-08-03T14:14:52.243168Z","times_seen":100074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9124e3a44f2d26d180805029b66d6992","sha1":"66d79a534ba73340600b45f02bc7c9dfc1d96c67","sha256":"aead84c774366e1ddbfea60ec732d5b50cea0b9d27c2cacc56e2284ea0b062d1","sha512":"b28e7ae59d0d59c8a9a2506bcca796d4f80df08b706954b0d8aa3ce99a5f144bf2a4aeab20bacf38d14bd8833007257ea3026e1ac27ceca8b20a86cd800dd0a6","ssdeep":"","tlshash":"7ee0d810f447fee6ac21a81921350e618089af7d40a6988953cfc7c781650b51a49e8f","size":351,"data":"","first_seen":"2026-02-21T20:28:29.794912Z","last_seen":"2026-02-21T21:36:38.477142Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f250237a3102e91bcd8b0888cefd149","sha1":"2aef1a10e1b0d12ba167471b12221d8947daebc4","sha256":"a215535ef383a47b49c3a2e4686d1d2f9f827e79a84a1f6317abf79332baf18d","sha512":"003c3595fc25254eb0d2233885f312f3dce465104647e1d8f1e01840f97a666ed18b8e2f59c844e4dc05f8ffcea28ec271cca8f957bb27ffe132fcb40229620f","ssdeep":"","tlshash":"e241d3577a14ff4734a29c642223ac27c02fd737857cf61f82adb4ae55a862787090c7","size":2183,"data":"","first_seen":"2026-02-21T20:28:29.795774Z","last_seen":"2026-02-21T21:36:38.477971Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/210-1de08b42030c50be.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3351f041a151fc2c0b915364b3815cf","sha1":"5f1c00a8b4aa531600c72ce87b322a0fe5ee2688","sha256":"fdf60a308a11f45e03df0d3b3609bf1a5990eab9d56a347539701fc9bc1ec582","sha512":"bed8e1635dac4479596b4d44db287514d09e42cccc2c83d381acd06e2a47a316fd920083fb6a24d42eff2758bdc631fb8e6afce7a8d4d23f9e2968287938ddd4","ssdeep":"192:1hUedYxoJ2SnZ2DENbEdnD4h5+2XWyC2swHLI7iCL5kUI2mwsO7saUZS2Xivpecj:HU3edXEJ2xIBL5FPrHMBu","tlshash":"40829796ccbc0a0c03a13161fd0dd1c7b52c5420e19e685b7ec6d59a72bb428e7adb6d","size":19132,"data":"","first_seen":"2026-02-21T20:28:29.768031Z","last_seen":"2026-02-23T15:53:38.820532Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/fd9d1056-b9b281d6c2728617.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172834,"data":"","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-08-03T14:14:52.216871Z","times_seen":4544,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-03T14:08:25.284416Z","times_seen":92464,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-03T14:08:25.296437Z","times_seen":92494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","size":53530,"data":"","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-06-15T21:26:04.427415Z","times_seen":34009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/page-840bf498251c1864.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7885605ffdfb1c258027bab1cf941f34","sha1":"c025ad121c5b2543414ff4d7c66f6497651fac9d","sha256":"e93d3570dcddd9451988ab67539fc26ce73f9b0f842b3b28467ac9388af76e48","sha512":"1b5bbfec70db9903b0a9dd0934b6af46a424a0b5c38710ff124611ba962d8cd4c41f82f55331e87283b8e6df6e7d948b7622d10c651ed812a939d70ea0be5ce6","ssdeep":"384:d4JAI1cz/fHeh5RgmzL6YpbymKxKcfHeRpUAJ3hNa4we:d4JAzU53L6cymKxKcfHezUAJ3Ha4we","tlshash":"a9c2b715a159fe9cf4a704e4a96f908cf01f4e68ca4f8c74b7b86c2119ca4cc7b52bd9","size":26730,"data":"","first_seen":"2026-02-21T20:28:29.783416Z","last_seen":"2026-02-21T21:36:38.456383Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/webpack-49380649763e5e93.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"13d737b3ee38e2f964f574f166540be5","sha1":"834911c89b8d085c5ed438e41ae3ce8c0ef7a89b","sha256":"69aa333d3b1551da27dd3a86c444674bdf3330cd088a08e8091101bbd11a92b4","sha512":"41ec72c64458433a1290b0fe1b14d36cdce4d22136389520c2b42a80b94e710e1c9fbf4a5faccf324110df687ace80f899119eec01b5ded7ba3c0bc20d5a4a67","ssdeep":"96:0Wd0j7EmqwWlR2+7na20VGLUVnWWCjMrm2WYHWJ3L0RC/sP6pZxo:3tmHWlgMajUgcNY2J3YusyLxo","tlshash":"2b8198ee7261f476179350e2443f915af53b25b2181ee4a0da1dd8f8fc348498623fb8","size":4204,"data":"","first_seen":"2026-02-21T20:28:29.70672Z","last_seen":"2026-02-21T21:36:38.4716Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"83ac6dc651cdcefac7ebcb211c811200","sha1":"9e192e6c1c006edf925b95733f2711d1bf06a3b1","sha256":"a49fae8dc21eb9a77b16b405c69740db04bdfcb8bd3870e570f82bb73439f8da","sha512":"4104be1923dcf5249deba0e49851d38b3f584ab42c9fdaed80e0cdbd41a6d0b70892acedd32efc628448497406be0d9ede5d9ffb6fce8f0281a0f44a5672b169","ssdeep":"","tlshash":"7d41e5177e14ff4734a29c642222ac23c03fd337857cf61f82ad749e65a862756090c7","size":2181,"data":"","first_seen":"2026-02-21T20:28:29.796576Z","last_seen":"2026-02-21T21:36:38.478761Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","size":324696,"data":"","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-06-15T21:26:04.431869Z","times_seen":12669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","size":240941,"data":"","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-06-15T21:26:04.425371Z","times_seen":11131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","size":10938,"data":"","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-06-15T21:26:04.407385Z","times_seen":26443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79b4aa69d45c4b43f0b31fd971b1bbdd","sha1":"77122463966366aaa969b55f404af7903b9d8f86","sha256":"34b9a3ffbb7a87b04fe51abdb665588b82d1e5fba4cad27b6d6518228d20c2b5","sha512":"6bc666c4e89838ba9d62ccba15b642154cb69eb86ac22585e64e11eb0bca2ebc710c3c5cf8993a99aa85035e1ae44d566601f6b7649e7d92fa3d72a2f53f252f","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFY7dZPkx3u4V5pfYMrlSf:4nmuTilGhmPx3u4V5pPrlSf","tlshash":"36a3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","size":106023,"data":"","first_seen":"2026-02-19T03:13:10.618029Z","last_seen":"2026-06-15T21:26:04.428904Z","times_seen":8427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"36f21125b1d881066f9c1c0f41fb48d3","sha1":"9e644e0a434b3a2547c677aca96359c728cb9ca4","sha256":"4449453ae9ea6482605b719abdea7afd2d15e920d2c36bc8f34f4ba1e2d3c380","sha512":"222eef4be7a935a76ecf5c67b1bd4546dc2a48f9557c09ec7112a98e927cadc8bbb6d2a5f7ccfe96f4d2ff8d4af3952dd80fc362bac088b777167b83aeb2f7cb","ssdeep":"","tlshash":"4441a5577a04ff4334a69c642122ac27c03ee737897ce65e82adb49f65a862757080d7","size":2187,"data":"","first_seen":"2026-02-21T20:28:29.797385Z","last_seen":"2026-02-21T21:36:38.479543Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/117-5c4c990ec6bab701.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"900c2205c16ddb06f4eca2f5fff52cf5","sha1":"dd6f918866b83b67264e5904ca21a0d9127d21d6","sha256":"0ef561f9c342f9d9bc67bcb19fb578863126909930c9fb5c70c66c20991246fb","sha512":"554c8573b6580647f1acf0ac53a0e8650afd74d8a0d07cd95f785b9449a99f605ee257f323c839a8a0c7d54ec6fc15a7634489218e041124028e17b5d132508d","ssdeep":"768:+O9P55eowbr0PDVVDS//d2icrEyKH1ag8xxqKjj3fLpDKdlr/NaO8tr93UsGoROx:b/wP0KHcZmY5j4dl/iwsigzgLU5uoCv7","tlshash":"6ec3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":124798,"data":"","first_seen":"2026-02-21T20:28:29.784257Z","last_seen":"2026-02-21T21:36:38.472385Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/145-ccb360710e8ed65e.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa83a8a60b7665d83f420aee5f377ce4","sha1":"4faf7a33be424be2a62b39bd5b3ecf86e8db89df","sha256":"79ed5f03a89d0e9b52f218e30ba2903eab9f799af8619c41ee64516496bcb8c9","sha512":"55fba202b363fdec2019fabd31f41c0cde7a9be624a2d42a758fc99887c0bc5a59bf00810ea0b8aff1f91d1d7c0bf9e317af69d51cafbf07bac1115b8a244aa0","ssdeep":"192:FWr9W2Mm46/kbb92BjcwMfs3JWyCFIaHDqau27fcMRFVYxu4BvqKI:FY8bmSbbae0Yhq47fdd4hy","tlshash":"1a523ab731d4f8ea238b80e1943f000df7755d76622ab14467a9c8c9e6f0158b163fba","size":14011,"data":"","first_seen":"2026-02-21T20:28:29.763245Z","last_seen":"2026-02-21T21:36:38.466753Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/876-3e9e9b3d45839d48.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"083e79ed9d33f7f9cae67d0ff879fd0f","sha1":"dbb6646265736ebe04d46a311d6a40da347bd46f","sha256":"b645836dfbb5041b1b687d2eee954b60c2efda214d788e5664a779f360484945","sha512":"64e462bb287ed794a91310acbb2ffd94b324591363f72fdb4e4ab89dbbdaecdfd7e7d811875b3bdaecd0dad219f537091ebd91aa39491248867689bdd87460ec","ssdeep":"384:HHpWOtS3GyRgRU3W0wqCDtFS6HHJF8UOrqpH:k3G2WbFznJFPOrqpH","tlshash":"1a42e7ba76d4f8b513da01e0403b820af2791f36140d9090d3a6dce97974edb95e3fa9","size":13197,"data":"","first_seen":"2026-02-21T20:28:29.711912Z","last_seen":"2026-02-21T21:36:38.447456Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_vercel/insights/script.js","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e699b6e4471fd6950176e39c5f1ace0","sha1":"a3957a826a0c77a338e1bd9b408b90c6215491f8","sha256":"79bf638dd4acdeb9b80c5a4009a3e1986968d615e9557dcf23d91b5e8ad158d8","sha512":"c49b40fbcbe959fab505da0d27a9f3c273a3740f07b34433619e5bc88cd7dd54564609284f4ee30ae219a1572a0a255fe9af92f2f948931b761cbc1be3605e2f","ssdeep":"","tlshash":"2251a5ea74a1e16d4ad79275817f1204f37f2a92fc05000132d99c9d3539d1dea73f99","size":2495,"data":"","first_seen":"2026-02-17T21:27:06.661745Z","last_seen":"2026-08-03T14:08:32.680659Z","times_seen":18939,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/melhor-colchao-pra-voce/page-642a41a84cf7976f.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d70699a3263d4326019047e00b671937","sha1":"816879b7404f1c8306a7a93eea586a3b1cc5f18b","sha256":"dc3ce65ba468d946d6d7efac805cc5bc6a1387576633595feca03783159d7aec","sha512":"29741f59fc238756ffdda16f873e470ef8978df2d1d315edf9ca6e8e4be728e079417653013dad1f44956a3835795b586c57296d243956e49170c858d05ee003","ssdeep":"","tlshash":"48615359b888facca46718fc6cdb540ca23f4a5cc56b5cd6f0a46bb312622943213f9c","size":3378,"data":"","first_seen":"2026-02-21T20:28:29.789028Z","last_seen":"2026-02-21T21:36:38.422572Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","size":2306,"data":"","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-06-15T21:26:04.412918Z","times_seen":11137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77424425bd755d02077922d40a96c207","sha1":"9702eba70ac4506031d55a8c9cf6732a66853b2b","sha256":"1128f463d0038310bb65c71ee2bd50f52e40dd9dfc0489e127f3912a1aa728ce","sha512":"2ac723d6ab08dc1cf45141cc44966d9b0f01c892511f40148d785de61ac084e014799555bb3b574f6f8b78e9410df8c112fd437eafe0aa747babdc52b451d1a7","ssdeep":"96:zNC9Hqt7pEma7hY/rcKaJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYcLRIvgx43nVY","tlshash":"13b1859ef247b456c156225150ef3b1df33a281ca61ccdc8a66565f218784cba077b39","size":5261,"data":"","first_seen":"2026-02-19T03:13:10.646706Z","last_seen":"2026-06-15T21:26:04.407976Z","times_seen":8491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/main-app-2dcde4753ea0d175.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ace3268523ca829896f160bf5401feab","sha1":"4062a8402cf24a1ccd0d38752462535e922f4cf8","sha256":"d7008163f1ed16ecb840d251190ac8a9d02132df87f25781faef1499945f9bdc","sha512":"f784ee7190413f445f0e16ed2f564f87c8183172462889739ac3f812be0e9d14762bcf1e55e794e14a8a62e6e3348f6b5c008efb66c7a2692cca98b742287486","ssdeep":"","tlshash":"def082992b4c702f2913ad24fdd35c2e255e416428a719501a04ddb12c336a893f1c39","size":461,"data":"","first_seen":"2024-10-04T10:20:35.510701Z","last_seen":"2026-08-03T14:14:52.209097Z","times_seen":1692,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9d8cc9316f02a746f01c689308ea5974","sha1":"cc070967503ff4638b42387ef37d09c02722ce6d","sha256":"c25c807f1251b492e2fb765edca99462cf54ef4497db946f7b070d06662cae85","sha512":"bb0122dc0840fe5823286e18a06c5c49900ec6f0ba128e975b59604b7adb283de291d4379345fb78ffa930c4b23b383b8464ce05c0a3e4580b913a4a9d318854","ssdeep":"","tlshash":"1441751463a8e79774a1bb2c12027c30786bd657b578a40c83eb685db53003f4d59493","size":2108,"data":"","first_seen":"2026-02-21T20:28:29.798194Z","last_seen":"2026-02-21T21:36:38.480348Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d53876f956302ee37af68346bf7b9b2","sha1":"5710c533454c2a9867f166fe449248ed22ec9780","sha256":"b342b4a44f9a6763285914d55bceb2217869022989930b72fdee658e5835d203","sha512":"2b1438a7328ba8dac59a0e0fc8e0622173ea98ba5c3c111beead11b13b63513f269f7e22f188587eaffd582b1c4865941ba23c3f57ee361a3debe0a9bebe49b1","ssdeep":"","tlshash":"9711e1a041d252b871615be03962bc307b7709f63cbecaa289c35ce039315fd0dab443","size":993,"data":"","first_seen":"2026-02-21T20:28:55.718277Z","last_seen":"2026-02-21T21:36:38.481095Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e75d4a09660a4800b203c5167617e167","sha1":"d42e3b7cd39266c285417fe1aadfe4c379237b99","sha256":"6ff37071379fa246a3a4b4ec9bcd0c91e2fcf60703a0e94ec007ced93b8c159b","sha512":"04e4eab80139bb51e94e53f8a3b89a71ecb35aee03ae7b9d7cebb581ffab6db34e15c072a6ef462add09d389586128f5d055a1343b04fbfcb38aac12fe8d3b50","ssdeep":"","tlshash":"19d08c88210b0c714aa72a064b2faa00b0063213a4a0d930390e63095f31e07d754864","size":214,"data":"","first_seen":"2026-02-21T20:28:29.793141Z","last_seen":"2026-02-21T21:36:38.474712Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/648-337cec5a3fda1dfb.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"222ff81c7cb5af9088ad55a3bcff070c","sha1":"4beb7632c7d19bb488a70170d48096271b92705b","sha256":"a8e508236c3e15c2921e72f1a71c11ac63db4d0e2adf1359d763fa2ba33e36c8","sha512":"44410a8f3c2c1118fcc20325cf1e9d89c493c050892384561422ea34f33cb6c768d46a34bd3e3c9191e9d4ac3aa3f68621ad9c3ba116e4823ac9cf5d9db6aa15","ssdeep":"384:P5k1IdRMx3IG1DnLGRwqdggPG1kyDfLxvZKVSUENLd3NU7tpU2J91wMVG4x:xkgRMxhdnLqkKByLX4tpU2ZhVJ","tlshash":"1dc2e8be71d2f8a2479b11a0443b1006f2be4caa145e6244f7b4c8dbf57056da1b3fad","size":26151,"data":"","first_seen":"2025-07-15T06:25:55.752884Z","last_seen":"2026-08-03T13:19:16.849064Z","times_seen":338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-03T14:08:25.298002Z","times_seen":49220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87f83aeea14051d9edd97ec3dd41fa0e","sha1":"8649c359a630d1c55eb268ff051d5a284ef7587e","sha256":"38a072ee28e39fadd2153244a3f0a48df473ce7d8dfe16e2f2fcbe5d9cd0bc6f","sha512":"c56e03220951ba738fa2f29bec6d02b1de5ca769f1f41c39ff3f12334b16d0a82db78487c4e4cfcd8fdfaddf4af6b923c725af335346028224efa849bc140eca","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCrGN//h6LiJq:SzP2DZSLi8","tlshash":"37822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","size":18392,"data":"","first_seen":"2026-02-19T03:13:10.613764Z","last_seen":"2026-06-15T21:26:04.434078Z","times_seen":8479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/722.1137e6709011230c.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab70e93b99a682f842300ee486baca18","sha1":"793072f048ac72961d7eec92a064e8c3a8625150","sha256":"b44142dfdbe74800a528e36e4c7dc97013829bc4911da9a6c2acbd314af47be1","sha512":"f6e73acbe7babf418731818db2b306582a6ff0320d37971d899f665cca63ddde6588d9ed9cc12f499ad02fb0e4f6c410586a9a9e3da258a8db4b6ec7ac3a9c4a","ssdeep":"","tlshash":"b371955f4f8a6a2de823d38c0a5bb008979e57ac37cf88b1f44e54369612116e633fc4","size":3478,"data":"","first_seen":"2026-02-20T16:42:31.183722Z","last_seen":"2026-02-21T21:36:38.435892Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/ofertas-emma/page-d94b5d4312a95958.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"350387956bed09b96b0f0b597328c12b","sha1":"f68e8e5829bbfe5892e57a1647856fc7e6e35cd6","sha256":"c9124c3f4176e0335616b878ff4d1daa0bd7acea88658c329b384c918cf06693","sha512":"03cff9fc516709c023d9319003402887f6e8c2131fac0e95480d349518d0e4e79d72ad9e05827c06e65d41f9e14fed150a2cb783f0460f81b52c49b69078c45a","ssdeep":"","tlshash":"90e0924a668dbc1f38376c34f9972c6324eb14703416495029209eb22c3725cc351d48","size":361,"data":"","first_seen":"2026-02-21T20:28:29.765595Z","last_seen":"2026-02-23T15:53:38.865064Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/emma/page-93967d8f3c31751a.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bd7a8cc3103c0e2dd09c30367860a75","sha1":"3d326981141d11059645512b95ee39d59256d303","sha256":"22cf4627391cd3c7ff3536e7821f6244059a4c809e0cf2e30c01373121d42920","sha512":"5275aded8a781969eaa2aebee70844229afd8ea45fa5276f98bc9a1a51f9ab50cc74c14ee8d7f6b1c2e2b1186d78e0ef0ceab09c16e94692b2b34eb18e4135ae","ssdeep":"","tlshash":"0ce04f8ab68d7c1e28376d24e9976c9634bb44763826485059309db218372588391998","size":322,"data":"","first_seen":"2026-02-21T20:28:29.789877Z","last_seen":"2026-02-21T21:36:38.416149Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9d280f1874179aa2f1b4ef7ec4d6cd5c","sha1":"b9424787ab9334aa8eb8bfcee557cbedf2989825","sha256":"286968e9a1519912a2022ab3beb4e333d365df1a3eb1c7193e073492183f60cf","sha512":"eeec8af91ebbf9917d1500229b4867988c425aaa42f7f518d53eed5733fcde63a1d59a46d16d3fd9a9c7ccbcba7b333963bc12c8096aa0aea8fc9cc707f280a8","ssdeep":"768:6+Cj+Dp4I4vpHvm4vwnvzUDhD+ggK2NqCWjxC:5rohRCkC","tlshash":"190323387016de5cfc4f3e54147ead3a618e926b8a87deb4c2e4dd3186874786b92dc0","size":39484,"data":"","first_seen":"2026-02-21T20:28:55.71949Z","last_seen":"2026-02-21T21:36:38.481896Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/layout-6a11bcb1f6f14e01.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de504952e1ef723d592b922f0921298f","sha1":"fe18a36358cd96b7e86501f8ad3e927fe68c0b4e","sha256":"5d2af6d183799f05acd268b031a8171193c2379662c3c8276ec4dd506a002e98","sha512":"120225e8b0b7649a177fd010f01756c5d60ffc276403098c9b6207d8479c87f8766d857804b6ba39312d21078c72555712df747434af82085eaa16dcb267979b","ssdeep":"192:/YEtYgIBdWAq8Q0WHLszoGVSjIXJzf5G5ZVY2qZb8E2jo4W4tqZG6:/YEtYgIBdWAqQWHLszoGVSjeJVM+9b86","tlshash":"b832a64cb281bef8b26749e4f76fa51cb12f16a8dd0f4824717e6c552b114c86222fcd","size":11954,"data":"","first_seen":"2026-02-21T20:28:29.779216Z","last_seen":"2026-02-21T21:36:38.457801Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/520-263783ff90926137.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eaa7d66613cd3539fc84684f28defe24","sha1":"8e3c0af5cb46015358c3aca9e92db2dd668861ba","sha256":"e1c1ff5638b1e4b857208ebaa37795a91a2f22ea56b095cfb235b3e8062e198b","sha512":"26806c5ecdb0a401db60c5e7543904e5f04be7516744926fe7d6cbbc402e3048fff139a7541429ce8ae8e51ddd398460388d7c9ed4c6de9a91ac5d03943fd6c4","ssdeep":"768:erQBLwFJVh2dNhTtFR1HA4mIK3GiHEtYLRU9hlWR6r7dSnhs333xEeVcMCJU3CBc:V5aOr7vdFomEm8j6N","tlshash":"8e23f9d4b3d4b6d4f50abbf8a12a643db63f28fdaa07cd78d2b42c60540108c7a95ec5","size":45873,"data":"","first_seen":"2026-02-21T20:28:29.71423Z","last_seen":"2026-02-21T21:36:38.426483Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17883670361","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc1c6c75bf95cca9157192cf985a5aa1","sha1":"458e2563eb12a18ebb54aa2779fa2fc9ea4ca279","sha256":"ecaa5d6d05b2d192202ab50ddab6bfdddaa763aea8b61dfb8a779b4f1bd04e72","sha512":"c602b0b06f32f243e15b585f48dd0abc6a1e62fe462d01f9114c774285adbdb1d1124d03ebfa19b80db194800057e9e47c7c4309d7a0328a0eba83c4f52ac987","ssdeep":"6144:r4D8ixaAJlAxXUI78kKUeDKJN5hSppv/UPRPl:MwixafxkI785D/UP","tlshash":"4b841acdb3d670269393a478403f018ba57b69a2f44cc895f18adce42d74a9a4277f7c","size":402197,"data":"","first_seen":"2026-02-21T20:28:29.773576Z","last_seen":"2026-02-21T21:36:38.458566Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/categoria-colchoes/page-c55efaadcac9f455.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c85cc6071d5e6b0c7d9cf88553935eb9","sha1":"3048789b281ffe481cfa0e550fe5944b855ec47c","sha256":"4a4738b977fbf0e519c8ead05659b822164688224fd64fc4459e0f9dfd4766d9","sha512":"3257185e60077f06cf5ef869d65c88d7d2ff669eb8ab234aef01879ea7bc11ed2ad2ffcb282669669dac21398af632d853fdb08c39d412542e4c33f84caeb113","ssdeep":"","tlshash":"dee0928a668d7c1e38376c20f9976c5324eb04713422485024208da22c3725cc251d88","size":361,"data":"","first_seen":"2026-02-21T20:28:29.708083Z","last_seen":"2026-02-23T15:53:38.872236Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/kit/%5Bslug%5D/page-49e05ada66c1b6f0.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa570f29a88b5b5ce510f2b5c555fafa","sha1":"cb2a92f56aea4e459861ef9429e058d102d1b7c7","sha256":"cc8eaa5d51549eb426ff88eacce8e618caac6d916b380f033874dbe50ff54b9e","sha512":"d0ab8b077c21072dbf33af113cca111143bb3e8d50c80c3032f4cc35381ff6469cdb2833d209d2220f502e67f5345c5f6fd8e5058554300c7739c54198a18b75","ssdeep":"384:S4jpLpjXBhvlwc+ZDpBaSl4T+dd+jdDAy4j24Bxo86T:S4jpLpjXBhvlwc+ZFISLaA7VFs","tlshash":"6372f304a255efdcf4a708e8656f609cf12e9b88da5f48a5b7b8283416c70dc7b137c9","size":16813,"data":"","first_seen":"2026-02-21T20:28:29.776879Z","last_seen":"2026-02-21T21:36:38.445277Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6980fd0f3c76db1c37e37e82/1jgfu7c40","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ccd898d04c3ea6de4098f1e89c3935a","sha1":"1b6a155029da917e792f98658ed7d84cb6fe599a","sha256":"87d4d8170bca94fcd4a99a5e37cc5a3cc70509332ed08fb382ce792c4e66e588","sha512":"16e379d5add4e754cdad313adcc5f609950ffa00edbecd0addc717d14842975830f98997b68a52f4bbad1a4be550e59c18b8ab45a8f9bc27185ce516945aec45","ssdeep":"","tlshash":"6f41ddea5b4f1c56b22410d90ebef90ef47620f749d95892970c085272657ad2f8de38","size":2123,"data":"","first_seen":"2026-02-20T16:42:31.256558Z","last_seen":"2026-02-23T15:53:38.846134Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/apoio-ao-cliente/page-3d3821e44896d304.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6b27d3c4ccea2ea70b3c9f738448250","sha1":"791cd17cc9125e4bac0efd34864cc3003b7071e1","sha256":"c4b4c537e356f4126464f618e7420ff3588a997e9d38b881455897ea026a677b","sha512":"fe96c95fab1955e8325c9206bf01887c7c82b22e659c53c3bb054d9c35a0da1395ec21294b9ec77463147bc407b566969e03f4b3e68e44efec86a772347234e6","ssdeep":"","tlshash":"9ad02b49798c7c0e38372c70e1eb3c5738ff44913815488055304db1187325cc711f84","size":270,"data":"","first_seen":"2026-02-21T20:28:29.725249Z","last_seen":"2026-02-23T15:53:38.828415Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/produto/%5Bslug%5D/page-5149c124746c515a.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"95a49c41edc0aa90a43b2c118de494e3","sha1":"16d2a8ff745a4e2a32ee82c697a7e9bfccdc8873","sha256":"3205d5b645a70d16dbbe0719067dce9c55922152da6cd47ee202ccc4218d392e","sha512":"355bffc5eb4763909d1376d9f411f7db495f9da397ea28e8b9d20b4a802c8271a3b5555d0fed230e0eef329793e9363b6d0369fd3fcdc7c07ff1950d3e645bae","ssdeep":"768:MPXsXPPDT7N+TmhPCnsrK5mV6ZrZ/hhh3RseR3XgyoiBP8AGFlohP/Voqj86wchi:MnxfFbbec566XqHC490m/f","tlshash":"523335059659afdcf93b08eca5dea00cb12f5b94da0b88b4babc383516470d47b53bc5","size":51877,"data":"","first_seen":"2026-02-21T20:28:29.713386Z","last_seen":"2026-02-21T21:36:38.411537Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-03T14:08:25.292982Z","times_seen":65968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","size":5504,"data":"","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-03T14:08:25.285252Z","times_seen":41618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9852f8901e015a04ae156390a35b45c3","sha1":"ec80d31d9082f70740c4f5891d0cf70a4d9c46b4","sha256":"45de4c778bec4a59bc207f24092de9fcc1326c9439525316c8e023f6ddad16c9","sha512":"2e7b7ea78b83415fc676ec6db65308b5b1b414e47eed232467729d043ced27c647109912c77ac9e8d846cdffbf273cffaa4246cd6f13e6baed27e61c13296819","ssdeep":"","tlshash":"71f08bb35c82de0ddb9b4f612c7f4c7950dec3694689e583e99cce141da6d308be1982","size":601,"data":"","first_seen":"2026-02-21T20:28:55.721562Z","last_seen":"2026-02-21T21:36:38.482658Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/status/page-2f0d24de86f803fe.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"72faab83c8d38a35c9432e89ed981003","sha1":"e8c9b62b0094e3908032c4aa87cf083a3498878a","sha256":"8ca670687c914ae89198904fdd6198d653cac8bbed7cf8cdb376a4c81ab13c92","sha512":"8b4885d0b0a6711256ba094a4d2faf18ffe53642b5608ac9d2cdcec6421c621f45a73781d8aa908874edcd9599b6fd9292b8fe99566d83c957333bac2ad7349a","ssdeep":"","tlshash":"2351010870a5bfdd7e6708b8b5af6408341e9b6cda5f48f2e7b4687105406a06a13fc9","size":2569,"data":"","first_seen":"2026-02-21T20:28:29.700482Z","last_seen":"2026-02-21T21:36:38.443877Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:34.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nOrigin: https://colchoesemmapromo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"d9deabdd1848c34f3ab46722f446c153\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 4050\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d195fcfeb9851e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-06-15T21:26:04.425371Z","times_seen":11131,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-21T21:35:21.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 12791\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: W/\"ff409c55a1288af9013d941afe1c62ea\"\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9brfs-1771709722241-77d88abd9cd7\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":398947,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65468), with no line terminators","md5":"29b4839bc2f8e5c4aefaf7bc0e10761f","sha1":"d4aff5c4b10d9f59b2b40363f6b3540ad28499e2","sha256":"54f3b8ab8ac49eae88ebbdc6eac7fe9aa23a1943105774ff4a382e2fee3bcd26","sha512":"8b017a655b155e3ec84c45db010698ac4c7073a4321aa274b6e21ac67c1bbff87ba93cd188c53d7b4ffb4c8af99da3a7cb2a317db459b2c34085ad06f31e6291","ssdeep":"1536:1kPha2zoj6epWL/SP+UacUEU8KbnAAlP5SRVCq/T+oG9d5U7JqrjNQZ6JIAHRogb:1kX0Oe8MyuO7EWwebczHhRCF","tlshash":"0184a661d208edcbb08b16a0f331b795b00fd349db8bea6963d5529573de83369220f5","first_seen":"2026-02-21T20:28:29.740742Z","last_seen":"2026-02-21T21:36:38.398202Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2128,"timings":{"blocked":1057,"dns":1030,"connect":1,"send":0,"wait":10,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/img/videos/unboxing.mp4","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:23.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /img/videos/unboxing.mp4 HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://colchoesemmapromo.com/\r\nRange: bytes=2031616-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccess-control-allow-origin: *\r\nage: 127141\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9d195f8b2d64f351-ARN\r\ncontent-range: bytes 2031616-2042372/2042373\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: video/mp4\r\ndate: Sat, 21 Feb 2026 21:35:23 GMT\r\netag: \"4dd432e5eeb6b36c6e536c7b22b7f0f5\"\r\nlast-modified: Thu, 19 Feb 2026 23:15:51 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nsb-gateway-mode: direct\r\nsb-gateway-version: 1\r\nsb-project-ref: zluctdqbycycyushuzqo\r\nsb-request-id: 019c8220-f302-707b-9a5d-47294cb02e1a\r\nserver: Vercel\r\nset-cookie: __cf_bm=WcbFU5k9GzqKxJpFCS.n2o6uE4kDmZR0OgsufRFpaKw-1771709723-1.0.1.1-LvpeVW5OnMLhK2.gnsJJCQ8XskfEH.WGvpoEIOYeeear3axNxCtzzPUUcJrqCMneyv76ikOCAwlQ4G7Xs9v_quUXqQRW1vXeOq4yrvR8N4Y; path=/; expires=Sat, 21-Feb-26 22:05:23 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: none\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::z94pl-1771709723379-a84eb4e50ec5\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 10757\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":10757,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"3b022e166dc77569e86e8087148361e7","sha1":"f6a7b8da60fc84607fd512526d91b23a71f1e713","sha256":"e1bacba0342e898ab1e23abf84b4b5a0e82b5425b0fa13069c0d27f5b8813186","sha512":"8490b628857b908c1fae936cbc129fbbbf330f9f7beadc4a979c29aa508215175c4f28e3e6d2200e3386fe4a21df9c8f284cf6ebc2c02f3385d11d8f277f7322","ssdeep":"192:YzSY2O4wM4AiLJOfziOxbdGFOAvTBMKHoitTkl6R4FJWp24:Y2Y29vawxbdGooTBMioUIl6yJSx","tlshash":"c8222ea5e3200503c4521a35e4d2132177f4e6b87283474f9be4b73ead7a3ed5e164ea","first_seen":"2026-02-16T15:01:54.208555Z","last_seen":"2026-02-23T15:53:38.820012Z","times_seen":12,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/produto/colchao-emma-premium-hybrid-2?_rsc=19zvn","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /produto/colchao-emma-premium-hybrid-2?_rsc=19zvn HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 12672\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: W/\"3626e588da999b2dc226ef4ca9581ea7\"\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /produto/colchao-emma-premium-hybrid-2.rsc\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zqp7n-1771709724127-3e2e4a962fc0\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35198,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (19712)","md5":"addae0a07606f8e943e3284df19f8685","sha1":"1e27f8ce6b84030a7f56e24ab40d22db7c2083d9","sha256":"6af9857f8dab56e7f3375260da06a9c43a97d8c349fed6c1c048d3678aed84ec","sha512":"01f812ca56857a2ab042c2b4b5a08245e02486549b14938acc1e0d33a02f88e48fb05df5e898d7f5b07ccfaba192ff8a4e2956d0fee9d82f384171ac9f087fa9","ssdeep":"384:MF4DHzmaBT5sfPzMMk8MMFVJ+iRTwkYz7J1rWz2nh/:FDHzmwOfPzMH8MO+MzYz7jR/","tlshash":"6cf27537ab14ae7eb9b64190254bd516d56e4337d160eeebc3de3e1c12dd023ab06283","first_seen":"2026-02-21T20:28:29.786919Z","last_seen":"2026-02-21T21:36:38.438267Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:35.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"09a6b2a4fc1400ec37c1115e6aa1670f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 159273\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d195fd50a80be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53530,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53411)","md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-06-15T21:26:04.427415Z","times_seen":34009,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:35.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"77424425bd755d02077922d40a96c207\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 148989\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d195fd51a83be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5261,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"77424425bd755d02077922d40a96c207","sha1":"9702eba70ac4506031d55a8c9cf6732a66853b2b","sha256":"1128f463d0038310bb65c71ee2bd50f52e40dd9dfc0489e127f3912a1aa728ce","sha512":"2ac723d6ab08dc1cf45141cc44966d9b0f01c892511f40148d785de61ac084e014799555bb3b574f6f8b78e9410df8c112fd437eafe0aa747babdc52b451d1a7","ssdeep":"96:zNC9Hqt7pEma7hY/rcKaJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYcLRIvgx43nVY","tlshash":"13b1859ef247b456c156225150ef3b1df33a281ca61ccdc8a66565f218784cba077b39","first_seen":"2026-02-19T03:13:10.646706Z","last_seen":"2026-06-15T21:26:04.407976Z","times_seen":8491,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/210-1de08b42030c50be.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/210-1de08b42030c50be.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4061\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"210-1de08b42030c50be.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"d188e132dc80b70e71c025039cd72053\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:40 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/210-1de08b42030c50be.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::sqrcf-1771709722514-e49ec199db56\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 4914\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":19132,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19132), with no line terminators","md5":"d3351f041a151fc2c0b915364b3815cf","sha1":"5f1c00a8b4aa531600c72ce87b322a0fe5ee2688","sha256":"fdf60a308a11f45e03df0d3b3609bf1a5990eab9d56a347539701fc9bc1ec582","sha512":"bed8e1635dac4479596b4d44db287514d09e42cccc2c83d381acd06e2a47a316fd920083fb6a24d42eff2758bdc631fb8e6afce7a8d4d23f9e2968287938ddd4","ssdeep":"192:1hUedYxoJ2SnZ2DENbEdnD4h5+2XWyC2swHLI7iCL5kUI2mwsO7saUZS2Xivpecj:HU3edXEJ2xIBL5FPrHMBu","tlshash":"40829796ccbc0a0c03a13161fd0dd1c7b52c5420e19e685b7ec6d59a72bb428e7adb6d","first_seen":"2026-02-21T20:28:29.768031Z","last_seen":"2026-02-23T15:53:38.820532Z","times_seen":6,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/image?url=%2Fimg%2FOriginal_BR_Mobile.png\u0026w=640\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/image?url=%2Fimg%2FOriginal_BR_Mobile.png\u0026w=640\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 21735\r\ncache-control: public, max-age=31536000, must-revalidate\r\ncontent-disposition: inline; filename=\"Original_BR_Mobile.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Sat, 21 Feb 2026 15:33:07 GMT\r\nlast-modified: Thu, 19 Feb 2026 23:14:07 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::x2wcl-1771709722935-7517da730736\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 18814\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18814,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"96def1d615cf64b1edd96ab7169eabee","sha1":"c6b340335371bbbe3536d6540475948ef430594f","sha256":"eba8cb8ed8e09dff57e0e3b884c5e135ca973fd955264e4305c51ef8b1fd4fc7","sha512":"03c38a20c781e4c67a74e31d65d9b49b3b117fb04b2b85377edcd459b94c68e2d412b085e81d40fd037df373abdd9a9ab2b0469ccb23e15a37dee5341bd43196","ssdeep":"384:la0VaxkCt8DsTjhXlR3HiN56/fKM15b8KAvWvg2xSI2456xewVyHN7TxZ+A:xkxkCpDiT0CM158KkWHwI2456Igyths","tlshash":"fd82c040590f15ecd12185fe41c48f356b14aff9b536728ef2e972a1e1b84b7372a8d8","first_seen":"2026-02-21T20:28:29.749384Z","last_seen":"2026-02-21T21:36:38.459313Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/image?url=%2Fimg%2F65ae7065a5418c07ad290204_about-sleep-science-background.jpg\u0026w=640\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/image?url=%2Fimg%2F65ae7065a5418c07ad290204_about-sleep-science-background.jpg\u0026w=640\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 17179\r\ncache-control: public, max-age=31536000, must-revalidate\r\ncontent-disposition: inline; filename=\"65ae7065a5418c07ad290204_about-sleep-science-background.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Sat, 21 Feb 2026 16:49:03 GMT\r\nlast-modified: Thu, 19 Feb 2026 23:10:13 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f8v7w-1771709722939-5f8eceaaaa4a\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 33354\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":33354,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x427, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5a6c8b4b3b6666cf460c75ee12007d43","sha1":"a728431a30196ba57211c023487daeccb6a9fd06","sha256":"6483b144aefb03bb322010a6babfcf825046684d2987e668acbf39b45b8ae6c4","sha512":"2cd6ea02154923b89cae624b0273a8710e66467206333b77c1778f0d5cb54cdcd44f6810510eb37228122b2f4e3d032cb46ef114f086fd948bfed9c8c3a86ef2","ssdeep":"384:HRuVG9BOf0nefoDY+qoXPmZNexnI4AUgYDeWO+m1uY3esJArnRnMt+gdCs5iqFfB:xuViXfX+TeOKeWTY3VN5JXblv","tlshash":"a4e2e125a800cd6dbdf067ea586f20c358da18b89b7688249605052ff4a93cc7c3d77f","first_seen":"2026-02-21T20:28:29.758762Z","last_seen":"2026-02-21T21:36:38.429978Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/produto/colchao-emma-original?_rsc=19zvn","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /produto/colchao-emma-original?_rsc=19zvn HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 12672\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: W/\"22ba824fe8941ff70ec0277fc4dc25ed\"\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /produto/colchao-emma-original.rsc\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p9jrc-1771709724128-a0a9d7db7455\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":52649,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (29073)","md5":"c77d381e30633c63c24e4ee121be384d","sha1":"81470e65e60a655a209698b4e0c518562e345ae5","sha256":"c7c023f0fe7f4a6c461cb217a144ab910f7fd0c656017574aaa9d0bfb3dfb058","sha512":"b9d6e2097cfd715632f18034ae30caca3d73bef47212cafbd576cfbd7f17a7b448bcc8650104486b10e4e2de7500efeb49aab850e16330305204a4d5643b9974","ssdeep":"768:dgoMdszDf74PzMH8MXNzmIr+iz8I79y8wr4Z/:dgoMdsD4bMcMXNmIJ579y8wcZ","tlshash":"2b33b826ca38ad3dba7386a1240be653f45d822791d0de9fd7dd9e1c52ed43227028c7","first_seen":"2026-02-21T20:28:29.701388Z","last_seen":"2026-02-21T21:36:38.473966Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/produto/colchao-emma-one-light?_rsc=19zvn","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /produto/colchao-emma-one-light?_rsc=19zvn HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 12672\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: W/\"76077394089ba69f1701530b752ca6f7\"\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /produto/colchao-emma-one-light.rsc\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p9jrc-1771709724135-f387a4e02c41\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39132,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (19897)","md5":"07a8c43920922f71d8356c321d2b4b2c","sha1":"0dbb15f95d9b98becb494d9d04a08e263956c839","sha256":"88895abdfb7904c5b0812848f0b22b30d5644c6eb383f711990b0abe16ca990a","sha512":"676faf5df48334fbb14f000612a22b5bb657f5d3a520c2140875d818d67b43652972f16dae89d4f7b3a56f61760b7f61ade79952fa3342c00a942bd0733a7bc9","ssdeep":"384:MFQHY+He8zDXGWbkwdPzMMk8MMhxY+CI3DbfD+z8Xv4+Ub65tCit/EI/:NHbfzrucPzMH8MQY+H3nqzKoeLJt/3/","tlshash":"6c03d837d668ad9d7eaa94d1240bd502f82d533bd1b1ed7e83ee293c12e80236707593","first_seen":"2026-02-21T20:28:29.687571Z","last_seen":"2026-02-21T21:36:38.46839Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:35.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-3ea2c7ce.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"52698c6dc96b5f2bd13e8f921334e398\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 239514\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d195fd4fa7bbe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5504,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5496), with no line terminators","md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-03T14:08:25.285252Z","times_seen":41618,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/css/8e789550b01db38d.css?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/css/8e789550b01db38d.css?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4062\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"8e789550b01db38d.css\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"71ca5fef1385bacb5fb82aad7dece15a\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:40 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/css/8e789550b01db38d.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6dqz9-1771709722507-14f5396b8857\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 12802\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":75514,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (63263)","md5":"ec399d8344c42cddbe275e8fb987f8be","sha1":"1f039029a6a2a5fb8c4d0badef567b9fe3e79d5f","sha256":"b8651d8fe5db120b78fb373e7c60b0e3539c925b7f484197ccd5579cba5ecab2","sha512":"ec0bc2009788765815a225e2d3cddc0fccdb996866e825ca0fb08654c88cf0573667cf340c24386253af3147989ecde20086c0d68ff675bf4837b8f0627e0338","ssdeep":"1536:GFjCbTQvKht04Qc9OZZmfFmsaMXLKS6UId3Lj1vQLL/OWrSNhWB/NE:GFcTQvKht04Qc9OZZmfFmsaMXa3PtqLE","tlshash":"5e73842d961a043fac37a4f2e1d8be99a12ab1c0ef6556e6fd5516008bd25f33e93700","first_seen":"2026-02-21T20:28:29.761997Z","last_seen":"2026-02-21T21:36:38.464323Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/648-337cec5a3fda1dfb.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/648-337cec5a3fda1dfb.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4061\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"648-337cec5a3fda1dfb.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"42be9085d04c606ce53db9e0b883ed60\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:40 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/648-337cec5a3fda1dfb.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::z94pl-1771709722512-f4b89916bbd9\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 9172\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26151,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26151), with no line terminators","md5":"222ff81c7cb5af9088ad55a3bcff070c","sha1":"4beb7632c7d19bb488a70170d48096271b92705b","sha256":"a8e508236c3e15c2921e72f1a71c11ac63db4d0e2adf1359d763fa2ba33e36c8","sha512":"44410a8f3c2c1118fcc20325cf1e9d89c493c050892384561422ea34f33cb6c768d46a34bd3e3c9191e9d4ac3aa3f68621ad9c3ba116e4823ac9cf5d9db6aa15","ssdeep":"384:P5k1IdRMx3IG1DnLGRwqdggPG1kyDfLxvZKVSUENLd3NU7tpU2J91wMVG4x:xkgRMxhdnLqkKByLX4tpU2ZhVJ","tlshash":"1dc2e8be71d2f8a2479b11a0443b1006f2be4caa145e6244f7b4c8dbf57056da1b3fad","first_seen":"2025-07-15T06:25:55.752884Z","last_seen":"2026-08-03T13:19:16.849064Z","times_seen":338,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/image?url=%2Fimg%2FEmma_Premium_Hybrid_II_Mobile.png\u0026w=640\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/image?url=%2Fimg%2FEmma_Premium_Hybrid_II_Mobile.png\u0026w=640\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 21735\r\ncache-control: public, max-age=31536000, must-revalidate\r\ncontent-disposition: inline; filename=\"Emma_Premium_Hybrid_II_Mobile.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Sat, 21 Feb 2026 15:33:07 GMT\r\nlast-modified: Thu, 19 Feb 2026 23:13:00 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nk6cs-1771709722949-9e4f98c03b64\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 21710\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":21710,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f2e68cfe1a63ac1eef69c194c2febeb","sha1":"1112319c751210817878d444fb4b3481320544ce","sha256":"c6e949424caa0999675497677f3c59027d80419cbdf09837317bc8b091d739ac","sha512":"27f7722134d1327aec4b92d8e94e8b15937dc3ca2bae063ec32b589faef27a9304213648d0faa38ea6af74823d129da4359dc6c51242bdc6a2d1f7d9375020f9","ssdeep":"384:8Rhr2AwvXfwysRckI2Kn42RwBWKl9Obn5fvLkagIOnXjMDNeSrZoJ83mdBZB4:Uhr2AIPGCABWKlg5fvLk9LQNeSF738/","tlshash":"aaa2c06cea44ab18d6c32c3885b4c95918d0d7acccde66735d8a27aaa5118c84c7b1ff","first_seen":"2026-02-21T20:28:29.771057Z","last_seen":"2026-02-21T21:36:38.428561Z","times_seen":4,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fcolchoesemmapromo.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1084092344.1771709724\u0026dt=Colch%C3%B5es%20Emma%20%7C%20O%20Melhor%20Colch%C3%A3o%20do%20Brasil\u0026auid=528276049.1771709724\u0026navt=n\u0026npa=1\u0026gtm=45be62i1v9242285843za200zd9242285843xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~115938465~115938468~117455676~117455678~117527079\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-17883670361\u0026tid=AW-17883670361\u0026tft=1771709723782\u0026tfd=2621\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.143.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:39:05 GMT","end":"Mon, 13 Apr 2026 08:39:04 GMT"},"fingerprint":{"sha1":"AC:37:C7:AF:75:CB:27:69:D4:EC:B6:A6:68:E1:51:4A:A3:99:78:B0","sha256":"63:86:A6:69:FF:ED:40:2B:88:13:6E:3E:4F:01:08:AB:8D:96:19:72:D3:22:DD:14:05:79:8E:5D:58:1F:0D:39"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fcolchoesemmapromo.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1084092344.1771709724\u0026dt=Colch%C3%B5es%20Emma%20%7C%20O%20Melhor%20Colch%C3%A3o%20do%20Brasil\u0026auid=528276049.1771709724\u0026navt=n\u0026npa=1\u0026gtm=45be62i1v9242285843za200zd9242285843xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~115938465~115938468~117455676~117455678~117527079\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-17883670361\u0026tid=AW-17883670361\u0026tft=1771709723782\u0026tfd=2621\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\ncontent-type: text/plain\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T15:28:01.656173Z","times_seen":17692056,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":107,"dns":0,"connect":8,"send":0,"wait":18,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/melhor-colchao-pra-voce/page-642a41a84cf7976f.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/app/melhor-colchao-pra-voce/page-642a41a84cf7976f.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4051\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-642a41a84cf7976f.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: \"6e9e50fd7ab49296c930e937babffef3\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:53 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/app/melhor-colchao-pra-voce/page-642a41a84cf7976f.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mfxlp-1771709724056-226add7731ce\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1344\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3378,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3378), with no line terminators","md5":"d70699a3263d4326019047e00b671937","sha1":"816879b7404f1c8306a7a93eea586a3b1cc5f18b","sha256":"dc3ce65ba468d946d6d7efac805cc5bc6a1387576633595feca03783159d7aec","sha512":"29741f59fc238756ffdda16f873e470ef8978df2d1d315edf9ca6e8e4be728e079417653013dad1f44956a3835795b586c57296d243956e49170c858d05ee003","ssdeep":"","tlshash":"48615359b888facca46718fc6cdb540ca23f4a5cc56b5cd6f0a46bb312622943213f9c","first_seen":"2026-02-21T20:28:29.789028Z","last_seen":"2026-02-21T21:36:38.422572Z","times_seen":4,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:34.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nOrigin: https://colchoesemmapromo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 4051\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\ncontent-encoding: br\r\ncf-ray: 9d195fcfeb9f51e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-03T14:08:25.296437Z","times_seen":92494,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:35.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"87f83aeea14051d9edd97ec3dd41fa0e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 104311\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d195fd4da77be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"87f83aeea14051d9edd97ec3dd41fa0e","sha1":"8649c359a630d1c55eb268ff051d5a284ef7587e","sha256":"38a072ee28e39fadd2153244a3f0a48df473ce7d8dfe16e2f2fcbe5d9cd0bc6f","sha512":"c56e03220951ba738fa2f29bec6d02b1de5ca769f1f41c39ff3f12334b16d0a82db78487c4e4cfcd8fdfaddf4af6b923c725af335346028224efa849bc140eca","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCrGN//h6LiJq:SzP2DZSLi8","tlshash":"37822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","first_seen":"2026-02-19T03:13:10.613764Z","last_seen":"2026-06-15T21:26:04.434078Z","times_seen":8479,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"vsa41.tawk.to/s/?k=699a25273ad4812025ee5a52\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OTgwZmQwZjNjNzZkYjFjMzdlMzdlODIiLCJ2aWQiOiI2OTgwZmQwZjNjNzZkYjFjMzdlMzdlODItTkszMkxDUFpNaE9JUTZjd1FmaWxBIiwic2lkIjoiNjk5YTI1MjczYWQ0ODEyMDI1ZWU1YTUyIiwiaWF0IjoxNzcxNzA5NzM1LCJleHAiOjE3NzE3MTE1MzUsImp0aSI6IlV3cGQwb3lYcXh6RVpLMUI0M1RmZiJ9.U_9cy7Yg6TsqOEsOZP4s_XNbahuqJgN3Hr0s_T-ZVie4aV6sKRNx9A5pdM7rrqfXy8NOlcM0G29jjgj5PTXgPQ\u0026EIO=3\u0026transport=websocket\u0026__t=Po28I42","fqdn":"vsa41.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:35.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /s/?k=699a25273ad4812025ee5a52\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OTgwZmQwZjNjNzZkYjFjMzdlMzdlODIiLCJ2aWQiOiI2OTgwZmQwZjNjNzZkYjFjMzdlMzdlODItTkszMkxDUFpNaE9JUTZjd1FmaWxBIiwic2lkIjoiNjk5YTI1MjczYWQ0ODEyMDI1ZWU1YTUyIiwiaWF0IjoxNzcxNzA5NzM1LCJleHAiOjE3NzE3MTE1MzUsImp0aSI6IlV3cGQwb3lYcXh6RVpLMUI0M1RmZiJ9.U_9cy7Yg6TsqOEsOZP4s_XNbahuqJgN3Hr0s_T-ZVie4aV6sKRNx9A5pdM7rrqfXy8NOlcM0G29jjgj5PTXgPQ\u0026EIO=3\u0026transport=websocket\u0026__t=Po28I42 HTTP/1.1\r\nHost: vsa41.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://colchoesemmapromo.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: /bijtq1watWwB3TmBsakKA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 21 Feb 2026 21:35:35 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: RMu1dSAGcM+caLWZSTqmxGuXeis=\r\nsec-websocket-extensions: permessage-deflate\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: 9d195fd5da373e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T15:28:01.656173Z","times_seen":17692056,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":48,"connect":56,"send":0,"wait":394,"receive":3,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/media/e4af272ccee01ff0-s.p.woff2","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/media/e4af272ccee01ff0-s.p.woff2 HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4062\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"e4af272ccee01ff0-s.p.woff2\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: font/woff2\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"65850a373e258f1c897a2b3d75eb74de\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:40 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/media/e4af272ccee01ff0-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nk6cs-1771709722505-3436d7e1412d\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-03T14:27:03.304097Z","times_seen":86073,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/media/e4af272ccee01ff0-s.p.woff2","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/media/e4af272ccee01ff0-s.p.woff2 HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://colchoesemmapromo.com/_next/static/css/8e789550b01db38d.css?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4062\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"e4af272ccee01ff0-s.p.woff2\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: font/woff2\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"65850a373e258f1c897a2b3d75eb74de\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:40 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/media/e4af272ccee01ff0-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5vkwl-1771709722719-9924407f039c\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-03T14:27:03.304097Z","times_seen":86073,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/media/5c0c2bcbaa4149ca-s.p.woff2","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/media/5c0c2bcbaa4149ca-s.p.woff2 HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://colchoesemmapromo.com/_next/static/css/8e789550b01db38d.css?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4062\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"5c0c2bcbaa4149ca-s.p.woff2\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: font/woff2\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"662c56ecd8de96f417f0400559ab2ab9\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:40 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/media/5c0c2bcbaa4149ca-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::thc48-1771709722921-861ac479222a\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 37792\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":37792,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37792, version 1.0","md5":"662c56ecd8de96f417f0400559ab2ab9","sha1":"e397d9da8697653a841f3a31370c4cb99fa24b24","sha256":"6b102ab35aa1f2b315788bb4853434ed1e52137603bf7a3da71a682276748d45","sha512":"2bf8d3d5d13d356a628aa6d7fa0da956305cb52d0a8f5e6fd9b616872924cffd9cd334b8750ab81207182081df6da456552fb273c6878d7af7d740c2563dfc26","ssdeep":"768:SIVPqC9PFkzqwjy0UVkAacqbUtPo4zMAm8oPbIGYvQvNr:/VbPFyqwjyxV92UFo4wpzcAr","tlshash":"0103f1fba14d508c7cf414bc959298435b627bdfb4aabb5eff9a41c13427402ba02b06","first_seen":"2025-09-14T15:16:18.995451Z","last_seen":"2026-08-03T14:28:52.577335Z","times_seen":2226,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/img/videos/colchoes-categoria.mp4","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /img/videos/colchoes-categoria.mp4 HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://colchoesemmapromo.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccess-control-allow-origin: *\r\nage: 127141\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9d195f887f92f351-ARN\r\ncontent-range: bytes 0-4796183/4796184\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: video/mp4\r\ndate: Sat, 21 Feb 2026 21:35:23 GMT\r\netag: \"e953c7171d5add0f6a1113657775b51e\"\r\nlast-modified: Thu, 19 Feb 2026 23:15:47 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nsb-gateway-mode: direct\r\nsb-gateway-version: 1\r\nsb-project-ref: zluctdqbycycyushuzqo\r\nsb-request-id: 019c8220-f14e-76c7-b34f-30d2a32ae8ae\r\nserver: Vercel\r\nset-cookie: __cf_bm=C9v3JEAGloSmspJ7pPr5tdOT7miHaAwZKdUS10plY9E-1771709723-1.0.1.1-cLYZdCANwCiGLHKkjsxxrpnsxkkvG.DtMAiXGkGx_4.k3QBXBICei4B7Vc_37nyy7n.bun7lt8qU.atSBI1UrpGEXetpvtZnYCLn_0fHPe4; path=/; expires=Sat, 21-Feb-26 22:05:23 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: none\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::thc48-1771709722929-d721412e0c20\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 4796184\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4796184,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"4a48666c5c98edffe7c8bc6ca7f7bb34","sha1":"8ea87cf0025b3e11e518c1af9738e8ed9ea8014e","sha256":"71dff96ee30d240e77e3d225cb1cd326208be3125563d0ddce35adbae2682d66","sha512":"99159d5760b88bc0974dffbff7d4079089c97ef6421db6e6b5cee16144df550c2f7b7fb308d22113cd0aabdf48ccddd81dad1cfc6b340e0c1a44bfdc95e48adf","ssdeep":"24576:GORnu5aJPN4hHyRlRU5ocniK6q1Hp2jVcPA5RjYn5GGAw:xRn3lNKeRQznHmVcPAL+5G5w","tlshash":"302523342e891a21f26cd7ff91d9d256d7135af348924803f5bf4ca51f8022889af4fa","first_seen":"2026-02-16T15:01:54.193025Z","last_seen":"2026-02-23T15:53:38.830171Z","times_seen":13,"resource_available":false,"data":null}},"time_used":686,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":570,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/image?url=%2Fimg%2Fmelhor_do_teste_2024_3.png\u0026w=256\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/image?url=%2Fimg%2Fmelhor_do_teste_2024_3.png\u0026w=256\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 21735\r\ncache-control: public, max-age=31536000, must-revalidate\r\ncontent-disposition: inline; filename=\"melhor_do_teste_2024_3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Sat, 21 Feb 2026 15:33:07 GMT\r\nlast-modified: Thu, 19 Feb 2026 23:14:02 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j59bz-1771709722932-5befedca3484\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 4080\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d013dd64bda5aa5fb11caf2676a54903","sha1":"0718aae4cd5ca0b13947b07ee8942c5c08e454b7","sha256":"dc4cd72d4afe69084039fbfed63f06dd66efcacfec9734c86c9df1341f897f39","sha512":"ea0580320f3842fa80ce2c632907b5863af5e3c4bc24e347484bb769739a19cefec23efb16258f6c599fd3315d43bb479dc0d60ecc665587f0dbddda0a67a810","ssdeep":"","tlshash":"84816e6f42a29d2bcc4c3de09d2d127ff508929e116a0fc6466d26c674609c2966f3e4","first_seen":"2026-02-21T20:28:29.770167Z","last_seen":"2026-02-21T21:36:38.443188Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/kit/%5Bslug%5D/page-49e05ada66c1b6f0.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/app/kit/%5Bslug%5D/page-49e05ada66c1b6f0.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4050\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-49e05ada66c1b6f0.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: \"31f92f14db52432eba4d1b424d22761c\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:54 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/app/kit/%5Bslug%5D/page-49e05ada66c1b6f0.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zqp7n-1771709724251-9477918989d7\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 4717\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":16813,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16813), with no line terminators","md5":"aa570f29a88b5b5ce510f2b5c555fafa","sha1":"cb2a92f56aea4e459861ef9429e058d102d1b7c7","sha256":"cc8eaa5d51549eb426ff88eacce8e618caac6d916b380f033874dbe50ff54b9e","sha512":"d0ab8b077c21072dbf33af113cca111143bb3e8d50c80c3032f4cc35381ff6469cdb2833d209d2220f502e67f5345c5f6fd8e5058554300c7739c54198a18b75","ssdeep":"384:S4jpLpjXBhvlwc+ZDpBaSl4T+dd+jdDAy4j24Bxo86T:S4jpLpjXBhvlwc+ZFISLaA7VFs","tlshash":"6372f304a255efdcf4a708e8656f609cf12e9b88da5f48a5b7b8283416c70dc7b137c9","first_seen":"2026-02-21T20:28:29.776879Z","last_seen":"2026-02-21T21:36:38.445277Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:34.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nOrigin: https://colchoesemmapromo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"0beffdc96a1a1b35b5ce2759d6d1d51a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 4051\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d195fcfeb9a51e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-06-15T21:26:04.412918Z","times_seen":11137,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:34.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nOrigin: https://colchoesemmapromo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:34 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"4662c7c182dfe30065936bfa05f8c773\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 4050\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d195fd129d8be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4662c7c182dfe30065936bfa05f8c773","sha1":"d1f155c335c31be5947ef8ebf82be1eee2782fc2","sha256":"2d2d85dfc80ec4f42d12bea574d59879d269b5c06557cf888367fbfa9036fe47","sha512":"abd2530371ef02602814b0bed360225c0530615c5db002d61511bca5e8cda0d8da2bd288631ee02da5fbf952b31bd4380284dcd56838277b52654f7d13dc6229","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9svKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59L3Zwfi","tlshash":"ed323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2025-06-18T04:11:24.033166Z","last_seen":"2026-06-15T21:26:04.41843Z","times_seen":49917,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/categoria-camas?_rsc=19zvn","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /categoria-camas?_rsc=19zvn HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 12673\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: W/\"5f9bd118a20941ec038a0b83bb7477ec\"\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /categoria-camas.rsc\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7g4qn-1771709724015-a1233896b6ad\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13908,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (6633)","md5":"886ceebb3897a07ac55680acfbb1baa4","sha1":"e5d92d78cc78265f42a551d7939f57dbbcb062f5","sha256":"a305914a1b492151c1189007494b1564dbe7790d5afe7bf94a9c61283d8e6269","sha512":"5bcb4897ffc5c2a88f1fb38d0e81d78110dbcea2ece4be0c2555e9373861812eafb86c65136eb4a3d31a35151c740c4d8888daae77abaa751fae35ba70c3983e","ssdeep":"192:YJ2OzpjtH9IAz/H9mTq2uDBQ4z3B8DWtAZrHl9WRf9R50V1gC/hVzAZpFHL9WRIa:+DyTqvX6yGzUjYhVUpUWIYhaVFOxSjNt","tlshash":"1652c23b5704eead3d7b4564211fe32a912e873b86a65dbbc3ed3d2813951333a062c1","first_seen":"2026-02-21T20:28:29.709275Z","last_seen":"2026-02-21T21:36:38.441741Z","times_seen":4,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/img/emma-logo.svg","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /img/emma-logo.svg HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9d195f85de7075c3-ARN\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: image/svg+xml\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: W/\"61d1eeb29e60e40cc0e118840873bc43\"\r\nlast-modified: Thu, 19 Feb 2026 23:15:54 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nsb-gateway-mode: direct\r\nsb-gateway-version: 1\r\nsb-project-ref: zluctdqbycycyushuzqo\r\nsb-request-id: 019c8220-efb3-7d90-8970-180a70b56788\r\nserver: Vercel\r\nset-cookie: __cf_bm=7O1RYpvArXR0OLJk.WudSdLzJIp17G1e92oEAHiMzfg-1771709722-1.0.1.1-kVFg2.Ti5MS4i1cU1TTkiAZS3etkotUR_ODiTBIEX0HfHits2ZhaGe0B9WgMx2NrGcyUX4gmmTUHgcMNVlWF07p0kQqhFyvE3aBtQQtzMtY; path=/; expires=Sat, 21-Feb-26 22:05:22 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: none\r\nx-smart-cdn: true\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::85tdg-1771709722506-e6d46527a225\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":10132,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"61d1eeb29e60e40cc0e118840873bc43","sha1":"7275f537781e2828bee12462404d7c795198c53c","sha256":"eebde41252bc6d5328d8d26fd50a62d1779f7bf69b6dfc9658d61fc405944071","sha512":"24fd438ece4a89f25ab431c065163c7d8b77487cb6f3d0d40b779a17082fdc2cd323dc8fcc12409dd6f3e7319ec788dd6cbb3a70d0860ec9fe216eab590b3704","ssdeep":"192:cyOwLgChGcGix0UyUl4uibgwepsUTNqyOXH5TERt:fOygChdGCibysUTNqpXHOt","tlshash":"772247edb78966c0e319f3f2e2e4141a6a5f24ee1b45c4ebd7993ca1882305cd6d58c1","first_seen":"2023-05-23T17:28:55Z","last_seen":"2026-07-26T01:47:32.177699Z","times_seen":49,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/img/videos/colchoes-categoria.mp4","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /img/videos/colchoes-categoria.mp4 HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://colchoesemmapromo.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccess-control-allow-origin: *\r\nage: 127141\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9d195f888da07656-ARN\r\ncontent-range: bytes 0-4796183/4796184\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: video/mp4\r\ndate: Sat, 21 Feb 2026 21:35:23 GMT\r\netag: \"e953c7171d5add0f6a1113657775b51e\"\r\nlast-modified: Thu, 19 Feb 2026 23:15:47 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nsb-gateway-mode: direct\r\nsb-gateway-version: 1\r\nsb-project-ref: zluctdqbycycyushuzqo\r\nsb-request-id: 019c8220-f157-775c-99ac-38798f84a8fd\r\nserver: Vercel\r\nset-cookie: __cf_bm=LForxZ_ZFv2Q8Dot7vQ_c0i8iU86N3B0c9AHA7J2dVs-1771709723-1.0.1.1-XMFy.Yax.mZrOGuJowiMUdoFZT5oQhWkbhGEnh232jKzswjtNq59Fcdd1OJahbuEzPjAf4EWoxAb4XCO_tzQv9W.g07fvj_w4l8rTYmgJkE; path=/; expires=Sat, 21-Feb-26 22:05:23 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: none\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::sqrcf-1771709722930-a996c6bfe844\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 4796184\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4796184,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"4a48666c5c98edffe7c8bc6ca7f7bb34","sha1":"8ea87cf0025b3e11e518c1af9738e8ed9ea8014e","sha256":"71dff96ee30d240e77e3d225cb1cd326208be3125563d0ddce35adbae2682d66","sha512":"99159d5760b88bc0974dffbff7d4079089c97ef6421db6e6b5cee16144df550c2f7b7fb308d22113cd0aabdf48ccddd81dad1cfc6b340e0c1a44bfdc95e48adf","ssdeep":"24576:GORnu5aJPN4hHyRlRU5ocniK6q1Hp2jVcPA5RjYn5GGAw:xRn3lNKeRQznHmVcPAL+5G5w","tlshash":"302523342e891a21f26cd7ff91d9d256d7135af348924803f5bf4ca51f8022889af4fa","first_seen":"2026-02-16T15:01:54.193025Z","last_seen":"2026-02-23T15:53:38.830171Z","times_seen":13,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":732,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/img/videos/smile.mp4","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /img/videos/smile.mp4 HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://colchoesemmapromo.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccess-control-allow-origin: *\r\nage: 127141\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9d195f888c4e75a1-ARN\r\ncontent-range: bytes 0-474688/474689\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: video/mp4\r\ndate: Sat, 21 Feb 2026 21:35:23 GMT\r\netag: \"2cf6e1727b46f676a6072b10d6da99cf\"\r\nlast-modified: Thu, 19 Feb 2026 23:15:48 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nsb-gateway-mode: direct\r\nsb-gateway-version: 1\r\nsb-project-ref: zluctdqbycycyushuzqo\r\nsb-request-id: 019c8220-f162-7e37-8cb9-f6c6a65fc7a3\r\nserver: Vercel\r\nset-cookie: __cf_bm=tPD2b6a4MvQs1PPMpG5jf_ADUfO0c4U.xlbfZDv7bnI-1771709723-1.0.1.1-yXuA.MaqN32m2f5.Jp7FjQi305PGL.JHGSJiik.wcOa4orJOE3LStVgrVlXwAyW7Il9Ek.0e808D4SgBg6cnt.BrlHXEoJqplx_QQvNEF0I; path=/; expires=Sat, 21-Feb-26 22:05:23 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: none\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::6dqz9-1771709722930-f3cc0a033634\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 474689\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":474689,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"2cf6e1727b46f676a6072b10d6da99cf","sha1":"bdef3bf8d1d1b0a51826c19f7969f789f7462216","sha256":"965edcfdfb84a19234b096bc8bcdc5bb305f64d29180c7c6e466e7f577a2a6ff","sha512":"1b2ace8ae4b4edf02656f6eb7f3a0ed0e402db62f8543fa3cec01cfcd058afd230a48f9f9193f915c5eaec945ac2e39b29a8d0075810e5103ed502590716feff","ssdeep":"6144:vHHk8xlIc7SBH4wrECLmOYpbp/Dh/AFiU0/3/L/P+6U0/3/Z5P8bU0/3/ZS:vkelI37mOYVp1/p17+61Jeb1JS","tlshash":"19a4dfae8dd64321ff78fe3e84a8c91ae4d45748c986c7cf991806214bbe20507bf975","first_seen":"2026-02-16T15:01:54.116483Z","last_seen":"2026-02-23T15:53:38.835786Z","times_seen":15,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/img/videos/unboxing.mp4","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:23.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /img/videos/unboxing.mp4 HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://colchoesemmapromo.com/\r\nRange: bytes=1015808-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccess-control-allow-origin: *\r\nage: 127141\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9d195f8daee175c3-ARN\r\ncontent-range: bytes 1015808-2042372/2042373\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: video/mp4\r\ndate: Sat, 21 Feb 2026 21:35:23 GMT\r\netag: \"4dd432e5eeb6b36c6e536c7b22b7f0f5\"\r\nlast-modified: Thu, 19 Feb 2026 23:15:51 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nsb-gateway-mode: direct\r\nsb-gateway-version: 1\r\nsb-project-ref: zluctdqbycycyushuzqo\r\nsb-request-id: 019c8220-f495-7cfa-b685-e2bc56cbb200\r\nserver: Vercel\r\nset-cookie: __cf_bm=CwOdVZZRIjvndCba8Rm9dItbhpPyzUJNUJVQ4rWwm_c-1771709723-1.0.1.1-7QbN129PqPlvFx2HPHAPgsbeETY6v1dCJ0L2qSDVSp8oN44KYrjNqQM0vG9maqNpAh7H2cc1H.3nrmaH718zavbwbLRDK2g_iaBHlZumikc; path=/; expires=Sat, 21-Feb-26 22:05:23 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: none\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::hq25c-1771709723782-d9ef4c5043ee\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1026565\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1015808,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"ea6c80d9d8511362ff5730609c24f210","sha1":"b7db4120015ac1db9dbdd522aea01f3e38263315","sha256":"e53c2523494823e3155e61e0434da91b14a3e027ea99cde87ce6315a1852462b","sha512":"c353e3af60ad1ff9fec81b058d719ae9bf0a8979077d044740d4f82914980ab1c55e91583a179573285f6522a4b18af524bed8ccdea81f7dddf1717afaf42949","ssdeep":"24576:20hsTjSt4RXQbq/D7ccp6uK+qopWaH3ejcKU27tok:2oyjJ/Dg8K+qoQaHccKv7d","tlshash":"c225330aca955bf5c313b4b66722df6567fa1039de5f76a3080190ad2bcbf1f17a6800","first_seen":"2026-02-21T21:35:56.353675Z","last_seen":"2026-02-21T21:35:56.353675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":50,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/categoria-acessorios?_rsc=19zvn","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /categoria-acessorios?_rsc=19zvn HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 12673\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: W/\"166380c4562f2ebc2a2033862feb8b9a\"\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /categoria-acessorios.rsc\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p9jrc-1771709724108-646c417e681c\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18008,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (10647)","md5":"63f61afc9ce5f6c359e5767ed052794c","sha1":"74a949817e7beea77102d1c89606c3381e7f1f16","sha256":"2bce6432bf328df07c295fc6276a1ded1b2945c43bd9a60dd2389a5d55cc041c","sha512":"f61478b9bb6e998ad91b5e4eb667a74cfac1fb404c1c496e4063ff568808e313546db104ddc370b6bebbcf45168b086dd10e1dd9809784ec4256bd13b3290e5c","ssdeep":"384:+DzQPE6AtC34632U1Yht+UMYhcQU43YhqVU/YhaVWM0SjNt:XE6AimU1Yh0UMYhDU43YhKU/YhEWM0S/","tlshash":"e782f33b5709eead3e6b0564614fd31a512e873b86a69dbbd3ed3d2813950323e072c1","first_seen":"2026-02-21T20:28:29.729403Z","last_seen":"2026-02-21T21:36:38.473236Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:34.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nOrigin: https://colchoesemmapromo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 4050\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d195fcfdb7251e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-03T14:08:25.292982Z","times_seen":65968,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:34.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 183\r\nOrigin: https://colchoesemmapromo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":183,"data":"{\"p\":\"6980fd0f3c76db1c37e37e82\",\"w\":\"1jgfu7c40\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://colchoesemmapromo.com/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"bRKFAdZtrzZSiXwaipJ9l\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-hgc5\r\naccess-control-allow-origin: https://colchoesemmapromo.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sat, 21 Feb 2026 21:35:35 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9d195fd32a4cbe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1049,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a4d6787335e0d9b74a32858a2a670fba","sha1":"f2d4201c113d3c1d8a186497eb82c744ceb73c9b","sha256":"8c9a8b271717e48ddc9d2bd9b3895a5b41071f07e35acdff672d2d3203e8b724","sha512":"ed9a7a77ba9182b23bde945f37249d6ddcc7a9a13a6fdea027dd668b8a8ae6602341df260d845b28c8c8d3914e43b45f2ef5226d6ef9e42e9e781d07aa2aa59b","ssdeep":"","tlshash":"2711d5130f4e2f3ca897f0c10c482c8a4acde7b331e04489f4c3ed65a96427d14624b0","first_seen":"2026-02-21T21:35:56.355645Z","last_seen":"2026-02-21T21:35:56.355645Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/webpack-49380649763e5e93.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/webpack-49380649763e5e93.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4062\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-49380649763e5e93.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"552685cb4172d4f3b17d757a5745bcf6\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:40 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/webpack-49380649763e5e93.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9v66k-1771709722509-c0f4db02b726\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2044\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4204,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3765)","md5":"13d737b3ee38e2f964f574f166540be5","sha1":"834911c89b8d085c5ed438e41ae3ce8c0ef7a89b","sha256":"69aa333d3b1551da27dd3a86c444674bdf3330cd088a08e8091101bbd11a92b4","sha512":"41ec72c64458433a1290b0fe1b14d36cdce4d22136389520c2b42a80b94e710e1c9fbf4a5faccf324110df687ace80f899119eec01b5ded7ba3c0bc20d5a4a67","ssdeep":"96:0Wd0j7EmqwWlR2+7na20VGLUVnWWCjMrm2WYHWJ3L0RC/sP6pZxo:3tmHWlgMajUgcNY2J3YusyLxo","tlshash":"2b8198ee7261f476179350e2443f915af53b25b2181ee4a0da1dd8f8fc348498623fb8","first_seen":"2026-02-21T20:28:29.70672Z","last_seen":"2026-02-21T21:36:38.4716Z","times_seen":4,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/fd9d1056-b9b281d6c2728617.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-b9b281d6c2728617.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4062\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"fd9d1056-b9b281d6c2728617.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"556dd9b4b34d9530b34857c272aaf4eb\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:40 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/fd9d1056-b9b281d6c2728617.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::x2wcl-1771709722510-ca25e644b020\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 55209\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":172834,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-08-03T14:14:52.216871Z","times_seen":4544,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/520-263783ff90926137.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/520-263783ff90926137.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4061\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"520-263783ff90926137.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"4b02ced6906de6d0936c9d7a9911b74c\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:40 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/520-263783ff90926137.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f8v7w-1771709722514-cc374307e95f\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 16330\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":45873,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45873), with no line terminators","md5":"eaa7d66613cd3539fc84684f28defe24","sha1":"8e3c0af5cb46015358c3aca9e92db2dd668861ba","sha256":"e1c1ff5638b1e4b857208ebaa37795a91a2f22ea56b095cfb235b3e8062e198b","sha512":"26806c5ecdb0a401db60c5e7543904e5f04be7516744926fe7d6cbbc402e3048fff139a7541429ce8ae8e51ddd398460388d7c9ed4c6de9a91ac5d03943fd6c4","ssdeep":"768:erQBLwFJVh2dNhTtFR1HA4mIK3GiHEtYLRU9hlWR6r7dSnhs333xEeVcMCJU3CBc:V5aOr7vdFomEm8j6N","tlshash":"8e23f9d4b3d4b6d4f50abbf8a12a643db63f28fdaa07cd78d2b42c60540108c7a95ec5","first_seen":"2026-02-21T20:28:29.71423Z","last_seen":"2026-02-21T21:36:38.426483Z","times_seen":4,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/image?url=%2Fimg%2FBR_Kit-Cama-Bau-Bege_mood_catalog_mobile.png\u0026w=640\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/image?url=%2Fimg%2FBR_Kit-Cama-Bau-Bege_mood_catalog_mobile.png\u0026w=640\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 17183\r\ncache-control: public, max-age=31536000, must-revalidate\r\ncontent-disposition: inline; filename=\"BR_Kit-Cama-Bau-Bege_mood_catalog_mobile.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Sat, 21 Feb 2026 16:48:59 GMT\r\nlast-modified: Thu, 19 Feb 2026 23:12:12 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j59bz-1771709722939-9acd9a4b9668\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 13798\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13798,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x621, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e0fc3807eb5570c63a54930e31ec733b","sha1":"b799a70e211b82c568dcd19dbcfdcd9d4303c6b6","sha256":"1051c7b4f23fdb3aace73f8b3748d5927ca13f665442799fb87ce00952e2fb21","sha512":"c18c8066a037cb7e2d0c836faffb6e02ed8e8732141f0b0304dac924cac1a956a82e614b4b590837ce6da47803868fbe195898daba66d78e870aec18c94e3fb6","ssdeep":"384:B593xV/wUmumBp+ptSJHWGoeJvF0e/XfV:hHwUjptWNoItJ/PV","tlshash":"1452d00dd0a3c205a8d33d3fea5eb5590a125ce9e96d9bd78960d8d196ec801cf1ca2b","first_seen":"2026-02-21T20:28:29.685549Z","last_seen":"2026-02-21T21:36:38.421838Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/img/emma-logo.svg","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /img/emma-logo.svg HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9d195f905c1075c3-ARN\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: image/svg+xml\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: W/\"61d1eeb29e60e40cc0e118840873bc43\"\r\nlast-modified: Thu, 19 Feb 2026 23:15:54 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nsb-gateway-mode: direct\r\nsb-gateway-version: 1\r\nsb-project-ref: zluctdqbycycyushuzqo\r\nsb-request-id: 019c8220-f63b-7e0a-b93c-17b9709723b0\r\nserver: Vercel\r\nset-cookie: __cf_bm=rkHB_HiDaR3j_T0MSIqJLkdpzHMAGZpJy2SpQz0ejz8-1771709724-1.0.1.1-FmvSC3ApBxBzdH1tQlXQLKw_rXbkxCX616z8wcs9Sz43IAZ4vomTNFO71w38h5zRc7CpZknwf0bjOr6an0FGsECJOcWH5M7WQoaAnuf8eEw; path=/; expires=Sat, 21-Feb-26 22:05:24 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: none\r\nx-smart-cdn: true\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::zqp7n-1771709724205-c621977a7e2e\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10132,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"61d1eeb29e60e40cc0e118840873bc43","sha1":"7275f537781e2828bee12462404d7c795198c53c","sha256":"eebde41252bc6d5328d8d26fd50a62d1779f7bf69b6dfc9658d61fc405944071","sha512":"24fd438ece4a89f25ab431c065163c7d8b77487cb6f3d0d40b779a17082fdc2cd323dc8fcc12409dd6f3e7319ec788dd6cbb3a70d0860ec9fe216eab590b3704","ssdeep":"192:cyOwLgChGcGix0UyUl4uibgwepsUTNqyOXH5TERt:fOygChdGCibysUTNqpXHOt","tlshash":"772247edb78966c0e319f3f2e2e4141a6a5f24ee1b45c4ebd7993ca1882305cd6d58c1","first_seen":"2023-05-23T17:28:55Z","last_seen":"2026-07-26T01:47:32.177699Z","times_seen":49,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:35.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"ecc9e5cf090bf5602a01763e2895acad\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 70453\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d195fd4da74be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10938), with no line terminators","md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-06-15T21:26:04.407385Z","times_seen":26443,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:35.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: W/\"7c8224daff490314bbee102edaf64029\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 239514\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d195fd66aa9be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100307,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7c8224daff490314bbee102edaf64029","sha1":"13aabbb4f10305443e0fbb19c55fd27c149828a6","sha256":"a3652c70ae4477871298cf7fec970ce38a1a5f26a814c06b72cbbafa9c6f3298","sha512":"4a1ac844d0cfc147baefde211336f72422efaaa9c92b4e3a150e434aa3bcd0ca3ab49c34aefca46bed94139738c01ec1af989beb50b48dc747faef0cb8a779b0","ssdeep":"1536:f/Uifm7kUdwddCri1iLc0Lg261F2BBCrikauV3cGiH27PNWE98MGfU0nPROpmi0U:xauVLmi0V0d+tKaK","tlshash":"dda399b2e56710cc7363c22692c1faac1029e370c757caa6f827767d4bc25963562f9c","first_seen":"2026-01-16T00:46:03.978063Z","last_seen":"2026-06-15T21:26:04.429831Z","times_seen":27805,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:35.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"POST /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 94\r\nOrigin: https://colchoesemmapromo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":94,"data":"{\"logData\":\"{\\\"socket\\\":581,\\\"register\\\":0,\\\"widget\\\":1873,\\\"script\\\":1213,\\\"download\\\":660}\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-hgc5\r\naccess-control-allow-origin: https://colchoesemmapromo.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Sat, 21 Feb 2026 21:35:36 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9d195fd96b3cbe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"fda44910deb1a460be4ac5d56d61d837","sha1":"f6d0c643351580307b2eaa6a7560e76965496bc7","sha256":"933b971c6388d594a23fa1559825db5bec8ade2db1240aa8fc9d0c684949e8c9","sha512":"57dda9aa7c29f960cd7948a4e4567844d3289fa729e9e388e7f4edcbdf16bf6a94536598b4f9ff8942849f1f96bd3c00bc24a75e748a36fbf2a145f63bf904c1","ssdeep":"","tlshash":"0e3000000000000000000000000000000000000000000000300000000000000000000c","first_seen":"2023-04-06T02:18:46Z","last_seen":"2026-05-10T02:19:39.188302Z","times_seen":38514,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/image?url=%2Fimg%2Fhero-desktop.jpg\u0026w=1920\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/image?url=%2Fimg%2Fhero-desktop.jpg\u0026w=1920\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 19731\r\ncache-control: public, max-age=31536000, must-revalidate\r\ncontent-disposition: inline; filename=\"hero-desktop.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Sat, 21 Feb 2026 16:06:30 GMT\r\nlast-modified: Thu, 19 Feb 2026 23:15:54 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bwpqg-1771709722518-8c8bf8108288\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 68022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":68022,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x1000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"53002a50e9c12d5c4d8bc23340e25eba","sha1":"d9014cedd4522287e652224e98711ca2fbc256fb","sha256":"c219b2b11939060248759a3bf0c1b53c872ec4861f0482c8c6098bacd7bf490d","sha512":"16cbd215143efbf62ce0c3c59eb31537ead9eaaf05afda637a17aee701a4611aae9c43b756e77755bdded9eb9d94323eebeb674f3f41003f3fd1bd269fb7b7c8","ssdeep":"1536:6sKAdXQrdgQKaZde6jxBbF+gN5j5QDeZAQSKIVuZNZ:6/YXBRwY6jJzdIQ7IVar","tlshash":"e763018f71467a43d58e9fee890e4da7673a1ef6ad1c6120b64311e8013475db4337e8","first_seen":"2026-02-21T20:28:29.780032Z","last_seen":"2026-02-21T21:36:38.432576Z","times_seen":4,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/img/videos/unboxing.mp4","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:23.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /img/videos/unboxing.mp4 HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://colchoesemmapromo.com/\r\nRange: bytes=229376-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccess-control-allow-origin: *\r\nage: 127141\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9d195f8dbaabf351-ARN\r\ncontent-range: bytes 229376-2042372/2042373\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: video/mp4\r\ndate: Sat, 21 Feb 2026 21:35:23 GMT\r\netag: \"4dd432e5eeb6b36c6e536c7b22b7f0f5\"\r\nlast-modified: Thu, 19 Feb 2026 23:15:51 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nsb-gateway-mode: direct\r\nsb-gateway-version: 1\r\nsb-project-ref: zluctdqbycycyushuzqo\r\nsb-request-id: 019c8220-f49f-7c2b-aa92-d26dc45c443d\r\nserver: Vercel\r\nset-cookie: __cf_bm=V6R9If2ZbsOmjhPURILdxTrbZxsUHVjqg4CuKr9GoB0-1771709723-1.0.1.1-lCwHARj2mZdQ5i_nLNpIkNu9Z8R.2DAkFKw0ir.fwVRpCi.vyjY.bRJ9TYw9ablK1LTHZuHIxWf5xMG.jJLSK8.hDJDCEpRySxyAplsiVdg; path=/; expires=Sat, 21-Feb-26 22:05:23 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: none\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::z2g24-1771709723782-78d1deb85380\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1812997\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"video/mp4","magic":"OpenPGP Public Key","md5":"a841a48f3c2ca8def06611817b74dcb5","sha1":"b5ba3b6cdea99e74b37d7e96f7e3e25e752c67f0","sha256":"80a5ab5e68d04be72cf8dab83e6a90a5e375d0584d19481e5105d3b565fc7229","sha512":"5358401d9773f4ffdf0efe0a577dcff6c5759bad7659da93ed7b0859c8e74f853b323bbc1fd361a11d27af63a3f91985042551c3d6dfae4a19e03dcb17c3dd9b","ssdeep":"12288:9d2yoHMmvCtywB5OS45OzN7YiKBObYpaLVJF9DUYQ6l3D/532ZM4SuiCnNJrPHpB:9ozfqxj45IxYi3bY0fjP93/nuiINJrPr","tlshash":"c1f4334073fee174e84438723d15b63ba269c25ee2040ddbbdb6e5df5a4f2d29a81488","first_seen":"2026-02-21T21:35:56.360722Z","last_seen":"2026-02-21T21:35:56.360722Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":95,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:34.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nOrigin: https://colchoesemmapromo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:34 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 4050\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d195fd129d9be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10839,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-08-03T14:08:25.329439Z","times_seen":28303,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/pt_br.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:34.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/pt_br.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nOrigin: https://colchoesemmapromo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:34 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"a750d6156582f11ddf27b22c3a10781f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 4050\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d195fd3aa59be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12553,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"981e59c2e7a19ebad439840d582e74f9","sha1":"daee17fbd3243fa93a4fdcb94960284aeb6d926e","sha256":"6f1945fe43d4e9a9592bd7769722ab20a2c32c84001bf44e06c87ec2c9acc1a8","sha512":"c6291a6fe083e15ce8e32dd105d14ea0da75f54fe427a84c5d3119cf070cef96e00927fd174b0c73d5101b11871e5afdf026fb73cbf5381786c97eed48fe902b","ssdeep":"192:BGYrApDt0mHE06aevlicG27efQMjkjtPeme7UgmJUe9R7BOuGMVeF/MY8X1vTM3:CpjjV27RMIjtPVyUpd95GMk/MjhT8","tlshash":"5c427169cd600eb701969341798b3913226042470f94786bfb5c96ae0fced9fa1f7b8d","first_seen":"2025-06-19T03:45:29.403417Z","last_seen":"2026-05-10T21:03:35.921979Z","times_seen":231,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/page-840bf498251c1864.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/app/page-840bf498251c1864.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4061\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-840bf498251c1864.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"f8489ea73d855fa5f27d49b9a5c5f811\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:41 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/app/page-840bf498251c1864.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j59bz-1771709722514-12b92ed593d0\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 7621\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":26730,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26730), with no line terminators","md5":"7885605ffdfb1c258027bab1cf941f34","sha1":"c025ad121c5b2543414ff4d7c66f6497651fac9d","sha256":"e93d3570dcddd9451988ab67539fc26ce73f9b0f842b3b28467ac9388af76e48","sha512":"1b5bbfec70db9903b0a9dd0934b6af46a424a0b5c38710ff124611ba962d8cd4c41f82f55331e87283b8e6df6e7d948b7622d10c651ed812a939d70ea0be5ce6","ssdeep":"384:d4JAI1cz/fHeh5RgmzL6YpbymKxKcfHeRpUAJ3hNa4we:d4JAzU53L6cymKxKcfHezUAJ3Ha4we","tlshash":"a9c2b715a159fe9cf4a704e4a96f908cf01f4e68ca4f8c74b7b86c2119ca4cc7b52bd9","first_seen":"2026-02-21T20:28:29.783416Z","last_seen":"2026-02-21T21:36:38.456383Z","times_seen":4,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/layout-6a11bcb1f6f14e01.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-6a11bcb1f6f14e01.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4061\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"layout-6a11bcb1f6f14e01.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"51abca8dcc366412156de67e8fb31217\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:41 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/app/layout-6a11bcb1f6f14e01.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6dqz9-1771709722516-243f0ad601d6\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 4394\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11954,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6989), with CRLF line terminators","md5":"de504952e1ef723d592b922f0921298f","sha1":"fe18a36358cd96b7e86501f8ad3e927fe68c0b4e","sha256":"5d2af6d183799f05acd268b031a8171193c2379662c3c8276ec4dd506a002e98","sha512":"120225e8b0b7649a177fd010f01756c5d60ffc276403098c9b6207d8479c87f8766d857804b6ba39312d21078c72555712df747434af82085eaa16dcb267979b","ssdeep":"192:/YEtYgIBdWAq8Q0WHLszoGVSjIXJzf5G5ZVY2qZb8E2jo4W4tqZG6:/YEtYgIBdWAqQWHLszoGVSjeJVM+9b86","tlshash":"b832a64cb281bef8b26749e4f76fa51cb12f16a8dd0f4824717e6c552b114c86222fcd","first_seen":"2026-02-21T20:28:29.779216Z","last_seen":"2026-02-21T21:36:38.457801Z","times_seen":4,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/image?url=%2Fimg%2FStamp_MaisRecomendado_2.png\u0026w=64\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/image?url=%2Fimg%2FStamp_MaisRecomendado_2.png\u0026w=64\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 16977\r\ncache-control: public, max-age=31536000, must-revalidate\r\ncontent-disposition: inline; filename=\"Stamp_MaisRecomendado_2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Sat, 21 Feb 2026 16:52:25 GMT\r\nlast-modified: Thu, 19 Feb 2026 23:15:07 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zp6q4-1771709722940-247befa7ca40\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2588\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2588,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da090c1d73a4bbe0318ac418f63fa9df","sha1":"1a37b30771a050977d95f2f47f62e86f64b515ea","sha256":"e3e74313609d6445cfc8b63a1b761dcd49eb200b700cbb8e3a2913205e5fe5df","sha512":"8157cc599bba819da8f840d3cf5ab456e2aad45ef70b600135f6d367914e763b76010f59123dcd52dc43501901c83156dce7c98cf8c24ebcbf07b8ec17e1f066","ssdeep":"","tlshash":"78514a2bf5f5193ec6be7d4f6ab627b31a33596995917c178004f1b0701daaa82300f8","first_seen":"2026-02-21T20:28:29.689454Z","last_seen":"2026-02-21T21:36:38.41545Z","times_seen":4,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/image?url=%2Fimg%2Femma_day_01_001-287-Aprimorado-NR-Editar_66.jpg\u0026w=640\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/image?url=%2Fimg%2Femma_day_01_001-287-Aprimorado-NR-Editar_66.jpg\u0026w=640\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 19561\r\ncache-control: public, max-age=31536000, must-revalidate\r\ncontent-disposition: inline; filename=\"emma_day_01_001-287-Aprimorado-NR-Editar_66.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Sat, 21 Feb 2026 16:09:21 GMT\r\nlast-modified: Thu, 19 Feb 2026 23:12:47 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kqj85-1771709722938-07032f749533\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 8926\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":8926,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x297, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4cd3c23b243aca0909e6f3ec8aaf420c","sha1":"96bc4341059ce559e251834121be6a3b0a463a81","sha256":"bc34f131936b0a46a826a732c96f10f0a173fa4f2d61183b2d098dd3635b00ce","sha512":"cbe22fb2102a4a6e220049d713e0ae8158524cfc7fddb11116884ba514983bb0d625d751b5d124da6c7bfe8ca8aa2fccf8b77ea33f1d194d78ffb805eb10978e","ssdeep":"192:SH1qSW6DoFp2nunOBm/D6/pR1Pe6CJMZxo2Y:K1qSW6DoFp2nunOBMD6/p7e6CMXY","tlshash":"8b02ae8fc68f47b196b879c01098544b8513da21ea1c10b4fdaf0c93a37e0f1ea893b2","first_seen":"2026-02-21T20:28:29.785551Z","last_seen":"2026-02-21T21:36:38.440339Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/image?url=%2Fimg%2FBR_FRP-landing-page_USP3_v2.png\u0026w=640\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/image?url=%2Fimg%2FBR_FRP-landing-page_USP3_v2.png\u0026w=640\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 19561\r\ncache-control: public, max-age=31536000, must-revalidate\r\ncontent-disposition: inline; filename=\"BR_FRP-landing-page_USP3_v2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Sat, 21 Feb 2026 16:09:21 GMT\r\nlast-modified: Thu, 19 Feb 2026 23:12:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ttd5f-1771709722939-62c94113321b\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 18430\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18430,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x359, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ceebf1a8c17774d9a855d3f5d29bc8b0","sha1":"8792828850b1ba68abfc2f281adf680da8d7bc43","sha256":"f295de3025fffe5f0f1e07e46dd18efd4982de91b2252a2b702514b59a907d1d","sha512":"74b8c622c6e6354b1cb606376b140a2cdaac7572f8a1855983ffb5c3218938093ce581eb528d5d812056034ff3c2e668b930a23ef6f614edbbc2be067c8eaef5","ssdeep":"384:D2yXE6j1yFcyc3CyxkSbcLFEVdvFV0AB8qmgM3t7/xVrr0LdP:D2yXE6j1yFpcysRcL4dkLgMdjxVsLp","tlshash":"2482d0bf8760ad6c84d2ff4fd1e92436643e3608a0f972ab3076c79b1b222563f14546","first_seen":"2026-02-21T20:28:29.715097Z","last_seen":"2026-02-21T21:36:38.441026Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:34.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://colchoesemmapromo.com/\r\nOrigin: https://colchoesemmapromo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-8zd2\r\naccess-control-allow-origin: https://colchoesemmapromo.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Sat, 21 Feb 2026 21:35:34 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9d195fd139e6be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T15:28:01.656173Z","times_seen":17692056,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/media/5c0c2bcbaa4149ca-s.p.woff2","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/media/5c0c2bcbaa4149ca-s.p.woff2 HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4062\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"5c0c2bcbaa4149ca-s.p.woff2\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: font/woff2\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"662c56ecd8de96f417f0400559ab2ab9\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:40 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/media/5c0c2bcbaa4149ca-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j59bz-1771709722504-1675311cc0d9\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 37792\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":37792,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37792, version 1.0","md5":"662c56ecd8de96f417f0400559ab2ab9","sha1":"e397d9da8697653a841f3a31370c4cb99fa24b24","sha256":"6b102ab35aa1f2b315788bb4853434ed1e52137603bf7a3da71a682276748d45","sha512":"2bf8d3d5d13d356a628aa6d7fa0da956305cb52d0a8f5e6fd9b616872924cffd9cd334b8750ab81207182081df6da456552fb273c6878d7af7d740c2563dfc26","ssdeep":"768:SIVPqC9PFkzqwjy0UVkAacqbUtPo4zMAm8oPbIGYvQvNr:/VbPFyqwjyxV92UFo4wpzcAr","tlshash":"0103f1fba14d508c7cf414bc959298435b627bdfb4aabb5eff9a41c13427402ba02b06","first_seen":"2025-09-14T15:16:18.995451Z","last_seen":"2026-08-03T14:28:52.577335Z","times_seen":2226,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/722.1137e6709011230c.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:23.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/722.1137e6709011230c.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4061\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"722.1137e6709011230c.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:23 GMT\r\netag: \"168f097a23eea54169cbd8971bad4689\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:42 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/722.1137e6709011230c.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::z94pl-1771709723465-dbc2c8c50947\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1684\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3478,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3478), with no line terminators","md5":"ab70e93b99a682f842300ee486baca18","sha1":"793072f048ac72961d7eec92a064e8c3a8625150","sha256":"b44142dfdbe74800a528e36e4c7dc97013829bc4911da9a6c2acbd314af47be1","sha512":"f6e73acbe7babf418731818db2b306582a6ff0320d37971d899f665cca63ddde6588d9ed9cc12f499ad02fb0e4f6c410586a9a9e3da258a8db4b6ec7ac3a9c4a","ssdeep":"","tlshash":"b371955f4f8a6a2de823d38c0a5bb008979e57ac37cf88b1f44e54369612116e633fc4","first_seen":"2026-02-20T16:42:31.183722Z","last_seen":"2026-02-21T21:36:38.435892Z","times_seen":6,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/status/page-2f0d24de86f803fe.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/app/status/page-2f0d24de86f803fe.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4051\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-2f0d24de86f803fe.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: \"cd26334da5b811a3530f93ceac28e82b\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:52 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/app/status/page-2f0d24de86f803fe.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7g4qn-1771709724055-87e12cc5455b\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1107\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2569,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2569), with no line terminators","md5":"72faab83c8d38a35c9432e89ed981003","sha1":"e8c9b62b0094e3908032c4aa87cf083a3498878a","sha256":"8ca670687c914ae89198904fdd6198d653cac8bbed7cf8cdb376a4c81ab13c92","sha512":"8b4885d0b0a6711256ba094a4d2faf18ffe53642b5608ac9d2cdcec6421c621f45a73781d8aa908874edcd9599b6fd9292b8fe99566d83c957333bac2ad7349a","ssdeep":"","tlshash":"2351010870a5bfdd7e6708b8b5af6408341e9b6cda5f48f2e7b4687105406a06a13fc9","first_seen":"2026-02-21T20:28:29.700482Z","last_seen":"2026-02-21T21:36:38.443877Z","times_seen":4,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/emma?_rsc=19zvn","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /emma?_rsc=19zvn HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 11699\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: W/\"b6b6fdf562ddfe1449c40ec717dafdd1\"\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /emma.rsc\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zqp7n-1771709724117-ad22ee1a6b83\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10136,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (6190)","md5":"1d229899de1679a12d2bda89122764a7","sha1":"3d155313626e0d29f171af5ccb6abf257aca032e","sha256":"b8a03c0a1b8bb74439270c8fc59aa8815bd8a23599105058b17a08caac848b45","sha512":"02d276039292f4d83d73c266ec36ac072d7e80603a9bba79d13f888e6414434109338f9f7445b7226ef47890d6d67976c226d76897276cc8596bb9fee7933bb8","ssdeep":"192:2wL2u1XW0FYMTJWcXBwl3jTB7BkTBhx3nBwQ30PTB7BvitxqzRitHPIAz/H9iP/:JV7BNXk7krgF7ts0V/","tlshash":"14229f375b04ee5e397745a4250be216d03e833b86a66dbfc3ee2d6d13d81233a462c5","first_seen":"2026-02-21T20:28:29.736675Z","last_seen":"2026-02-21T21:36:38.40915Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:35.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 239514\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d195fd4fa7abe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-03T14:08:25.298002Z","times_seen":49220,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:35.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"OPTIONS /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://colchoesemmapromo.com/\r\nOrigin: https://colchoesemmapromo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-b3lr\r\naccess-control-allow-origin: https://colchoesemmapromo.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Sat, 21 Feb 2026 21:35:35 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9d195fd88b1fbe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T15:28:01.656173Z","times_seen":17692056,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17883670361","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=AW-17883670361 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\nexpires: Sat, 21 Feb 2026 21:35:22 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 21 Feb 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 136823\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":402197,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"cc1c6c75bf95cca9157192cf985a5aa1","sha1":"458e2563eb12a18ebb54aa2779fa2fc9ea4ca279","sha256":"ecaa5d6d05b2d192202ab50ddab6bfdddaa763aea8b61dfb8a779b4f1bd04e72","sha512":"c602b0b06f32f243e15b585f48dd0abc6a1e62fe462d01f9114c774285adbdb1d1124d03ebfa19b80db194800057e9e47c7c4309d7a0328a0eba83c4f52ac987","ssdeep":"6144:r4D8ixaAJlAxXUI78kKUeDKJN5hSppv/UPRPl:MwixafxkI785D/UP","tlshash":"4b841acdb3d670269393a478403f018ba57b69a2f44cc895f18adce42d74a9a4277f7c","first_seen":"2026-02-21T20:28:29.773576Z","last_seen":"2026-02-21T21:36:38.458566Z","times_seen":4,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":151,"dns":2,"connect":23,"send":0,"wait":33,"receive":58,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/img/videos/unboxing.mp4","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /img/videos/unboxing.mp4 HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://colchoesemmapromo.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccess-control-allow-origin: *\r\nage: 127141\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9d195f886b5875c3-ARN\r\ncontent-range: bytes 0-2042372/2042373\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: video/mp4\r\ndate: Sat, 21 Feb 2026 21:35:23 GMT\r\netag: \"4dd432e5eeb6b36c6e536c7b22b7f0f5\"\r\nlast-modified: Thu, 19 Feb 2026 23:15:51 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nsb-gateway-mode: direct\r\nsb-gateway-version: 1\r\nsb-project-ref: zluctdqbycycyushuzqo\r\nsb-request-id: 019c8220-f14d-7705-9941-55cb1c121acf\r\nserver: Vercel\r\nset-cookie: __cf_bm=SFwwZVbyF1mogWEYCsYpzctF9P.bb3cmM1MF_kjbAb4-1771709723-1.0.1.1-LHMW_q3bUkyVg7iPnle7zfmlAXLk.mM48ZwVbBYOok.GE6VtxduigjbtT1cq4XwKTbjLq27dPgUewkgyy_d3wi6y7clT9TOYMi_fXIjWkCg; path=/; expires=Sat, 21-Feb-26 22:05:23 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: none\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::6dqz9-1771709722924-96379a8567ac\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2042373\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1636352,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"abac0e329953074684ef4a9641eee52c","sha1":"fc5f3180344f2f5b342ae117a3973388c8b2e367","sha256":"3f0b9dda3b6095d6e41556e118dface0e8a8aa32dcee623340ca34be828a1ef7","sha512":"9789623c95acc6f4bf122bbdc25bfa773b2a1f24ae804d26f090224edeee177df7d896a21cfa1b0918073cd9758f993312a095d1a71648065269f252577b9874","ssdeep":"24576:SFJCdGhcwFozfqxj45IxYi3bY0fjP93/nuiINJrPHpEzOFzH1:k4/52bYQjlPuFJb6zOFzV","tlshash":"6c253340a3fde9b8e94428323e06b57bb13de26ee24405ef79b1eadf530f19259c1584","first_seen":"2026-02-16T15:01:54.132083Z","last_seen":"2026-02-23T15:53:38.839215Z","times_seen":13,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/ofertas-emma?_rsc=19zvn","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:23.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /ofertas-emma?_rsc=19zvn HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 12673\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ndate: Sat, 21 Feb 2026 21:35:23 GMT\r\netag: W/\"39e853c1ea44bf0c83696e925534d58e\"\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /ofertas-emma.rsc\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mfxlp-1771709723962-e2e1b1452a45\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":41652,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (34355)","md5":"d5955802cf7cbb6cdaa5db50bc359f03","sha1":"bce19c2a94253a634d07aa0034ad13b2cc7a025b","sha256":"efc5034a40c297a6ee740a9b158dcc55bcb9bcaea24821eddcf3b948938ee061","sha512":"bbb0804dbdade469bcdf86883c0c5dd376b9dfe51017a27922afae0b20d6f8381a41d0f25905a596741cc0093e1705c2fe54b85363d204156c7f7c12fd9f6c85","ssdeep":"768:tA6IURYhpU+YhKU4YhtU0YhQU+YhoUUYhBU1Yh0UMYhDU43YhKU/YhpUiYhUUqYb:C6IURYTU+YkU4YLU0YGU+Y+UUY7U1YOh","tlshash":"6e139b3b570a9eed7e6b0464655fe22a612e873bd6978dbbd3ed2d2403460312e033c1","first_seen":"2026-02-21T20:28:29.771955Z","last_seen":"2026-02-21T21:36:38.459983Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/melhor-colchao-pra-voce?_rsc=19zvn","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:23.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /melhor-colchao-pra-voce?_rsc=19zvn HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 12674\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ndate: Sat, 21 Feb 2026 21:35:23 GMT\r\netag: W/\"4ef40bf5a4132914b3f9a942791fa392\"\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /melhor-colchao-pra-voce.rsc\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7g4qn-1771709723963-85aff9570cfc\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6289,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (3051)","md5":"7b2af945c99afe4d1a4749119a50485f","sha1":"4a982d267030b42ef44efa240d50d83d9ddcf6de","sha256":"e7bcadcdb7ac2d033f24067be0ffe7d3a0fc0ddd03318b067d5e12b7672713d1","sha512":"774989fabe0f0f0ddf3fbf54fd9af75c7c3da34830c7773afd97b4dadb406f875c9f6f60341080c47d13c7c7592a4218bc2c4e4fe2da46af62b9d11eb8bc8504","ssdeep":"96:gxs9u9xzF2xfxs6dxzyxzIEOxz+xzy4xTsDAFxV1H1kfUHDAz/kM9ae/:Lut2tE44x48tH6IAz/H97/","tlshash":"fcd1b0379b04fe6a3db78594210be256d02fc33b46756dbe83ed3e5c12a81273a4a1c1","first_seen":"2026-02-21T20:28:29.775114Z","last_seen":"2026-02-21T21:36:38.448796Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/apoio-ao-cliente/page-3d3821e44896d304.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/app/apoio-ao-cliente/page-3d3821e44896d304.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4050\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-3d3821e44896d304.js\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: \"d6b27d3c4ccea2ea70b3c9f738448250\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:53 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/app/apoio-ao-cliente/page-3d3821e44896d304.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9v66k-1771709724012-30bfb2bcd30d\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 270\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":270,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"d6b27d3c4ccea2ea70b3c9f738448250","sha1":"791cd17cc9125e4bac0efd34864cc3003b7071e1","sha256":"c4b4c537e356f4126464f618e7420ff3588a997e9d38b881455897ea026a677b","sha512":"fe96c95fab1955e8325c9206bf01887c7c82b22e659c53c3bb054d9c35a0da1395ec21294b9ec77463147bc407b566969e03f4b3e68e44efec86a772347234e6","ssdeep":"","tlshash":"9ad02b49798c7c0e38372c70e1eb3c5738ff44913815488055304db1187325cc711f84","first_seen":"2026-02-21T20:28:29.725249Z","last_seen":"2026-02-23T15:53:38.828415Z","times_seen":6,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:35.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: \"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 83577\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d195fd5ea94be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36092,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-08-03T14:08:25.33029Z","times_seen":49037,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/117-5c4c990ec6bab701.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/117-5c4c990ec6bab701.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4061\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"117-5c4c990ec6bab701.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"464580e977db93b2c7b4690fca8a6670\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:40 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/117-5c4c990ec6bab701.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ttd5f-1771709722511-4cd3b665074d\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 33070\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":124798,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"900c2205c16ddb06f4eca2f5fff52cf5","sha1":"dd6f918866b83b67264e5904ca21a0d9127d21d6","sha256":"0ef561f9c342f9d9bc67bcb19fb578863126909930c9fb5c70c66c20991246fb","sha512":"554c8573b6580647f1acf0ac53a0e8650afd74d8a0d07cd95f785b9449a99f605ee257f323c839a8a0c7d54ec6fc15a7634489218e041124028e17b5d132508d","ssdeep":"768:+O9P55eowbr0PDVVDS//d2icrEyKH1ag8xxqKjj3fLpDKdlr/NaO8tr93UsGoROx:b/wP0KHcZmY5j4dl/iwsigzgLU5uoCv7","tlshash":"6ec3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2026-02-21T20:28:29.784257Z","last_seen":"2026-02-21T21:36:38.472385Z","times_seen":4,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/image?url=%2Fimg%2Fhero-mobile.jpg\u0026w=1920\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/image?url=%2Fimg%2Fhero-mobile.jpg\u0026w=1920\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 19731\r\ncache-control: public, max-age=31536000, must-revalidate\r\ncontent-disposition: inline; filename=\"hero-mobile.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Sat, 21 Feb 2026 16:06:30 GMT\r\nlast-modified: Thu, 19 Feb 2026 23:15:53 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j59bz-1771709722517-b2ff361c58d0\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 21946\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21946,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x1000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f99f264e8929aa834e52e50c9b731de1","sha1":"2bee77fabf562e16fcb710cad9e4de68dd5d52cb","sha256":"411a6ee36c889a79ca6708788744410b0c8c1d05aeece7d896848ca9d7cdf52c","sha512":"2187b7bef9e95cb114f0f3cbf4df2e22f84a3291345db990eed46357ec530a59c9dd86f4cbcaf80f768ed5b1d83800c121b0a69409fb5088c5b98a697df2e9ce","ssdeep":"384:ULrplShRY4ATUP/Ijuf9HFTalV6YQP5zr/eNfPLYKGNrmuQYSIfCCEUYBut:Uq3pATm/XS63ZJNq7YEUj","tlshash":"13a2df26d76cf889f2582ef2435432cbe74b94a71a7722b008c84fba54f0f46b00099f","first_seen":"2026-02-21T20:28:29.764188Z","last_seen":"2026-02-21T21:36:38.467567Z","times_seen":4,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/image?url=%2Fimg%2FEmma_One_BR_Mobile.png\u0026w=640\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/image?url=%2Fimg%2FEmma_One_BR_Mobile.png\u0026w=640\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 21298\r\ncache-control: public, max-age=31536000, must-revalidate\r\ncontent-disposition: inline; filename=\"Emma_One_BR_Mobile.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Sat, 21 Feb 2026 15:40:24 GMT\r\nlast-modified: Thu, 19 Feb 2026 23:12:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::z94pl-1771709722937-c238b6fe75ea\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 16022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":16022,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"38063e947cc47ceed080ba3ece8aeac5","sha1":"eea36a243cdac75b5ce8f8f5f295362fc4bc68ae","sha256":"7e35b7081fb670fb3e75c748ae936a32cc6b783eda9265d51cbd2143ebfcae92","sha512":"81323ed1fae185851a1b1b970e67aa14c2db41410d080c2e65d6d7fe843748e5f9e671859cb836cef1e556dc970860fac157f80a0c32ec04e38f0bcae8a2b69b","ssdeep":"384:OfMQnYEFmMLZEALhg/OvOlXgMGrDJohf6K3BiH9efTDGsG:OfjYEFmMtq/OvOlXLFffo96GR","tlshash":"e072c0a2088ce2bef456187fa0531c40e512e87d67fff6934958af61f7639502d30d06","first_seen":"2026-02-21T20:28:29.774364Z","last_seen":"2026-02-21T21:36:38.439641Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/img/videos/unboxing.mp4","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:23.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /img/videos/unboxing.mp4 HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://colchoesemmapromo.com/\r\nRange: bytes=2031616-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccess-control-allow-origin: *\r\nage: 127141\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9d195f8b285c75a1-ARN\r\ncontent-range: bytes 2031616-2042372/2042373\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: video/mp4\r\ndate: Sat, 21 Feb 2026 21:35:23 GMT\r\netag: \"4dd432e5eeb6b36c6e536c7b22b7f0f5\"\r\nlast-modified: Thu, 19 Feb 2026 23:15:51 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nsb-gateway-mode: direct\r\nsb-gateway-version: 1\r\nsb-project-ref: zluctdqbycycyushuzqo\r\nsb-request-id: 019c8220-f2ff-73f5-a36b-1169720e81ef\r\nserver: Vercel\r\nset-cookie: __cf_bm=Sz45gOEYmUz9PxH30t9WyQnXxQEu8yUNKgV1Cs1a8bI-1771709723-1.0.1.1-rImsb5qJWsR0LE7cgtQwhe8HxuqzQHyDrb.X65Daq1aAEqfkqDg.0Uej_qm.ZPubNvjhXVYfbculIu0qkOWqeoKYurshzVYpXN3mhbZS_qs; path=/; expires=Sat, 21-Feb-26 22:05:23 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: none\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::f8v7w-1771709723377-818ad3915979\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 10757\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10757,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"3b022e166dc77569e86e8087148361e7","sha1":"f6a7b8da60fc84607fd512526d91b23a71f1e713","sha256":"e1bacba0342e898ab1e23abf84b4b5a0e82b5425b0fa13069c0d27f5b8813186","sha512":"8490b628857b908c1fae936cbc129fbbbf330f9f7beadc4a979c29aa508215175c4f28e3e6d2200e3386fe4a21df9c8f284cf6ebc2c02f3385d11d8f277f7322","ssdeep":"192:YzSY2O4wM4AiLJOfziOxbdGFOAvTBMKHoitTkl6R4FJWp24:Y2Y29vawxbdGooTBMioUIl6yJSx","tlshash":"c8222ea5e3200503c4521a35e4d2132177f4e6b87283474f9be4b73ead7a3ed5e164ea","first_seen":"2026-02-16T15:01:54.208555Z","last_seen":"2026-02-23T15:53:38.820012Z","times_seen":12,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/categoria-colchoes?_rsc=19zvn","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:23.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /categoria-colchoes?_rsc=19zvn HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 12674\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ndate: Sat, 21 Feb 2026 21:35:23 GMT\r\netag: W/\"610232fba6b8f94c61bde92a8c0f972e\"\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /categoria-colchoes.rsc\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7g4qn-1771709723965-d7c90fbc2fbc\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":21824,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (14473)","md5":"27f19c9195dad2ec7bb51e50b39112ad","sha1":"2139dc7637285936ef741c35e31383b161d6bf90","sha256":"c9ed4af37c394ef16ff04d6b61257d313ac740fea42a2da6482787c87291282f","sha512":"85f14a27b021eb0a8b5b4fd172e3d1607b9c4f7c8a54b9279945a3cb8448360263ce25eb940ca25538f81f7e323ccedc70e8c1767f5dcb3f2926cbc0fb8b8e66","ssdeep":"384:+DAZk+B621URYhqIU+YhkzU4Yhs6U0YhMJU+YhcrUUYhaVbsRSjNt:TZ/EIURYhpU+YhKU4YhtU0YhQU+YhoU4","tlshash":"22a2d03b57099eed7e6b04a4655fe22a512e833bc6969dbbd3fd3d2413550322e032c1","first_seen":"2026-02-21T20:28:29.760215Z","last_seen":"2026-02-21T21:36:38.460687Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:35.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"79b4aa69d45c4b43f0b31fd971b1bbdd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 239514\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d195fd50a82be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"79b4aa69d45c4b43f0b31fd971b1bbdd","sha1":"77122463966366aaa969b55f404af7903b9d8f86","sha256":"34b9a3ffbb7a87b04fe51abdb665588b82d1e5fba4cad27b6d6518228d20c2b5","sha512":"6bc666c4e89838ba9d62ccba15b642154cb69eb86ac22585e64e11eb0bca2ebc710c3c5cf8993a99aa85035e1ae44d566601f6b7649e7d92fa3d72a2f53f252f","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFY7dZPkx3u4V5pfYMrlSf:4nmuTilGhmPx3u4V5pPrlSf","tlshash":"36a3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","first_seen":"2026-02-19T03:13:10.618029Z","last_seen":"2026-06-15T21:26:04.428904Z","times_seen":8427,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/categoria-travesseiros?_rsc=19zvn","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /categoria-travesseiros?_rsc=19zvn HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 12673\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: W/\"c32a84314768a6868b62115ccd9c9ada\"\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /categoria-travesseiros.rsc\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mfxlp-1771709724061-9bc25f8d863c\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":19707,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (12337)","md5":"aff3beee70b162a3d651124028fd5c72","sha1":"9124cb4cab844cc5fffc2692941ab8068d8a4c6f","sha256":"5248d83db50e9d7d1a3dc8d800e91eaa52288fa906f8ffb7bbe85843ecd7d215","sha512":"60396143b416b5560e6077e66f1ec45925fda93e92cdd7e8328ff215ddeeb56a6ad439f5a44292d5c3f79384b3d36fed671fefe78ca5eac8c5c49c1011cb2337","ssdeep":"384:+D3GmTZ60nUiYh9SUUvYhblUJYhLIUDYhcfU4YhaVWBPSjNt:iGmoaUiYhUUqYhhUJYhUUDYh4U4YhEW4","tlshash":"fc92e33b5705eeae3e6b0464614fe32a512e873bc6969dbbc3ed3e2413550322e072c1","first_seen":"2026-02-21T20:28:29.791587Z","last_seen":"2026-02-21T21:36:38.444534Z","times_seen":4,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=6980fd0f3c76db1c37e37e82\u0026widgetId=1jgfu7c40\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:34.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=6980fd0f3c76db1c37e37e82\u0026widgetId=1jgfu7c40\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nOrigin: https://colchoesemmapromo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-jhw7\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-35-1\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sat, 21 Feb 2026 21:35:34 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\ncf-ray: 9d195fd129e2be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2259,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b890f59e3c23b180a4e4ef10f6439623","sha1":"6fe792c16bf71014ce54128183d54ce36fa933b4","sha256":"3a2330fd05a2cfd5336730295ff878a14fb77903361f1b051e3d6df445ef3d03","sha512":"09d71bd134e29b646c118c77ad4ea0f1180cb4ab88516c855888a8ae3bcfd824817e6ed608e4a19e490ca14f7fffd7a9c2a1b343dafc8a0e197e8106e0fdaa42","ssdeep":"","tlshash":"e241112509169d7dd3ce829371de3b23a92da033e3c4a95de08c8d38d3eb68d621175b","first_seen":"2026-02-20T16:42:31.242011Z","last_seen":"2026-02-23T15:53:38.82495Z","times_seen":8,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/145-ccb360710e8ed65e.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/145-ccb360710e8ed65e.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4061\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"145-ccb360710e8ed65e.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"65e9617685d69ed7837cebcac73350ca\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:40 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/145-ccb360710e8ed65e.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kqj85-1771709722513-2a805f2180b7\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 5541\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":14011,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14011), with no line terminators","md5":"aa83a8a60b7665d83f420aee5f377ce4","sha1":"4faf7a33be424be2a62b39bd5b3ecf86e8db89df","sha256":"79ed5f03a89d0e9b52f218e30ba2903eab9f799af8619c41ee64516496bcb8c9","sha512":"55fba202b363fdec2019fabd31f41c0cde7a9be624a2d42a758fc99887c0bc5a59bf00810ea0b8aff1f91d1d7c0bf9e317af69d51cafbf07bac1115b8a244aa0","ssdeep":"192:FWr9W2Mm46/kbb92BjcwMfs3JWyCFIaHDqau27fcMRFVYxu4BvqKI:FY8bmSbbae0Yhq47fdd4hy","tlshash":"1a523ab731d4f8ea238b80e1943f000df7755d76622ab14467a9c8c9e6f0158b163fba","first_seen":"2026-02-21T20:28:29.763245Z","last_seen":"2026-02-21T21:36:38.466753Z","times_seen":4,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/media/e4af272ccee01ff0-s.p.woff2","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/media/e4af272ccee01ff0-s.p.woff2 HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://colchoesemmapromo.com/_next/static/css/8e789550b01db38d.css?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4062\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"e4af272ccee01ff0-s.p.woff2\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: font/woff2\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"65850a373e258f1c897a2b3d75eb74de\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:40 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/media/e4af272ccee01ff0-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::85tdg-1771709722736-1a483cc2da0b\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-03T14:27:03.304097Z","times_seen":86073,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/image?url=%2Fimg%2FTestadoeAprovado_product-card-Original.png\u0026w=64\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/image?url=%2Fimg%2FTestadoeAprovado_product-card-Original.png\u0026w=64\u0026q=75\u0026dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 22122\r\ncache-control: public, max-age=31536000, must-revalidate\r\ncontent-disposition: inline; filename=\"TestadoeAprovado_product-card-Original.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Sat, 21 Feb 2026 15:26:40 GMT\r\nlast-modified: Thu, 19 Feb 2026 23:15:38 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f8v7w-1771709722935-1c2902ce657c\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1818\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1818,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d66547cd5b4be7f1a94c8469d3654b9","sha1":"c2919aaec0efb6c1cd1dffafd0c0e08df97e95c9","sha256":"5f6c5ee29763bf0e841cab23a00fad94d7b538d0dbdb8e0c790346cde18ce7ef","sha512":"0c9753a1397ca36f1acb1c5761293974dd0299530eaf630cb7701179275e1906e6900a008414d75d9742e01d00242d3b7b361ae5300ae7fee5413ae57abf232f","ssdeep":"","tlshash":"683109ad914304b6e42b63ed24b03ee55a471320cbd0ac0a481ab5e03670aa212a56cf","first_seen":"2026-02-21T20:28:29.699516Z","last_seen":"2026-02-21T21:36:38.417649Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/categoria-kits?_rsc=19zvn","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /categoria-kits?_rsc=19zvn HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 12673\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: W/\"b7a9dd21c56a6b2e3acde63337705dc0\"\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /categoria-kits.rsc\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nk6cs-1771709724011-fb70e4827ab6\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":29006,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (24651)","md5":"75705aeb53ca8ee98fe4510020e4544d","sha1":"7c987f164a3f36c736cbbe8d74cf6b0aea5ee1f0","sha256":"63f65a024adafb2ba4487baf525c2479b6f70fee80336163b388cef9a5804b25","sha512":"d0a52fbb451e1c065259d956d0814984014480949a71b7437ba9e12c96aafb65687010c4cd8974583f4fda30d9edccc597edeb31280c5b8b1b39b90cbaad9dc8","ssdeep":"384:d9TVt6LvTNW1BYhpoMuG2M76V+krRTGW11hVorN6eVC87Sj2o/:d4DTuBWoaLdkRG4h0NjC87SCo/","tlshash":"62d2ce3b1709ae9dbe2b1164641fd21a652e833fc6e69ebbc3ed6d2413950327d132c1","first_seen":"2026-02-21T20:28:29.776033Z","last_seen":"2026-02-21T21:36:38.403889Z","times_seen":4,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/categoria-colchoes/page-c55efaadcac9f455.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/app/categoria-colchoes/page-c55efaadcac9f455.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4051\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-c55efaadcac9f455.js\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: \"c85cc6071d5e6b0c7d9cf88553935eb9\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:52 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/app/categoria-colchoes/page-c55efaadcac9f455.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zqp7n-1771709724057-85514b8a8253\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 361\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":361,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (361), with no line terminators","md5":"c85cc6071d5e6b0c7d9cf88553935eb9","sha1":"3048789b281ffe481cfa0e550fe5944b855ec47c","sha256":"4a4738b977fbf0e519c8ead05659b822164688224fd64fc4459e0f9dfd4766d9","sha512":"3257185e60077f06cf5ef869d65c88d7d2ff669eb8ab234aef01879ea7bc11ed2ad2ffcb282669669dac21398af632d853fdb08c39d412542e4c33f84caeb113","ssdeep":"","tlshash":"dee0928a668d7c1e38376c20f9976c5324eb04713422485024208da22c3725cc251d88","first_seen":"2026-02-21T20:28:29.708083Z","last_seen":"2026-02-23T15:53:38.872236Z","times_seen":6,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:35.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: W/\"fe979c92a5ad992510e5629b84a23526\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 239487\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d195fd63aa3be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19329,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19281)","md5":"fe979c92a5ad992510e5629b84a23526","sha1":"4fee6cd9de53fa82feef4042aa83202f4cd194a5","sha256":"de84306c96c98314e1a796f26df99a70f20590c535a678215d89560007b4dacf","sha512":"633913cef35247da29e85dde7c279353761606e6c508690d4d5924aa89f563354e44c51b053f785800fd3b599feb8fd2d69a2fe55162b4ccab95c84f8ed8739d","ssdeep":"192:XeI2u2acuBLZNgxYe4fbfYLFFDw25lYVRgtUramxi71NZcFRKV7:uTTacuVZNgxYe4fbgL3w23U3xi7vD1","tlshash":"af92dca3b9e310dcd557c632c0d1f67ca82f9a24c357c6e3a9037bb986827d7264198c","first_seen":"2025-05-21T12:18:34.239407Z","last_seen":"2026-08-03T12:50:03.366769Z","times_seen":38540,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_vercel/insights/view","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"POST /_vercel/insights/view HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nContent-Type: application/json\r\nContent-Length: 133\r\nOrigin: https://colchoesemmapromo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":133,"data":"{\"o\":\"https://colchoesemmapromo.com/\",\"sv\":\"0.1.3\",\"sdkn\":\"@vercel/analytics/next\",\"sdkv\":\"1.6.1\",\"ts\":1771709724015,\"dp\":\"/\",\"r\":\"\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 999\r\nx-ratelimit-reset: 60\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::wzhnh-1771709724054-08de48036f0a\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-08-03T14:16:11.685915Z","times_seen":358952,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/img/videos/unboxing.mp4","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /img/videos/unboxing.mp4 HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://colchoesemmapromo.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccess-control-allow-origin: *\r\nage: 127141\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: 9d195f887c649920-ARN\r\ncontent-range: bytes 0-2042372/2042373\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: video/mp4\r\ndate: Sat, 21 Feb 2026 21:35:23 GMT\r\netag: \"4dd432e5eeb6b36c6e536c7b22b7f0f5\"\r\nlast-modified: Thu, 19 Feb 2026 23:15:51 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nsb-gateway-mode: direct\r\nsb-gateway-version: 1\r\nsb-project-ref: zluctdqbycycyushuzqo\r\nsb-request-id: 019c8220-f158-7f59-922a-63070df2ac89\r\nserver: Vercel\r\nset-cookie: __cf_bm=pZ.7h8aK4fiSjWoRxFMOpu8I0rjWLauP8yLQ9xA0LFs-1771709723-1.0.1.1-egBN4.rrgn24fT1z2lONY7lwP0QSIYBsKcGH2cwOLdvzXjN516.hFSEZV04LXPPVeSbIdDB7I0oFMClxZwoxvV.EpxmLJD.4Ph.pgDpu7Us; path=/; expires=Sat, 21-Feb-26 22:05:23 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: none\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::gg4q5-1771709722925-b54d347d1979\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2042373\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522240,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"efb4dbb16c80f2b6cd6126f1027b50d9","sha1":"559c7ed49d63ed1bd4ef6671d742396493a1fbd7","sha256":"78b5062ba4c695a33d6ace55c18aa4a426f42564e9bcb096b0d767f2ee5ffbd0","sha512":"e6d7a74181e6d446bd732d7ab6d34beaadef93708ce97585047fd53207544050174ab37bd9c4b3441ffbccf5334885ffba69e9a97ae672693d75e453845f8d04","ssdeep":"12288:SF13tLEFYSbOdh65vwFd2yoHMmvCtywB5OS45OzN7YiKBO2:SFJCdGhcwFozfqxj45IxYi32","tlshash":"4eb423d0b7b5a4edc4512632750afdbb9679f77ab28842cf1870fac7a61f0b25183850","first_seen":"2026-02-21T21:35:56.377259Z","last_seen":"2026-02-21T21:35:56.377259Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/status?_rsc=19zvn","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:23.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /status?_rsc=19zvn HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 12674\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ndate: Sat, 21 Feb 2026 21:35:23 GMT\r\netag: W/\"3e731b6373f3eb7f6f685ed40cccae4c\"\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /status.rsc\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nk6cs-1771709723965-071ccfc374e7\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6221,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (3000)","md5":"920e9ec76463fd0b5aeff8c32441e3c4","sha1":"142833b64099a490c703054cefcefa18cda9e9ca","sha256":"35f6f713f0a8c579ae57c4d73bb5dc00b40279c660632f4b53a3b12723a40beb","sha512":"52000968b766dab6abb68bde47a9a65413d32f5e64c3d3c48b785b7d854759e70036f5e047b711487503d9bfd5958e6bb8e096d217dec8799e43dc9970908f07","ssdeep":"96:AxsHu9xzF2xfxs6dxzyxzIEOxz+xzy52l1NAFxV1H1kfUHDAz/kM9ae/:5ut2tE452T6tH6IAz/H97/","tlshash":"ced190775b04fe6a3db785a4210bd316d02fc33b46756dbe83ed2e5c12a81277a4a1c1","first_seen":"2026-02-21T20:28:29.686592Z","last_seen":"2026-02-21T21:36:38.449664Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/apoio-ao-cliente?_rsc=19zvn","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:23.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /apoio-ao-cliente?_rsc=19zvn HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 12674\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ndate: Sat, 21 Feb 2026 21:35:23 GMT\r\netag: W/\"a9398612694a7ad0216d4da6ecffd096\"\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /apoio-ao-cliente.rsc\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9v66k-1771709723964-2b424b7ae156\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16489,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (12847)","md5":"b7ad2fe5892ab6a1d36a5e1f04f166ec","sha1":"3c1c7946fbd31c94e45d9e6233f0a29d314af272","sha256":"0611b27ba1c93c6369905ee861ba2b9f0882302403d3f6b4360844fa2d3359c0","sha512":"d860a4f1dcf6f5baeb33b4c139cbff5783307d4111f040da4e6788a22b3b9f01e63de821d866529e5905269984ad7f61344b5799af21bdcc2e8d9f3611f20851","ssdeep":"192:Kut2tE4C0FYoTJG14V/jY0/fJjn0/lRFjO50/LLDcjJ0/rjPW0/rFjK50/NFljic:JFElYqERQatrUg+O2LPjl2/","tlshash":"cb72c13b6605ae6d3e770165215fd26a912e833bcaa69dfbc3fe2d3412d50322d172c1","first_seen":"2026-02-21T20:28:29.781045Z","last_seen":"2026-02-21T21:36:38.436556Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_vercel/insights/script.js","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:23.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_vercel/insights/script.js HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 10861\r\ncache-control: public, max-age=2678400\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 21 Feb 2026 21:35:23 GMT\r\netag: \"3cbd3d764f83ec900bccffe70a3ebd08\"\r\nlast-modified: Sat, 21 Feb 2026 18:33:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1:arn1:arn1::ttd5f-1771709723966-5e0f69c08a2b\r\ncontent-length: 1300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2495,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2495), with no line terminators","md5":"8e699b6e4471fd6950176e39c5f1ace0","sha1":"a3957a826a0c77a338e1bd9b408b90c6215491f8","sha256":"79bf638dd4acdeb9b80c5a4009a3e1986968d615e9557dcf23d91b5e8ad158d8","sha512":"c49b40fbcbe959fab505da0d27a9f3c273a3740f07b34433619e5bc88cd7dd54564609284f4ee30ae219a1572a0a255fe9af92f2f948931b761cbc1be3605e2f","ssdeep":"","tlshash":"2251a5ea74a1e16d4ad79275817f1204f37f2a92fc05000132d99c9d3539d1dea73f99","first_seen":"2026-02-17T21:27:06.661745Z","last_seen":"2026-08-03T14:08:32.680659Z","times_seen":18939,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/kit/kit-bau-colchao?_rsc=19zvn","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /kit/kit-bau-colchao?_rsc=19zvn HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 10557\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: text/x-component\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: W/\"17558f291ef73cea5e8ee9839d67030c\"\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /kit/kit-bau-colchao.rsc\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lqmk7-1771709724219-9c0066dbca17\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14026,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (10666)","md5":"37938dcd7ac2f9338808643515adbe64","sha1":"431538e1bd7ec785562c749884638ec608724996","sha256":"b856e7db0b0a1be34593994d1245a4e132f580b3468878fe24292bd0a660984f","sha512":"7c2322081b2485602ba45b3369ffe9a69c8969f82ee53c5bd7770398ee12578c2af748c894e09b8a01a3cab7290b92c762fe71d0131878eb961ad1d79423fdb9","ssdeep":"192:Vut2tE4TZuFIGxOhBsUBCFKJfXctHpIAz/H9I/:KF9MCFKlB/","tlshash":"2452a5775a085d6a3e7e9af0360bcb07a0ad437355a4cea683dfdd0e02f87171509297","first_seen":"2026-02-21T20:28:29.761057Z","last_seen":"2026-02-21T21:36:38.418328Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/emma/page-93967d8f3c31751a.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/app/emma/page-93967d8f3c31751a.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4050\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-93967d8f3c31751a.js\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: \"0bd7a8cc3103c0e2dd09c30367860a75\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:53 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/app/emma/page-93967d8f3c31751a.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vdd4b-1771709724225-d8c7bdf455d6\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 322\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":322,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (322), with no line terminators","md5":"0bd7a8cc3103c0e2dd09c30367860a75","sha1":"3d326981141d11059645512b95ee39d59256d303","sha256":"22cf4627391cd3c7ff3536e7821f6244059a4c809e0cf2e30c01373121d42920","sha512":"5275aded8a781969eaa2aebee70844229afd8ea45fa5276f98bc9a1a51f9ab50cc74c14ee8d7f6b1c2e2b1186d78e0ef0ceab09c16e94692b2b34eb18e4135ae","ssdeep":"","tlshash":"0ce04f8ab68d7c1e28376d24e9976c9634bb44763826485059309db218372588391998","first_seen":"2026-02-21T20:28:29.789877Z","last_seen":"2026-02-21T21:36:38.416149Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6980fd0f3c76db1c37e37e82/1jgfu7c40","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:33.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /6980fd0f3c76db1c37e37e82/1jgfu7c40 HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nOrigin: https://colchoesemmapromo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:34 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-69967ba6a3b\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: REVALIDATED\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d195fcd1e8f51e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"4ccd898d04c3ea6de4098f1e89c3935a","sha1":"1b6a155029da917e792f98658ed7d84cb6fe599a","sha256":"87d4d8170bca94fcd4a99a5e37cc5a3cc70509332ed08fb382ce792c4e66e588","sha512":"16e379d5add4e754cdad313adcc5f609950ffa00edbecd0addc717d14842975830f98997b68a52f4bbad1a4be550e59c18b8ab45a8f9bc27185ce516945aec45","ssdeep":"","tlshash":"6f41ddea5b4f1c56b22410d90ebef90ef47620f749d95892970c085272657ad2f8de38","first_seen":"2026-02-20T16:42:31.256558Z","last_seen":"2026-02-23T15:53:38.846134Z","times_seen":8,"resource_available":true,"data":null}},"time_used":470,"timings":{"blocked":46,"dns":7,"connect":8,"send":0,"wait":376,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/main-app-2dcde4753ea0d175.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/main-app-2dcde4753ea0d175.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4061\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-app-2dcde4753ea0d175.js\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"ace3268523ca829896f160bf5401feab\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:40 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/main-app-2dcde4753ea0d175.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zp6q4-1771709722511-a82ce5fef099\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 461\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (461), with no line terminators","md5":"ace3268523ca829896f160bf5401feab","sha1":"4062a8402cf24a1ccd0d38752462535e922f4cf8","sha256":"d7008163f1ed16ecb840d251190ac8a9d02132df87f25781faef1499945f9bdc","sha512":"f784ee7190413f445f0e16ed2f564f87c8183172462889739ac3f812be0e9d14762bcf1e55e794e14a8a62e6e3348f6b5c008efb66c7a2692cca98b742287486","ssdeep":"","tlshash":"def082992b4c702f2913ad24fdd35c2e255e416428a719501a04ddb12c336a893f1c39","first_seen":"2024-10-04T10:20:35.510701Z","last_seen":"2026-08-03T14:14:52.209097Z","times_seen":1692,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/876-3e9e9b3d45839d48.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/876-3e9e9b3d45839d48.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4061\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"876-3e9e9b3d45839d48.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"82228ce1aae61e8fe4fc767a1e58da45\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:41 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/876-3e9e9b3d45839d48.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9v66k-1771709722515-9fa561c0088f\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 5096\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13197,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13197), with no line terminators","md5":"083e79ed9d33f7f9cae67d0ff879fd0f","sha1":"dbb6646265736ebe04d46a311d6a40da347bd46f","sha256":"b645836dfbb5041b1b687d2eee954b60c2efda214d788e5664a779f360484945","sha512":"64e462bb287ed794a91310acbb2ffd94b324591363f72fdb4e4ab89dbbdaecdfd7e7d811875b3bdaecd0dad219f537091ebd91aa39491248867689bdd87460ec","ssdeep":"384:HHpWOtS3GyRgRU3W0wqCDtFS6HHJF8UOrqpH:k3G2WbFznJFPOrqpH","tlshash":"1a42e7ba76d4f8b513da01e0403b820af2791f36140d9090d3a6dce97974edb95e3fa9","first_seen":"2026-02-21T20:28:29.711912Z","last_seen":"2026-02-21T21:36:38.447456Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/media/e4af272ccee01ff0-s.p.woff2","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:22.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/media/e4af272ccee01ff0-s.p.woff2 HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://colchoesemmapromo.com/_next/static/css/8e789550b01db38d.css?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4062\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"e4af272ccee01ff0-s.p.woff2\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: font/woff2\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\netag: \"65850a373e258f1c897a2b3d75eb74de\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:40 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/media/e4af272ccee01ff0-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5vkwl-1771709722731-d7b141c5919d\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-03T14:27:03.304097Z","times_seen":86073,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/ofertas-emma/page-d94b5d4312a95958.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/app/ofertas-emma/page-d94b5d4312a95958.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4050\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-d94b5d4312a95958.js\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: \"350387956bed09b96b0f0b597328c12b\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:53 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/app/ofertas-emma/page-d94b5d4312a95958.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7g4qn-1771709724010-7b57188fdf41\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 361\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":361,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (361), with no line terminators","md5":"350387956bed09b96b0f0b597328c12b","sha1":"f68e8e5829bbfe5892e57a1647856fc7e6e35cd6","sha256":"c9124c3f4176e0335616b878ff4d1daa0bd7acea88658c329b384c918cf06693","sha512":"03cff9fc516709c023d9319003402887f6e8c2131fac0e95480d349518d0e4e79d72ad9e05827c06e65d41f9e14fed150a2cb783f0460f81b52c49b69078c45a","ssdeep":"","tlshash":"90e0924a668dbc1f38376c34f9972c6324eb14703416495029209eb22c3725cc351d48","first_seen":"2026-02-21T20:28:29.765595Z","last_seen":"2026-02-23T15:53:38.865064Z","times_seen":6,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"colchoesemmapromo.com/_next/static/chunks/app/produto/%5Bslug%5D/page-5149c124746c515a.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE","fqdn":"colchoesemmapromo.com","domain":"colchoesemmapromo.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:24.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"colchoesemmapromo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 20:23:37 GMT","end":"Tue, 19 May 2026 20:23:36 GMT"},"fingerprint":{"sha1":"12:09:0C:51:C9:55:C6:14:46:61:35:77:80:39:DF:CF:E4:0F:0B:9B","sha256":"5B:25:7F:7D:14:E8:75:ED:A5:A3:81:95:82:38:05:2D:60:8E:98:3F:67:2D:64:8B:33:47:6A:91:F4:1C:7E:D2"}}},"request":{"raw":"GET /_next/static/chunks/app/produto/%5Bslug%5D/page-5149c124746c515a.js?dpl=dpl_sjALiPfAo4XB3UBBTy9U94S4ivHE HTTP/1.1\r\nHost: colchoesemmapromo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.528276049.1771709724\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4050\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-5149c124746c515a.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tawk.to https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.bing.com; style-src 'self' 'unsafe-inline' https://*.tawk.to; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' https://*.tawk.to; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co https://*.tawk.to wss://*.tawk.to https://*.google-analytics.com https://*.bing.com https://*.googletagmanager.com https://viacep.com.br https://brasilapi.com.br https://opencep.com; frame-src 'self' https://*.tawk.to https://*.google.com https://*.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Feb 2026 21:35:24 GMT\r\netag: \"73b3f269c6106c3a39804c84da7b996b\"\r\nlast-modified: Sat, 21 Feb 2026 20:27:54 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/app/produto/%5Bslug%5D/page-5149c124746c515a.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ql2lt-1771709724227-c63cf8c816ba\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 12489\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51873), with no line terminators","md5":"95a49c41edc0aa90a43b2c118de494e3","sha1":"16d2a8ff745a4e2a32ee82c697a7e9bfccdc8873","sha256":"3205d5b645a70d16dbbe0719067dce9c55922152da6cd47ee202ccc4218d392e","sha512":"355bffc5eb4763909d1376d9f411f7db495f9da397ea28e8b9d20b4a802c8271a3b5555d0fed230e0eef329793e9363b6d0369fd3fcdc7c07ff1950d3e645bae","ssdeep":"768:MPXsXPPDT7N+TmhPCnsrK5mV6ZrZ/hhh3RseR3XgyoiBP8AGFlohP/Voqj86wchi:MnxfFbbec566XqHC490m/f","tlshash":"523335059659afdcf93b08eca5dea00cb12f5b94da0b88b4babc383516470d47b53bc5","first_seen":"2026-02-21T20:28:29.713386Z","last_seen":"2026-02-21T21:36:38.411537Z","times_seen":4,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"colchoesemmapromo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:34.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nOrigin: https://colchoesemmapromo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 4051\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\ncontent-encoding: br\r\ncf-ray: 9d195fcfdb6f51e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-03T14:08:25.284416Z","times_seen":92464,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://colchoesemmapromo.com/","date":"2026-02-21T21:35:34.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://colchoesemmapromo.com/\r\nOrigin: https://colchoesemmapromo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"b057293b718ae7060a9acc593ff83f67\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 4051\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d195fcfeb8e51e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":324696,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-06-15T21:26:04.431869Z","times_seen":12669,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}