| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd931e0142ef5ffe9cdb4c4c6bfcb9bc9 d9c4caf525e8926b042a14f38d374cc4033ed768 f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4623
Expires: Mon, 05 Sep 2022 07:33:01 GMT
Date: Mon, 05 Sep 2022 06:15:58 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  143.204.55.27 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.27:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashb593eb39329cfe060d55be5e4a5405e2 78e46c1028e9f94f8569303ad2d90d7df13a059a 08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 05 Sep 2022 05:24:34 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: f121j9Cp02XzUKJxam0h1xJQ3yybLW0n8BtThwtgY_FRVJwQsIucVA==
Age: 3084
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain | 143.204.55.49 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain IP143.204.55.49:0
File typePEM certificate\012- , ASCII text Hash742edb4038f38bc533514982f3d2e861 cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1 b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Sep 2022 01:15:19 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: jbG3G2dlpWP8c6teiEiftQefP1JY9IMA1liK0GO7rC_6aUwfLB6o9w==
age: 18041
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 06:15:58 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| seguro.caixamisteriosa.net/cart?cart_token=aa5415e0-2ccc-11ed-b9d6-02f91afe0016-63156ffa16fef&utm_source=SMS&utm_campaign=Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=14c89e1a1a92eb05e5677a66dbd966c536060fae&customerToken=df02b410-2ccc-11ed-bef5-f5686109f391 |  170.82.174.30 | 301 Moved Permanently | 134 B |
URL HTTP/1.1seguro.caixamisteriosa.net/cart?cart_token=aa5415e0-2ccc-11ed-b9d6-02f91afe0016-63156ffa16fef&utm_source=SMS&utm_campaign=Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=14c89e1a1a92eb05e5677a66dbd966c536060fae&customerToken=df02b410-2ccc-11ed-bef5-f5686109f391 IP170.82.174.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4aa7a432bb447f094408f1bd6229c605 1965c4952cc8c082a6307ed67061a57aab6632fa 34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /cart?cart_token=aa5415e0-2ccc-11ed-b9d6-02f91afe0016-63156ffa16fef&utm_source=SMS&utm_campaign=Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=14c89e1a1a92eb05e5677a66dbd966c536060fae&customerToken=df02b410-2ccc-11ed-bef5-f5686109f391 HTTP/1.1
Host: seguro.caixamisteriosa.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 05 Sep 2022 06:15:59 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://seguro.caixamisteriosa.net:443/cart?cart_token=aa5415e0-2ccc-11ed-b9d6-02f91afe0016-63156ffa16fef&utm_source=SMS&utm_campaign=Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=14c89e1a1a92eb05e5677a66dbd966c536060fae&customerToken=df02b410-2ccc-11ed-bef5-f5686109f391
X-GoCache-CacheStatus: BYPASS
Server: gocache
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.27 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.27:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 05 Sep 2022 05:38:16 GMT
Cache-Control: max-age=3600
Expires: Mon, 05 Sep 2022 06:15:05 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: gTkC8D4NZ9nC8lLtYXVHhy_AGYVpD4EtZhIRuNpxZj-3Nuop3Mi0Wg==
Age: 2263
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashceaea491f202a74c2a45ecc6c62d2bd6 790672e2f39b4c60b3c92e01596096ed64895ad6 58d871bfc23edcce9ff29c8dd9e1b75ddb482f52f1ec3abeaa8c10bcf6dd5910
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58D871BFC23EDCCE9FF29C8DD9E1B75DDB482F52F1EC3ABEAA8C10BCF6DD5910"
Last-Modified: Sun, 04 Sep 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 05 Sep 2022 12:15:59 GMT
Date: Mon, 05 Sep 2022 06:15:59 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash77d035f38a45e8a1ec30d5fe9611880b 01cf34de95257da64dac90edf5a86203f1160271 7dc687d6bb1679ba5567e58b4f8c1e78766e7ee36273ba7f62068c595d57f7f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4801
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 06:15:59 GMT
Last-Modified: Mon, 05 Sep 2022 04:55:58 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 54.69.239.65 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.69.239.65:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: gfqfFOTKHAV6bilWDejlWQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: feW6P3/u8q4pv5C2tg9UMQ3SR1E=
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashb15f3f14bd92b7a544ec2347e6810c7b dd55fd8396d796082edabb5ab6e2d7fb3b51b731 87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4199
Expires: Mon, 05 Sep 2022 07:26:00 GMT
Date: Mon, 05 Sep 2022 06:16:01 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashb15f3f14bd92b7a544ec2347e6810c7b dd55fd8396d796082edabb5ab6e2d7fb3b51b731 87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4199
Expires: Mon, 05 Sep 2022 07:26:00 GMT
Date: Mon, 05 Sep 2022 06:16:01 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashb15f3f14bd92b7a544ec2347e6810c7b dd55fd8396d796082edabb5ab6e2d7fb3b51b731 87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4199
Expires: Mon, 05 Sep 2022 07:26:00 GMT
Date: Mon, 05 Sep 2022 06:16:01 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashb15f3f14bd92b7a544ec2347e6810c7b dd55fd8396d796082edabb5ab6e2d7fb3b51b731 87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4199
Expires: Mon, 05 Sep 2022 07:26:00 GMT
Date: Mon, 05 Sep 2022 06:16:01 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0c070a1-cfda-4086-99d7-f4d72a7f9d8f.jpeg | 34.120.237.76 | 200 OK | 6.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0c070a1-cfda-4086-99d7-f4d72a7f9d8f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash9d19ae40ba0a61c69d0bbc87ed8da454 064232b77c890404a294500597e562b3945453be a2d2bfe5d44394511949665e36492706dd655a46198bf7ae555033eedfa46d83
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0c070a1-cfda-4086-99d7-f4d72a7f9d8f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6486
x-amzn-requestid: 94ff7301-4895-4fad-81db-a2774c8db061
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X3OeaFDYIAMFQBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312c45c-450abb734f447a2c2db18aae;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 03:05:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: _rdmPm3Jy_SzHM6g7lQGWxUkjzWkv6WM46xrwnIa0SWNxyufdjLHsw==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 03:41:46 GMT
age: 9255
etag: "064232b77c890404a294500597e562b3945453be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0855d1b6-f16d-4dd0-9fde-a9453425f201.jpeg | 34.120.237.76 | 200 OK | 7.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0855d1b6-f16d-4dd0-9fde-a9453425f201.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc96c8c1d4fe4a550a59dd4ba09843a7c 99ece60b2c12ebc34512a58c886c997e273ad1ad 78157b35e481a8d31e3fbdf60d01332ae97a4bb939235e8ba566b1bd4e1d8d7b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0855d1b6-f16d-4dd0-9fde-a9453425f201.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7431
x-amzn-requestid: 0953983e-8c57-49ae-9b52-fe127c73a4a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XaH8IGUmIAMFY1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6307204d-06266aa31b508580324f07ab;Sampled=0
x-amzn-remapped-date: Thu, 25 Aug 2022 07:10:05 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: NkadqENBWW1-qAK4_05zp0mUJ7lBApClnUDaojmgPEzZuiOZQ2lXsQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 03:44:55 GMT
age: 9066
etag: "99ece60b2c12ebc34512a58c886c997e273ad1ad"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg | 34.120.237.76 | 200 OK | 8.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash30bf854fd3e27e2313a3d26fc43b9990 032acf1bfb0c8e2cbce8f2ff4d2964424b044951 7641be64dd25487edf4f845d1fbb0b07daa80fa8fb58863dd09081d9d169bd13
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8469
x-amzn-requestid: de0e8998-4a52-4651-bcd6-3068c50193b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey2Eq4oAMFZlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-15da44d87bf486cb1738fe18;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: GuATNx2xnWnEl0cr_2ZWZo_jOWbHlSBYksIeHFDoHAK9o5Tf0PPliQ==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 22:03:29 GMT
etag: "032acf1bfb0c8e2cbce8f2ff4d2964424b044951"
content-type: image/jpeg
age: 29552
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| seguro.caixamisteriosa.net/cart?cart_token=aa5415e0-2ccc-11ed-b9d6-02f91afe0016-63156ffa16fef&utm_source=SMS&utm_campaign=Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=14c89e1a1a92eb05e5677a66dbd966c536060fae&customerToken=df02b410-2ccc-11ed-bef5-f5686109f391 | 170.82.173.30 | 302 Found | 27 kB |
URL HTTP/2seguro.caixamisteriosa.net/cart?cart_token=aa5415e0-2ccc-11ed-b9d6-02f91afe0016-63156ffa16fef&utm_source=SMS&utm_campaign=Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=14c89e1a1a92eb05e5677a66dbd966c536060fae&customerToken=df02b410-2ccc-11ed-bef5-f5686109f391 IP170.82.173.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
Hashc68f1be2b0f42f9417a5ce93749330f7 577a1e35115d59f99c95eebed3b76c6d24758c17 6c2ab56a2d1346f42ec6aa76268f9c40d319150e6953bc9318ba9ae7e8ae6da7
GET /cart?cart_token=aa5415e0-2ccc-11ed-b9d6-02f91afe0016-63156ffa16fef&utm_source=SMS&utm_campaign=Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=14c89e1a1a92eb05e5677a66dbd966c536060fae&customerToken=df02b410-2ccc-11ed-bef5-f5686109f391 HTTP/1.1
Host: seguro.caixamisteriosa.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Mon, 05 Sep 2022 06:15:59 GMT
content-type: text/html; charset=UTF-8
location: https://seguro.caixamisteriosa.net/checkout/payment?cart_token=aa5415e0-2ccc-11ed-b9d6-02f91afe0016-63156ffa16fef&utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&store_token=14c89e1a1a92eb05e5677a66dbd966c536060fae&customerToken=df02b410-2ccc-11ed-bef5-f5686109f391
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6Imw5SWx4VEVoZ1JNbHdHc0E0NDk1TWc9PSIsInZhbHVlIjoiR0lRSHMySkkrRWhQeWZEVFNjZDJ4YXdqMDRtMktEbCtZODBvY2J3VmxLMDB5cmdDdTU4cWNXbmxHTTY3a3V3TkI1RndxajVhNHhjdGhqTmFIaWpTbXc9PSIsIm1hYyI6IjI2ZjdiNGVjYmIyNDllZDY1NWM0MWU2YTE2Mzk5MWMxMTA2NDU0OGI4MmI5ZTUyODQ1NGI4M2RjODg4OTYzNDEifQ%3D%3D; expires=Mon, 05-Sep-2022 09:15:59 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6ImRxOVZhbU1cL0trbVNURUdGWTdrdzR3PT0iLCJ2YWx1ZSI6IlRqdjArWktQMjVJQTRydVNmMjlQZW9HcTh2UWZoaW5nalNoa282MTFrbm5GVE9DV0JkeEw1N2FocjR1dkZFZmloNFZlRTVKSmRiRjFKT3FCb29nWTBBPT0iLCJtYWMiOiIxNjgwMmFlYWE3MTE2NmQ4ODUxMmRjOTFhNzlhZmEwNTA0YzcxNWM3MjI4Y2I0NmQ0OTA3MmNkYzQ2YmVhNWJjIn0%3D; expires=Mon, 05-Sep-2022 09:15:59 GMT; Max-Age=10800; path=/; httponly
caixa-misteriosa9_cart=eyJpdiI6ImVBRVZTVnhCUHM4a3ZpeFV4OXhmVnc9PSIsInZhbHVlIjoicGpXb1J0amJIQ0xqNHV6SlVPb2djU3RuNndDZjR6WDdiR0YrdnE2eFNnTEpVdDRuZHh3UWxPTEE4N2diYVJIb09vdGkxSVFRSWJqbjlcL29ySWRjQ2lnPT0iLCJtYWMiOiI1MTU5ZmM1MTE0YjIwMTMzMTQ1YzUxYzQwZDVkMzNhNDUxNDRmOGM3NDU2MDc1NDJkNDFiMWQ0MDg4MDk3YmM1In0%3D; expires=Sat, 10-Sep-2022 06:15:59 GMT; Max-Age=432000; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1944c2a5-23d6-45f7-ab9f-78685b5e5be8.jpeg | 34.120.237.76 | 200 OK | 4.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1944c2a5-23d6-45f7-ab9f-78685b5e5be8.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe1556a0afcd327679e471ac6373ca29f 15ac095f9a744d85d7054d6c48af8a3f9ec9fc3a d3537c985a20cf69290064fbd46778a6fbe6604cb6b37b272c8058142f02ffdf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1944c2a5-23d6-45f7-ab9f-78685b5e5be8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4452
x-amzn-requestid: 882486d7-8cdc-4986-8562-6ec196c2a8e0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xt-dIFk7IAMFs4A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630f1120-5a4edfae33e2ef3f133e22f6;Sampled=0
x-amzn-remapped-date: Wed, 31 Aug 2022 07:43:28 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dmOD872bprnv74JVQ9X7Te_N8O5MQZQIv5a_svfRf_SkYMJNu3g07g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 04:32:13 GMT
age: 6228
etag: "15ac095f9a744d85d7054d6c48af8a3f9ec9fc3a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe013b89a-59b7-4bdf-8ed4-bbf5fdcbccbe.jpeg | 34.120.237.76 | 200 OK | 5.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe013b89a-59b7-4bdf-8ed4-bbf5fdcbccbe.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash1f310cf841fc88141f5e14d6c73e2d67 e0cd950b33882be4e4ff76d392648823e0d4ebe7 6bac58b0fa14de14754093383f9875059c10706ffaf01eda8718a71624bb3f7b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe013b89a-59b7-4bdf-8ed4-bbf5fdcbccbe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5825
x-amzn-requestid: 65a3ff9f-d3fe-416e-a9a1-767b8add6b68
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey3Ex2IAMF7Xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-00da48525f5bdad776b62fa6;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 23NoJI_4ogUWyNzMsJgWbYQ-TGUs7lgH3IXSxEWZEWQRmNV5OaHqYQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:45:28 GMT
age: 30633
etag: "e0cd950b33882be4e4ff76d392648823e0d4ebe7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| awesome-assets.yampi.me/checkout/build/assets/css/app-bae9a98092.css | 104.26.2.88 | 200 OK | 133 kB |
URL HTTP/2awesome-assets.yampi.me/checkout/build/assets/css/app-bae9a98092.css IP104.26.2.88:0
File typeUnicode text, UTF-8 text, with very long lines (65534), with no line terminators Size133 kB (133225 bytes) Hashbae9a98092c49ae92a88a00c8a656a3e 4a0de35996dc94806c456e560e3b413f8f8b10fe 5e765b28cb678a1cf869e26df408ba17ff6c32ba38c0927468cbb3789833ae76
GET /checkout/build/assets/css/app-bae9a98092.css HTTP/1.1
Host: awesome-assets.yampi.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 06:16:01 GMT
content-type: text/css
content-length: 133225
x-amz-id-2: 4X6nQ2RVWKcUzRfjifCsZ1eBGSwC9lVGNXWiXr26E9og4fDw1oYvYh7+cZtV4wzZ4P+1op9oSD4=
x-amz-request-id: F0G1EHYFFFZASZGW
cache-control: public, max-age=315360000, no-transform
last-modified: Tue, 09 Aug 2022 12:46:24 GMT
x-amz-version-id: mpCF2AGsr.wXbjlw7HFMbt8hg2LWpaUa
etag: "bae9a98092c49ae92a88a00c8a656a3e"
cf-cache-status: HIT
age: 2303543
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BPJrkScLWRw6wecZ75%2F0StJ43O5mCqJYBdkPOxP4m5SIJbVHRIMNu9W0yv7TD%2FbI%2FTYz7EwUoE7hKhtVQiK95BeQyyW%2BR6OBUK0na6OtYFfc4bHPFli60ip8RByuKgZVlxJcmr8iCh3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745cd5704a2a0b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashe55281415ad2c89f8e871f59400c8dc1 bc7ca4131f13d89604161eb0641352670c28c033 1e9c57dbee44db8c9aab44449f9f0cb502a6d9f6473de439daf26414d0d2517a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 06:16:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hasha73c40e0fed317f31e35a24d5b5e2d0d fb19e9d403e37956762ebb527260576860161872 4a38f2cc8997dada402e2cce06bbd8776cbad2075b00696d00efa59ad5388644
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 06:16:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| awesome-assets.yampi.me/checkout/build/assets/js/app-72ad555af0.js | 104.26.2.88 | 200 OK | 341 kB |
URL HTTP/2awesome-assets.yampi.me/checkout/build/assets/js/app-72ad555af0.js IP104.26.2.88:0
File typeASCII text, with very long lines (47247) Size341 kB (340873 bytes) Hash72ad555af0799d08a29705c878968f60 85691f0b6e3ea213b045767bad95eb4a020421b5 ce8f51cbf7b6c0e6896eaa97eec92720a0f6147023ac3aeed31bb9691afa20b4
GET /checkout/build/assets/js/app-72ad555af0.js HTTP/1.1
Host: awesome-assets.yampi.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 06:16:01 GMT
content-type: application/javascript
content-length: 340873
x-amz-id-2: Ht2/CAx2ZhMf3+rqxjZ6Ezl6n5AvapFIMM1EElKuqAuYlVYrcenZzPgGjL1oqrrRNB2uyQKOJOs=
x-amz-request-id: 3X5JSDHWQJ00WEMN
cache-control: public, max-age=315360000, no-transform
last-modified: Mon, 01 Aug 2022 14:38:20 GMT
x-amz-version-id: 7cknWGuVug2HO81gQQYyXCeYCW1eDB9p
etag: "72ad555af0799d08a29705c878968f60"
cf-cache-status: HIT
age: 2992801
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZCLey12hBo9LtFs6ME3mUA8rbMM7W7F4j2RiEMg6Eh0uSYFERcRFg8ZW7inVkydHRJ6AolmUd3r24A1pGbkqhfuSUOlmarYNYu%2BbQ5o08AXpPj2P1dSRN%2FtNM2AGZOXRmzZxM5jU1G0b"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745cd5707a500b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js?render=6LdxeuoUAAAAAP6iiKD6JZKojOflG8Z_w0Ebx6LC | 142.250.74.164 | 200 OK | 584 B |
URL HTTP/2www.google.com/recaptcha/api.js?render=6LdxeuoUAAAAAP6iiKD6JZKojOflG8Z_w0Ebx6LC IP142.250.74.164:0
File typeASCII text, with very long lines (884), with no line terminators Hashb7a6c59a907d5a389d2689db5a03b1ce 75084c2c8c6fea60d8bbfa6b22cecd4d51c98e31 00a024e5bb473677e5844a1dc71854b4351f003df053dae198624d2985f3fe86
GET /recaptcha/api.js?render=6LdxeuoUAAAAAP6iiKD6JZKojOflG8Z_w0Ebx6LC HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Mon, 05 Sep 2022 06:16:01 GMT
date: Mon, 05 Sep 2022 06:16:01 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 584
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/s/gts1d4/pWyJAO6WNqQ | 142.250.74.3 | 200 OK | 471 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1d4/pWyJAO6WNqQ IP142.250.74.3:0
Hashe1b46a18088530124ad656cb5bdae41e 41f456aa1eca743fb66331bb256c6510d2ffd1f7 8718c9ec8edca038a0581ba7d27480b6fb5535d3fb13e2b356ad007b0c7c170d
POST /s/gts1d4/pWyJAO6WNqQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 06:16:01 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| js.upnid.com/v0.js | 130.211.14.112 | 200 OK | 8.9 kB |
IP130.211.14.112:0
File typeUnicode text, UTF-8 text, with very long lines (23050) Hash960c2f02f796ed460b2c3911ee0f498d 862e007ff302286b83d9e5b4b880acdf5894ac1a d5112369b9ae06973e98285df7d92749ddae470430912d01fd70f7c45207592f
GET /v0.js HTTP/1.1
Host: js.upnid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Origin
content-encoding: gzip
via: 1.1 google
content-length: 8884
date: Mon, 05 Sep 2022 00:38:57 GMT
age: 20224
last-modified: Tue, 19 Jan 2021 20:16:07 GMT
content-type: text/javascript; charset=utf-8
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash420a6ffc72857f7132a9065de7c844a9 dee617384561d0790b72f096336b73ade7950579 c98bdc53f1f22291c4b954e9bd5f6432cfe3d5b24e3680b4ada3fc3a696e79d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 06:16:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hasha73c40e0fed317f31e35a24d5b5e2d0d fb19e9d403e37956762ebb527260576860161872 4a38f2cc8997dada402e2cce06bbd8776cbad2075b00696d00efa59ad5388644
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 06:16:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/s/gts1d4/pWyJAO6WNqQ | 142.250.74.3 | 200 OK | 471 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1d4/pWyJAO6WNqQ IP142.250.74.3:0
Hashe1b46a18088530124ad656cb5bdae41e 41f456aa1eca743fb66331bb256c6510d2ffd1f7 8718c9ec8edca038a0581ba7d27480b6fb5535d3fb13e2b356ad007b0c7c170d
POST /s/gts1d4/pWyJAO6WNqQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 06:16:01 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| images.yampi.me/assets/stores/caixa-misteriosa9/uploads/testimonies/62e9635ebe532.jpeg | 104.26.2.88 | 200 OK | 10 kB |
URL HTTP/2images.yampi.me/assets/stores/caixa-misteriosa9/uploads/testimonies/62e9635ebe532.jpeg IP104.26.2.88:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 150x150, components 3\012- data Hash04572c76d141851db42a1a6e13d38b71 aee88a71a5c7a780c6fb9aad074674ea7caab126 f97dc1da935583662b69ee9320a707de02f9c9ae32c6c825fdcaf51ee0618d50
GET /assets/stores/caixa-misteriosa9/uploads/testimonies/62e9635ebe532.jpeg HTTP/1.1
Host: images.yampi.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 06:16:01 GMT
content-type: image/jpeg
content-length: 10320
x-amz-id-2: 1mLplV5G4jacwTPDN6QqGW4J/Ws9XI3CYUBF+DS5Eb3hcguBVwlRsQ7td7cSW/LUq9AQ8/hQbpw=
x-amz-request-id: AJSXY9RTXT0DSYJE
last-modified: Tue, 02 Aug 2022 17:48:39 GMT
x-amz-version-id: AatCE1mkRL6z1GEYqQay5AQrkz_0GlQk
etag: "04572c76d141851db42a1a6e13d38b71"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T9F8PhjYSTL3XRtEyteqA5PMtGuLCFh%2B3W12rvv75T9dWGeIsRIlvhK1jVGYl%2FpI%2FAsPju2HP%2BNG7gETU%2Bv8R2pY8dNGIRwNuw%2F3DGHzZLxSOzW9S805CuGQCMgsZIcTxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745cd5707a6b0b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| seguro.caixamisteriosa.net/checkout/payment?cart_token=aa5415e0-2ccc-11ed-b9d6-02f91afe0016-63156ffa16fef&utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&store_token=14c89e1a1a92eb05e5677a66dbd966c536060fae&customerToken=df02b410-2ccc-11ed-bef5-f5686109f391 | 170.82.173.30 | 302 Found | 45 kB |
URL HTTP/2seguro.caixamisteriosa.net/checkout/payment?cart_token=aa5415e0-2ccc-11ed-b9d6-02f91afe0016-63156ffa16fef&utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&store_token=14c89e1a1a92eb05e5677a66dbd966c536060fae&customerToken=df02b410-2ccc-11ed-bef5-f5686109f391 IP170.82.173.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
Hash41595516a23f015a2cb279c5a46e5de0 8ec37060141bbfe8db8b18ae0874c2f48ed7b8f6 00e83a0fa4be8d2b8e51e920d0535e8fb21200435781e1c5bd156bfc74be288d
GET /checkout/payment?cart_token=aa5415e0-2ccc-11ed-b9d6-02f91afe0016-63156ffa16fef&utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&store_token=14c89e1a1a92eb05e5677a66dbd966c536060fae&customerToken=df02b410-2ccc-11ed-bef5-f5686109f391 HTTP/1.1
Host: seguro.caixamisteriosa.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Imw5SWx4VEVoZ1JNbHdHc0E0NDk1TWc9PSIsInZhbHVlIjoiR0lRSHMySkkrRWhQeWZEVFNjZDJ4YXdqMDRtMktEbCtZODBvY2J3VmxLMDB5cmdDdTU4cWNXbmxHTTY3a3V3TkI1RndxajVhNHhjdGhqTmFIaWpTbXc9PSIsIm1hYyI6IjI2ZjdiNGVjYmIyNDllZDY1NWM0MWU2YTE2Mzk5MWMxMTA2NDU0OGI4MmI5ZTUyODQ1NGI4M2RjODg4OTYzNDEifQ%3D%3D; bubbstore_checkout=eyJpdiI6ImRxOVZhbU1cL0trbVNURUdGWTdrdzR3PT0iLCJ2YWx1ZSI6IlRqdjArWktQMjVJQTRydVNmMjlQZW9HcTh2UWZoaW5nalNoa282MTFrbm5GVE9DV0JkeEw1N2FocjR1dkZFZmloNFZlRTVKSmRiRjFKT3FCb29nWTBBPT0iLCJtYWMiOiIxNjgwMmFlYWE3MTE2NmQ4ODUxMmRjOTFhNzlhZmEwNTA0YzcxNWM3MjI4Y2I0NmQ0OTA3MmNkYzQ2YmVhNWJjIn0%3D; caixa-misteriosa9_cart=eyJpdiI6ImVBRVZTVnhCUHM4a3ZpeFV4OXhmVnc9PSIsInZhbHVlIjoicGpXb1J0amJIQ0xqNHV6SlVPb2djU3RuNndDZjR6WDdiR0YrdnE2eFNnTEpVdDRuZHh3UWxPTEE4N2diYVJIb09vdGkxSVFRSWJqbjlcL29ySWRjQ2lnPT0iLCJtYWMiOiI1MTU5ZmM1MTE0YjIwMTMzMTQ1YzUxYzQwZDVkMzNhNDUxNDRmOGM3NDU2MDc1NDJkNDFiMWQ0MDg4MDk3YmM1In0%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 302 Found
date: Mon, 05 Sep 2022 06:16:00 GMT
content-type: text/html; charset=UTF-8
location: https://seguro.caixamisteriosa.net/checkout/address
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6IkhvKzhweXQ0UGhjNGdJY05JQjBIaFE9PSIsInZhbHVlIjoieGQ1SHlZOGZxWnV6bEtwYkduTGYzZ0VPb1djbUhFRitQbm9GblpWOFliS0VZSGpUYlZPT3kwRnhXTDlOaEs1SVV1VUtqZm1cLytiZ2szeGZiSDgyUThnPT0iLCJtYWMiOiIwOTVmMTk0MjlmZDE2NWIyYjQxNGYzMDk2NDY0NGI1YzBiMGVhOGRiMzI2NzM1MTM0MjE5ODQ1MWI3ZmEyNzNhIn0%3D; expires=Mon, 05-Sep-2022 09:16:00 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6Im5FbUNcL1NvYUgrN1p1V0h0Wm0yYmJnPT0iLCJ2YWx1ZSI6IjB5WFdXVFFNcDJlQmpyOEYrclwvdVJJcVFkQXU5Rjh2dmJDN21rWEZpdEZLTmNJV0x6MDYwQlNicXZIK2liQnoyMmU2aDFhVGorT1ZaSHJacUk2TUN0Zz09IiwibWFjIjoiZTdkYjQ0ODkyYTA3YmVmZGQyZTZmY2IwZDVmNmU5NzY3YTlhYzhjZGUxODY3ZDg0NDBiNTFlOGVjZWMxZDA2NSJ9; expires=Mon, 05-Sep-2022 09:16:00 GMT; Max-Age=10800; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
X-Firefox-Spdy: h2
|
|
| images.yampi.me/assets/stores/caixa-misteriosa9/uploads/testimonies/62e9636950b51.jpeg | 104.26.2.88 | 200 OK | 9.3 kB |
URL HTTP/2images.yampi.me/assets/stores/caixa-misteriosa9/uploads/testimonies/62e9636950b51.jpeg IP104.26.2.88:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 150x150, components 3\012- data Hash8220257871413a2a14ab3d6b964f6abf 28a022b80018a30a0660cb2f87a0cb754133ef7a efda84dc3eaf3d6233cbd4f75430f5cfebc5926f06ffc195929fa8c671a12746
GET /assets/stores/caixa-misteriosa9/uploads/testimonies/62e9636950b51.jpeg HTTP/1.1
Host: images.yampi.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 06:16:01 GMT
content-type: image/jpeg
content-length: 9336
x-amz-id-2: q21NAWFfYIbUAFyrsqfNlj/c95CVaa//WsGOGZWHHVp3YOo6qnmQ6T5eFEn5JXc5FMYXpcSIRPA=
x-amz-request-id: AJSMK44AC3TBCHR6
last-modified: Tue, 02 Aug 2022 17:48:39 GMT
x-amz-version-id: HfrtBnZFXQLQQPWMe2SSfAQyOFUNAZMA
etag: "8220257871413a2a14ab3d6b964f6abf"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PvVHJ05ctSi56q3LgF3dFia9LT%2FbJL3Q2bwIS9gBIZ0ObtJ3sln41plGYlkVo5vUblbQ09vm5958%2BMZflZoeSDuOJlhQHrwipXtCEiUxbQ0j5517lGwipqLgCjmOP8jA3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745cd5707a630b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.dooki.com.br/fa/4.7.0/fa.css |  104.18.1.53 | 200 OK | 13 kB |
URL HTTP/2fonts.dooki.com.br/fa/4.7.0/fa.css IP104.18.1.53:0
Hashd7a340f745c9a74d010c73a98b68332a 1fc90f1f319e736b16cecc2bdeb88644b72a6bb9 3c5d82b73c3e9f68a2b195b5a624b88fbce71b455bc792b4b8bba6c688500fb8
GET /fa/4.7.0/fa.css HTTP/1.1
Host: fonts.dooki.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 06:16:01 GMT
content-type: text/css
x-amz-id-2: gGNPVnAVZsqONOCg389UDgsIhA1ObjBdpsJMkqSZGddyTo93S8XPm4wvAm36dYfVkX+Cf24ZYFI=
x-amz-request-id: G8BNNJCT1K1R1RT8
last-modified: Sat, 10 Nov 2018 14:21:37 GMT
x-amz-version-id: null
etag: W/"36688de682a76454417c56541b1cf51e"
cf-cache-status: REVALIDATED
expires: Tue, 13 Sep 2022 06:16:01 GMT
cache-control: public, max-age=691200
vary: Accept-Encoding
server: cloudflare
cf-ray: 745cd570f8210b02-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.100 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.100:0
Hashd85bf25a5c3ab5af9d3705697e7d8715 6677b512bf018e129c0ee0110ecd2db6b73d6fdd 45ea9dc56417c750944e6ba36a8aa7a649331f644c9b8eea65bbecf8f7c45f77
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 05 Sep 2022 06:16:01 GMT
Last-Modified: Mon, 05 Sep 2022 05:03:34 GMT
Server: ECS (nyb/1D0D)
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: mLBXPbX5qnVE-NbTVaYpLSnB7rKXOxbDKpZLrzrmu7XWke74hHb1Kg==
Age: 4348
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash3958546039b436bd448017432b45c949 45aadab2339c0718b57200a1b2849073c04f08f5 903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 06:16:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2 | 142.250.74.163 | 200 OK | 34 kB |
URL HTTP/2fonts.gstatic.com/s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 33580, version 1.0\012- data Hash848cd2ecd011428969dc6b90431bc482 6b1a7b562a56bd54510e0f6f95e26babca331a1b 981307dcbbd348f6fb4e3eab184077392f9ee15097ea868f630debefad9044e9
GET /s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://seguro.caixamisteriosa.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 Aug 2022 21:08:19 GMT
expires: Tue, 29 Aug 2023 21:08:19 GMT
cache-control: public, max-age=31536000
age: 551262
last-modified: Mon, 18 Jul 2022 19:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash3958546039b436bd448017432b45c949 45aadab2339c0718b57200a1b2849073c04f08f5 903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 06:16:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| images.yampi.me/assets/stores/caixa-misteriosa9/uploads/images/caixa-misteriosa-edicao-limitada-62e956810efef-thumb.png | 104.26.2.88 | 200 OK | 118 kB |
URL HTTP/2images.yampi.me/assets/stores/caixa-misteriosa9/uploads/images/caixa-misteriosa-edicao-limitada-62e956810efef-thumb.png IP104.26.2.88:0
File typePNG image data, 290 x 247, 8-bit/color RGBA, non-interlaced\012- data Size118 kB (117743 bytes) Hashc5a167df4f433c249cb974e00f55de3f 0fdbc7b9bda3c0885fb55020b14ea919f2df40e8 25c6c5a4710bc8608fe80c63712c812d1d03a01caa6ff038254851525fa08878
GET /assets/stores/caixa-misteriosa9/uploads/images/caixa-misteriosa-edicao-limitada-62e956810efef-thumb.png HTTP/1.1
Host: images.yampi.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 06:16:02 GMT
content-type: image/png
content-length: 117743
x-amz-id-2: bMHRmmR1qWGvMbCqhgCCh7PMr7LSTlSfbPuS/2GNjTUyWGLId/BQBNRBU2phoEwfx3eetM1FKCA=
x-amz-request-id: AJSXTH3R0THQ9JE7
last-modified: Tue, 02 Aug 2022 16:53:23 GMT
x-amz-version-id: wxueA8hLCjwh4ss.lHtzFO4OeJGoc8G3
etag: "c5a167df4f433c249cb974e00f55de3f"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mcd0bayeDB1pVfqU8e%2BqeGGJ599Pl6dgaAAdF0do6hSPpRXW%2FGn7ZnmB9lus16OSgfhAhXIrLGtYgnEEoPDUUZdz8tMRg5kSAYZvSmakLUZRjncCnGK2ItBu5mjFojQ%2BOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745cd5707a5f0b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.dooki.com.br/fa/4.7.0/fa.woff2?v=4.7.0 | 104.18.1.53 | 200 OK | 77 kB |
URL HTTP/2fonts.dooki.com.br/fa/4.7.0/fa.woff2?v=4.7.0 IP104.18.1.53:0
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /fa/4.7.0/fa.woff2?v=4.7.0 HTTP/1.1
Host: fonts.dooki.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://seguro.caixamisteriosa.net
Connection: keep-alive
Referer: https://fonts.dooki.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 06:16:02 GMT
content-type: binary/octet-stream
content-length: 77160
x-amz-id-2: OvXUTFz1CY5a/p45ltWALUnSWTWoVaCH/Q3/5J0zWruz/tOqhQQzq7yqdVeX0C+a1copKAWz3pk=
x-amz-request-id: YTFMGW0WGXK5084Y
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 1800
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Sat, 10 Nov 2018 14:21:40 GMT
x-amz-version-id: null
etag: "af7ae505a9eed503f8b8e6982036873e"
cf-cache-status: MISS
expires: Tue, 13 Sep 2022 06:16:02 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 745cd5736f221c16-OSL
X-Firefox-Spdy: h2
|
|
| ana.yampi.io/v1/hits?id=checkout&uid=1-5lat30ua-l7odd4fu&ev=checkout-add-address-info&ed=%7B%22screen_resolution%22%3A%221280x1024%22%2C%22store_id%22%3A220992%2C%22store_profile%22%3A%22checkout%22%2C%22content_ids%22%3A%5B%2263824932%22%5D%2C%22content_type%22%3A%22sku%22%2C%22session_id%22%3A%22aa5415e0-2ccc-11ed-b9d6-02f91afe0016-63156ffa16fef%22%2C%22customer_id%22%3A107705093%7D&v=1&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&ts=1662358557883&load_time=3345&de=UTF-8&sr=1280x1024&vp=1280x939&cd=24&dt=Finalizar%20compra%20-%20Caixa%20Misteriosa&bn=Firefox%2096&md=false&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&tz=0&utm_source=&utm_medium=&utm_term=&utm_content=&utm_campaign=&utm_source_platform=&utm_creative_format=&utm_marketing_tactic= | 104.18.15.227 | 204 No Content | 0 B |
URL HTTP/2ana.yampi.io/v1/hits?id=checkout&uid=1-5lat30ua-l7odd4fu&ev=checkout-add-address-info&ed=%7B%22screen_resolution%22%3A%221280x1024%22%2C%22store_id%22%3A220992%2C%22store_profile%22%3A%22checkout%22%2C%22content_ids%22%3A%5B%2263824932%22%5D%2C%22content_type%22%3A%22sku%22%2C%22session_id%22%3A%22aa5415e0-2ccc-11ed-b9d6-02f91afe0016-63156ffa16fef%22%2C%22customer_id%22%3A107705093%7D&v=1&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&ts=1662358557883&load_time=3345&de=UTF-8&sr=1280x1024&vp=1280x939&cd=24&dt=Finalizar%20compra%20-%20Caixa%20Misteriosa&bn=Firefox%2096&md=false&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&tz=0&utm_source=&utm_medium=&utm_term=&utm_content=&utm_campaign=&utm_source_platform=&utm_creative_format=&utm_marketing_tactic= IP104.18.15.227:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/hits?id=checkout&uid=1-5lat30ua-l7odd4fu&ev=checkout-add-address-info&ed=%7B%22screen_resolution%22%3A%221280x1024%22%2C%22store_id%22%3A220992%2C%22store_profile%22%3A%22checkout%22%2C%22content_ids%22%3A%5B%2263824932%22%5D%2C%22content_type%22%3A%22sku%22%2C%22session_id%22%3A%22aa5415e0-2ccc-11ed-b9d6-02f91afe0016-63156ffa16fef%22%2C%22customer_id%22%3A107705093%7D&v=1&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&ts=1662358557883&load_time=3345&de=UTF-8&sr=1280x1024&vp=1280x939&cd=24&dt=Finalizar%20compra%20-%20Caixa%20Misteriosa&bn=Firefox%2096&md=false&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&tz=0&utm_source=&utm_medium=&utm_term=&utm_content=&utm_campaign=&utm_source_platform=&utm_creative_format=&utm_marketing_tactic= HTTP/1.1
Host: ana.yampi.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seguro.caixamisteriosa.net
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Mon, 05 Sep 2022 06:16:02 GMT
content-type: application/json
content-length: 0
x-amzn-requestid: 4d2437e8-84d1-4987-9fcc-3061e70d9a12
x-ratelimit-remaining: 58
x-amz-apigw-id: X-QVbHDfIAMFTkQ=
cache-control: no-cache, private
x-ratelimit-limit: 60
etag: "da39a3ee5e6b4b0d3255bfef95601890afd80709"
x-amzn-trace-id: Root=1-63159422-71f3650c62b9f971406e9299;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 06:16:02 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 745cd574dda1b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ana.yampi.io/v1/hits?id=checkout&uid=1-5lat30ua-l7odd4fu&ev=checkout-initiate&ed=%7B%22screen_resolution%22%3A%221280x1024%22%2C%22store_id%22%3A220992%2C%22store_profile%22%3A%22checkout%22%2C%22content_ids%22%3A%5B%2263824932%22%5D%2C%22content_type%22%3A%22sku%22%2C%22session_id%22%3A%22aa5415e0-2ccc-11ed-b9d6-02f91afe0016-63156ffa16fef%22%2C%22customer_id%22%3A107705093%7D&v=1&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&ts=1662358557884&load_time=3345&de=UTF-8&sr=1280x1024&vp=1280x939&cd=24&dt=Finalizar%20compra%20-%20Caixa%20Misteriosa&bn=Firefox%2096&md=false&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&tz=0&utm_source=&utm_medium=&utm_term=&utm_content=&utm_campaign=&utm_source_platform=&utm_creative_format=&utm_marketing_tactic= | 104.18.15.227 | 204 No Content | 0 B |
URL HTTP/2ana.yampi.io/v1/hits?id=checkout&uid=1-5lat30ua-l7odd4fu&ev=checkout-initiate&ed=%7B%22screen_resolution%22%3A%221280x1024%22%2C%22store_id%22%3A220992%2C%22store_profile%22%3A%22checkout%22%2C%22content_ids%22%3A%5B%2263824932%22%5D%2C%22content_type%22%3A%22sku%22%2C%22session_id%22%3A%22aa5415e0-2ccc-11ed-b9d6-02f91afe0016-63156ffa16fef%22%2C%22customer_id%22%3A107705093%7D&v=1&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&ts=1662358557884&load_time=3345&de=UTF-8&sr=1280x1024&vp=1280x939&cd=24&dt=Finalizar%20compra%20-%20Caixa%20Misteriosa&bn=Firefox%2096&md=false&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&tz=0&utm_source=&utm_medium=&utm_term=&utm_content=&utm_campaign=&utm_source_platform=&utm_creative_format=&utm_marketing_tactic= IP104.18.15.227:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/hits?id=checkout&uid=1-5lat30ua-l7odd4fu&ev=checkout-initiate&ed=%7B%22screen_resolution%22%3A%221280x1024%22%2C%22store_id%22%3A220992%2C%22store_profile%22%3A%22checkout%22%2C%22content_ids%22%3A%5B%2263824932%22%5D%2C%22content_type%22%3A%22sku%22%2C%22session_id%22%3A%22aa5415e0-2ccc-11ed-b9d6-02f91afe0016-63156ffa16fef%22%2C%22customer_id%22%3A107705093%7D&v=1&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&ts=1662358557884&load_time=3345&de=UTF-8&sr=1280x1024&vp=1280x939&cd=24&dt=Finalizar%20compra%20-%20Caixa%20Misteriosa&bn=Firefox%2096&md=false&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&tz=0&utm_source=&utm_medium=&utm_term=&utm_content=&utm_campaign=&utm_source_platform=&utm_creative_format=&utm_marketing_tactic= HTTP/1.1
Host: ana.yampi.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seguro.caixamisteriosa.net
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
date: Mon, 05 Sep 2022 06:16:02 GMT
content-type: application/json
content-length: 0
x-amzn-requestid: 78fe108f-f2e6-446f-aaae-f82b061cf97b
x-ratelimit-remaining: 58
x-amz-apigw-id: X-QVbHulIAMFRPw=
cache-control: no-cache, private
x-ratelimit-limit: 60
etag: "da39a3ee5e6b4b0d3255bfef95601890afd80709"
x-amzn-trace-id: Root=1-63159422-41e7792442bc71da09c28614;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 06:16:02 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 745cd574dda4b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js | 142.250.74.163 | 200 OK | 158 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js IP142.250.74.163:0
File typeHTML document, ASCII text, with very long lines (579) Size158 kB (158056 bytes) Hashd63a69f898e1d00cfc7c871744ded8c4 e166540eccb571c95c8c1135c2168cf5df306991 ed7892ca1498d6dfc0ff8b354ab8c409eed81b1fa77b427467815d0c7f45021c
GET /recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seguro.caixamisteriosa.net
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158056
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 21:31:14 GMT
expires: Sat, 02 Sep 2023 21:31:14 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Sep 2022 18:40:58 GMT
content-type: text/javascript
age: 204288
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash194d72d26ddeaa8a8a266839eb707300 86427a0db92a3b4bd2690ad361109559c7212992 ab77f42ccfa0c649217777139f0d14a6742039596ee37a045c5fe96e7ca32338
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 06:16:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| connect.facebook.net/en_US/fbevents.js |  31.13.72.12 | 200 OK | 27 kB |
URL HTTP/2connect.facebook.net/en_US/fbevents.js IP31.13.72.12:0
File typeASCII text, with very long lines (64348) Hash53e4933126779cbf269a5819d467ad4b 1c3c6b27a0660a44717be304d90834cf2f9cf3ce ed5ad968f7d95b37c817e86b54062702bef60b1ffd3977248aad23072af06b87
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: FlhR7kdaBYurzIH+LposWO2Eqnw1evB/gTp4bjlXrjnU8r2T1OUwgytqn0c+HFKwirSd8jzICpz8d/qgCxsv5g==
priority: u=3,i
content-length: 26752
x-fb-trip-id: 1904183273
date: Mon, 05 Sep 2022 06:16:02 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash56f5d7f608e25d64207135f045f988cb 901eb59372ae330ae85e1384da93479b21ae1082 1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Mon, 05 Sep 2022 04:41:12 GMT
expires: Mon, 05 Sep 2022 06:41:12 GMT
cache-control: public, max-age=7200
age: 5690
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| seguro.caixamisteriosa.net/e/t | 170.82.173.30 | 200 OK | 471 B |
URL HTTP/2seguro.caixamisteriosa.net/e/t IP170.82.173.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
Hash3d734db6d950acb609cd0ccfe98fd9ba 0201364c8b9d6e1963b6bf4abb63fef9b3e0886d bbced6e776c18b28b6edbbb94659a19bb383fb65caf293249d58988c61769693
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
POST /e/t HTTP/1.1
Host: seguro.caixamisteriosa.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg8EVFRXARAJVldbDwQGVVU=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI5MzUyNDkiLCJhcCI6IjExMzQxNzA4MjMiLCJpZCI6ImY2Y2MxNTc5NDZkN2YzMjMiLCJ0ciI6IjU5MGM5YzkzZjA3MDMxMGQ3MDA5OTlhNGNlMGE0MThhIiwidGkiOjE2NjIzNTg1NTc3MDR9fQ==
traceparent: 00-590c9c93f070310d700999a4ce0a418a-f6cc157946d7f323-01
tracestate: 2935249@nr=0-1-2935249-1134170823-f6cc157946d7f323----1662358557704
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 368
Origin: https://seguro.caixamisteriosa.net
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/checkout/address
Cookie: XSRF-TOKEN=eyJpdiI6IkVmYm44TENEOTZ6YVwvSjFiZFRpOEpRPT0iLCJ2YWx1ZSI6Ijd4Q3VPbEE1ZjcrSDRXME9tYlRMd3lOMFBnUVwvcTArQ0h4THhKdHk0Qm1NNjR4UytRcXZXeHVHYVlBUlwvZGZCNWJTZ2FpQnZzVlFlN21wdFhUbG43SWc9PSIsIm1hYyI6ImUxMzg0Y2QxZTBjZDJjZjM0NDU2M2U3MGRlZmYxMTY1NTE5NzU2YTI0MWFiMWY2M2UwOWE1MTUyYzBhZTNhOTIifQ%3D%3D; bubbstore_checkout=eyJpdiI6Ing2UkllZHRGYTBUSG5qVm42Z1p3RFE9PSIsInZhbHVlIjoiRFFwdDJlVSs3aVhBNjFKRVpwT1p5U3lhdXA5YUIxTWpvUjhKais2dXFsWWhpV3ppc1VWMmVuTm5LdTlYb2N0UXNhRlBsYzRZTEJMRjBaNFRFSWp0Q0E9PSIsIm1hYyI6IjgzYzVmMGIzZDMzMzk4NzYxNjc3YjljYzNhMjJmOTc0MTY4NTUyNWIyYTU2ZDJkMjk4MGUwMTU4MDFiNjlkYTgifQ%3D%3D; caixa-misteriosa9_cart=eyJpdiI6ImVBRVZTVnhCUHM4a3ZpeFV4OXhmVnc9PSIsInZhbHVlIjoicGpXb1J0amJIQ0xqNHV6SlVPb2djU3RuNndDZjR6WDdiR0YrdnE2eFNnTEpVdDRuZHh3UWxPTEE4N2diYVJIb09vdGkxSVFRSWJqbjlcL29ySWRjQ2lnPT0iLCJtYWMiOiI1MTU5ZmM1MTE0YjIwMTMzMTQ1YzUxYzQwZDVkMzNhNDUxNDRmOGM3NDU2MDc1NDJkNDFiMWQ0MDg4MDk3YmM1In0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 06:16:02 GMT
content-type: text/html; charset=UTF-8
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6IkNkQ3hTa0t1VWt0SDN6bXNPVmlyU0E9PSIsInZhbHVlIjoiS3BaXC9Kak9DQlFTXC9OWEg0aFY2NzkwU3hYelBkdWVkQmdcL002V2V0K0NCYVdmUGlWVnQrUjdEa0I5bFJpdmZIUzZRUlwvR1FPMVwva0kzWEpFVCtHQlVTQT09IiwibWFjIjoiNGE1ZTRkOTNiMmI1YTNmNTNiZTQ1ZTMxYzQ5NjRkZGFkNmRmYjU1YzgzY2RjZjQ1NWNmODA4NDA5NzNjNDYwYiJ9; expires=Mon, 05-Sep-2022 09:16:02 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6Ims4VXd2bVczakZKUUhhMGtlUG5LV2c9PSIsInZhbHVlIjoiS05PdklmWFk5XC9EbW5hUEJuSFBLb1FNeHpqUTVSOHpDa1dsckU4VmJLZDJcL3p6Uk1WYUZUN0pBa3hvTnlxcmZKWDlQRmhOZitxaTJFQmtDWk4wRjEwdz09IiwibWFjIjoiZjliZDA3YzU4YzViYjhmZGRmZmI3ZmU4MWZkOTkzZmEzNWY0ZjgwNTk4YmQwYTMyZWYwZGYwMDRhY2JlZmI1ZCJ9; expires=Mon, 05-Sep-2022 09:16:02 GMT; Max-Age=10800; path=/; httponly
x-newrelic-app-data: PxQFWFVWCgcJR1hQAQgPU1UCBxFORDQHUjZKA1ZLVVFHDFYPbU5yARBfWA86THlDQDg9KkNFRzo4clldFhQMDlwHShFkZGRTVABKIl4PRxALWlsEFCNMQVEHCgtZVhVKVB8GA1JWU04ATAtSCwEFHh5UFUMIVgRVBlcDVlFQCVdUAFVVFR1RBwhCU24=
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash194d72d26ddeaa8a8a266839eb707300 86427a0db92a3b4bd2690ad361109559c7212992 ab77f42ccfa0c649217777139f0d14a6742039596ee37a045c5fe96e7ca32338
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 06:16:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| s3.sa-east-1.amazonaws.com/king-assets.yampi.me/dooki/62e95d312bc5a/62e95d312bc60.png | 52.95.164.2 | 200 OK | 191 kB |
URL HTTP/1.1s3.sa-east-1.amazonaws.com/king-assets.yampi.me/dooki/62e95d312bc5a/62e95d312bc60.png IP52.95.164.2:0
File typePNG image data, 1628 x 1083, 8-bit/color RGBA, non-interlaced\012- data Size191 kB (190952 bytes) Hash42653495a27a747f3deff05ead6ab0f1 7f774f610fb12f312daeb5d49c5cc88af7dd1dc1 3ce6c07440b880752a44c423832b8a6691d7b22898871e08b38f0abe62b92fc4
GET /king-assets.yampi.me/dooki/62e95d312bc5a/62e95d312bc60.png HTTP/1.1
Host: s3.sa-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: bgB9RBRnkoIkhn5sJJmYEtb9kDrnkBJarkS/MqTz7rLC7cDjlOcPCu4evxqEv0e0HUkR1oR8v0A=
x-amz-request-id: YTFSAT9H7BAV43SG
Date: Mon, 05 Sep 2022 06:16:03 GMT
Last-Modified: Tue, 02 Aug 2022 17:21:54 GMT
ETag: "42653495a27a747f3deff05ead6ab0f1"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 190952
|
|
| www.google-analytics.com/j/collect?v=1&_v=j96&a=1563799819&t=pageview&_s=1&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&ul=en-us&de=UTF-8&dt=Finalizar%20compra%20-%20Caixa%20Misteriosa&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEDAAAATAAAAAC~&jid=300056400&gjid=980338251&cid=1780625896.1662358559&tid=UA-45745009-5&_gid=218803217.1662358559&_r=1&_slc=1&z=2009494613 | 142.250.74.174 | 200 OK | 4 B |
URL HTTP/2www.google-analytics.com/j/collect?v=1&_v=j96&a=1563799819&t=pageview&_s=1&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&ul=en-us&de=UTF-8&dt=Finalizar%20compra%20-%20Caixa%20Misteriosa&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEDAAAATAAAAAC~&jid=300056400&gjid=980338251&cid=1780625896.1662358559&tid=UA-45745009-5&_gid=218803217.1662358559&_r=1&_slc=1&z=2009494613 IP142.250.74.174:0
File typeASCII text, with no line terminators Hash9e92e190700c1af4539b40c2171320a9 209bcdb79e6067b51091ce8586d4b977f25b67d8 aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j96&a=1563799819&t=pageview&_s=1&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&ul=en-us&de=UTF-8&dt=Finalizar%20compra%20-%20Caixa%20Misteriosa&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEDAAAATAAAAAC~&jid=300056400&gjid=980338251&cid=1780625896.1662358559&tid=UA-45745009-5&_gid=218803217.1662358559&_r=1&_slc=1&z=2009494613 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://seguro.caixamisteriosa.net
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://seguro.caixamisteriosa.net
date: Mon, 05 Sep 2022 06:16:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash1931a32d83e4feb5268887bcb07fcc1e 6fb75c21ced29544dd6d7c3b0ef79adf65718a39 d794fae0b82097a2e97af2f21b6c243832081f88036a2a56bbeeabb08790d88d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 06:16:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-45745009-5&cid=1780625896.1662358559&jid=300056400&gjid=980338251&_gid=218803217.1662358559&_u=IEDAAAASAAAAAC~&z=1373565 | 142.251.1.154 | 200 OK | 1 B |
URL HTTP/2stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-45745009-5&cid=1780625896.1662358559&jid=300056400&gjid=980338251&_gid=218803217.1662358559&_u=IEDAAAASAAAAAC~&z=1373565 IP142.251.1.154:0
File typevery short file (no magic) Hashc4ca4238a0b923820dcc509a6f75849b 356a192b7913b04c54574d18c28d46e6395428ab 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-45745009-5&cid=1780625896.1662358559&jid=300056400&gjid=980338251&_gid=218803217.1662358559&_u=IEDAAAASAAAAAC~&z=1373565 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://seguro.caixamisteriosa.net
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://seguro.caixamisteriosa.net
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 05 Sep 2022 06:16:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash1931a32d83e4feb5268887bcb07fcc1e 6fb75c21ced29544dd6d7c3b0ef79adf65718a39 d794fae0b82097a2e97af2f21b6c243832081f88036a2a56bbeeabb08790d88d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 06:16:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.facebook.com/tr/?id=932933074347132&ev=PageView&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559871&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=PageView_o33wabdk5&rqm=GET | 31.13.72.36 | 200 OK | 86 kB |
URL HTTP/2www.facebook.com/tr/?id=932933074347132&ev=PageView&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559871&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=PageView_o33wabdk5&rqm=GET IP31.13.72.36:0
File typegzip compressed data, from Unix\012- data Hash6406faadc889530daed659b4c100db9f 8f984b58584dcf55f0b061a0117e09c1cd0fa142 5517c99f6b53472926fbd9edb90c55cc89cc7206ba8be43bbcaee3b69b5d42cc
GET /tr/?id=932933074347132&ev=PageView&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559871&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=PageView_o33wabdk5&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Mon, 05 Sep 2022 06:16:04 GMT
expires: Mon, 05 Sep 2022 06:16:04 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=451025270299675&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559886&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=InitiateCheckout_1qosj65zv&tm=1&rqm=GET | 31.13.72.36 | 200 OK | 44 B |
URL HTTP/2www.facebook.com/tr/?id=451025270299675&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559886&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=InitiateCheckout_1qosj65zv&tm=1&rqm=GET IP31.13.72.36:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb798f4ce7359fd815df4bdf76503b295 f8cc6addf1707ad236ad9970b0a48f9733d07da5 10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=451025270299675&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559886&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=InitiateCheckout_1qosj65zv&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
date: Mon, 05 Sep 2022 06:16:04 GMT
expires: Mon, 05 Sep 2022 06:16:04 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=670591011315008&ev=PageView&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559874&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=PageView_o33wabdk5&rqm=GET | 31.13.72.36 | 200 OK | 44 B |
URL HTTP/2www.facebook.com/tr/?id=670591011315008&ev=PageView&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559874&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=PageView_o33wabdk5&rqm=GET IP31.13.72.36:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb798f4ce7359fd815df4bdf76503b295 f8cc6addf1707ad236ad9970b0a48f9733d07da5 10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=670591011315008&ev=PageView&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559874&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=PageView_o33wabdk5&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
date: Mon, 05 Sep 2022 06:16:04 GMT
expires: Mon, 05 Sep 2022 06:16:04 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=442848451125334&ev=PageView&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559876&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=PageView_o33wabdk5&rqm=GET | 31.13.72.36 | 200 OK | 44 B |
URL HTTP/2www.facebook.com/tr/?id=442848451125334&ev=PageView&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559876&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=PageView_o33wabdk5&rqm=GET IP31.13.72.36:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb798f4ce7359fd815df4bdf76503b295 f8cc6addf1707ad236ad9970b0a48f9733d07da5 10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=442848451125334&ev=PageView&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559876&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=PageView_o33wabdk5&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
date: Mon, 05 Sep 2022 06:16:04 GMT
expires: Mon, 05 Sep 2022 06:16:04 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=932933074347132&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559880&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=InitiateCheckout_bcffi3ld2&tm=1&rqm=GET | 31.13.72.36 | 200 OK | 44 B |
URL HTTP/2www.facebook.com/tr/?id=932933074347132&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559880&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=InitiateCheckout_bcffi3ld2&tm=1&rqm=GET IP31.13.72.36:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb798f4ce7359fd815df4bdf76503b295 f8cc6addf1707ad236ad9970b0a48f9733d07da5 10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=932933074347132&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559880&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=InitiateCheckout_bcffi3ld2&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
date: Mon, 05 Sep 2022 06:16:04 GMT
expires: Mon, 05 Sep 2022 06:16:04 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=670591011315008&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559882&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=InitiateCheckout_liyujjpsg&tm=1&rqm=GET | 31.13.72.36 | 200 OK | 44 B |
URL HTTP/2www.facebook.com/tr/?id=670591011315008&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559882&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=InitiateCheckout_liyujjpsg&tm=1&rqm=GET IP31.13.72.36:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb798f4ce7359fd815df4bdf76503b295 f8cc6addf1707ad236ad9970b0a48f9733d07da5 10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=670591011315008&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559882&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=InitiateCheckout_liyujjpsg&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
date: Mon, 05 Sep 2022 06:16:04 GMT
expires: Mon, 05 Sep 2022 06:16:04 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=442848451125334&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559883&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=InitiateCheckout_ttzhshnca&tm=1&rqm=GET | 31.13.72.36 | 200 OK | 44 B |
URL HTTP/2www.facebook.com/tr/?id=442848451125334&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559883&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=InitiateCheckout_ttzhshnca&tm=1&rqm=GET IP31.13.72.36:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb798f4ce7359fd815df4bdf76503b295 f8cc6addf1707ad236ad9970b0a48f9733d07da5 10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=442848451125334&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559883&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=InitiateCheckout_ttzhshnca&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
date: Mon, 05 Sep 2022 06:16:04 GMT
expires: Mon, 05 Sep 2022 06:16:04 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=662231824775398&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559885&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=InitiateCheckout_hdoy7rg2u&tm=1&rqm=GET | 31.13.72.36 | 200 OK | 44 B |
URL HTTP/2www.facebook.com/tr/?id=662231824775398&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559885&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=InitiateCheckout_hdoy7rg2u&tm=1&rqm=GET IP31.13.72.36:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb798f4ce7359fd815df4bdf76503b295 f8cc6addf1707ad236ad9970b0a48f9733d07da5 10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=662231824775398&ev=InitiateCheckout&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559885&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=InitiateCheckout_hdoy7rg2u&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
date: Mon, 05 Sep 2022 06:16:04 GMT
expires: Mon, 05 Sep 2022 06:16:04 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=662231824775398&ev=PageView&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559878&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=PageView_o33wabdk5&rqm=GET | 31.13.72.36 | 200 OK | 258 kB |
URL HTTP/2www.facebook.com/tr/?id=662231824775398&ev=PageView&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559878&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=PageView_o33wabdk5&rqm=GET IP31.13.72.36:0
File typegzip compressed data, from Unix\012- data Size258 kB (257530 bytes) Hasha92e734e321ef5b6d210dd6143dcc26d 2d943cc7425437c7011f67bba558105dbd4b379a 9cc8870556eff7f606af141d179f465d6a4479dff35bdbdbdc3d601e12f99605
GET /tr/?id=662231824775398&ev=PageView&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559878&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=PageView_o33wabdk5&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Mon, 05 Sep 2022 06:16:04 GMT
expires: Mon, 05 Sep 2022 06:16:04 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=451025270299675&ev=PageView&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559880&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=PageView_o33wabdk5&rqm=GET | 31.13.72.36 | 200 OK | 44 B |
URL HTTP/2www.facebook.com/tr/?id=451025270299675&ev=PageView&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559880&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=PageView_o33wabdk5&rqm=GET IP31.13.72.36:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb798f4ce7359fd815df4bdf76503b295 f8cc6addf1707ad236ad9970b0a48f9733d07da5 10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=451025270299675&ev=PageView&dl=https%3A%2F%2Fseguro.caixamisteriosa.net%2Fcheckout%2Faddress&rl=&if=false&ts=1662358559880&cd[content_ids]=%5B%2263824932%22%5D&cd[content_type]=product_group&cd[value]=89.9&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662358559871.306071767&it=1662358558643&coo=false&eid=PageView_o33wabdk5&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Mon, 05 Sep 2022 06:16:04 GMT
expires: Mon, 05 Sep 2022 06:16:04 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/nr-spa-1216.min.js | 151.101.86.137 | 200 OK | 18 kB |
URL HTTP/2js-agent.newrelic.com/nr-spa-1216.min.js IP151.101.86.137:0
File typeASCII text, with very long lines (32010) Hash6561a2403142205f966207d61576f1a6 1310e72f494e12ab63a4280fc1600a2c89dc9bb8 0e496fcab0b9120938373e271fa6631b7da17adf33f8a490637467c170a3e37a
GET /nr-spa-1216.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TAwVDFAylU9PwNPPW/eXC4UyIMC8EQ1d6JNW9Q+uXGnPmL1fuimq9M3lAe733gCMeKNDiCQX1YM=
x-amz-request-id: SYTECJR5CMD8NJ8E
last-modified: Thu, 14 Apr 2022 16:45:57 GMT
etag: "63e2df852d15ab21d7ff8fc4363222e8"
x-amz-version-id: UU.F5jvoumAjQChriwTQHbisCFw_OInU
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Mon, 05 Sep 2022 06:16:04 GMT
via: 1.1 varnish
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1936
x-timer: S1662358564.183589,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 18216
X-Firefox-Spdy: h2
|
|
| bam.nr-data.net/1/NRJS-1173a7bb9742e987ab2?a=926985131&v=1216.487a282&to=NlQEYUJSDBFUBkdZWQ8eJ1ZEWg0MGgZbVVUKXhNBHlIGBkcAQEM%3D&rst=5653&ck=1&ref=https://seguro.caixamisteriosa.net/checkout/address&ap=126&be=2682&fe=5563&dc=3294&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1662358554393,%22n%22:0,%22f%22:1878,%22dn%22:1878,%22dne%22:1878,%22c%22:1878,%22s%22:1878,%22ce%22:1878,%22rq%22:1880,%22rp%22:2661,%22rpe%22:2661,%22dl%22:2668,%22di%22:3233,%22ds%22:3293,%22de%22:3345,%22dc%22:5561,%22l%22:5561,%22le%22:5563%7D,%22navigation%22:%7B%7D%7D&fcp=3224&at=GhMHFwpIHx8%3D&jsonp=NREUM.setToken | 162.247.241.14 | 200 OK | 77 B |
URL HTTP/1.1bam.nr-data.net/1/NRJS-1173a7bb9742e987ab2?a=926985131&v=1216.487a282&to=NlQEYUJSDBFUBkdZWQ8eJ1ZEWg0MGgZbVVUKXhNBHlIGBkcAQEM%3D&rst=5653&ck=1&ref=https://seguro.caixamisteriosa.net/checkout/address&ap=126&be=2682&fe=5563&dc=3294&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1662358554393,%22n%22:0,%22f%22:1878,%22dn%22:1878,%22dne%22:1878,%22c%22:1878,%22s%22:1878,%22ce%22:1878,%22rq%22:1880,%22rp%22:2661,%22rpe%22:2661,%22dl%22:2668,%22di%22:3233,%22ds%22:3293,%22de%22:3345,%22dc%22:5561,%22l%22:5561,%22le%22:5563%7D,%22navigation%22:%7B%7D%7D&fcp=3224&at=GhMHFwpIHx8%3D&jsonp=NREUM.setToken IP162.247.241.14:0
File typeASCII text, with no line terminators Hashf1442f5831dbbe0210da2d7a4180d6b8 2ade23c6c7a001c66f0c0a9a101ec152747b434e c6acf9fb2ecc1b144c51bd0337bbf1c26db3df2f649ac2da5c56db20d93eb3ef
GET /1/NRJS-1173a7bb9742e987ab2?a=926985131&v=1216.487a282&to=NlQEYUJSDBFUBkdZWQ8eJ1ZEWg0MGgZbVVUKXhNBHlIGBkcAQEM%3D&rst=5653&ck=1&ref=https://seguro.caixamisteriosa.net/checkout/address&ap=126&be=2682&fe=5563&dc=3294&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1662358554393,%22n%22:0,%22f%22:1878,%22dn%22:1878,%22dne%22:1878,%22c%22:1878,%22s%22:1878,%22ce%22:1878,%22rq%22:1880,%22rp%22:2661,%22rpe%22:2661,%22dl%22:2668,%22di%22:3233,%22ds%22:3293,%22de%22:3345,%22dc%22:5561,%22l%22:5561,%22le%22:5563%7D,%22navigation%22:%7B%7D%7D&fcp=3224&at=GhMHFwpIHx8%3D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 06:16:04 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 745cd5827a391c06-OSL
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=82e4b963e3f6d0f8; Path=/; Domain=.nr-data.net; Secure; SameSite=None
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
|
|
| bam.nr-data.net/events/1/NRJS-1173a7bb9742e987ab2?a=926985131&v=1216.487a282&to=NlQEYUJSDBFUBkdZWQ8eJ1ZEWg0MGgZbVVUKXhNBHlIGBkcAQEM%3D&rst=5975&ck=1&ref=https://seguro.caixamisteriosa.net/checkout/address | 162.247.241.14 | 200 OK | 24 B |
URL HTTP/1.1bam.nr-data.net/events/1/NRJS-1173a7bb9742e987ab2?a=926985131&v=1216.487a282&to=NlQEYUJSDBFUBkdZWQ8eJ1ZEWg0MGgZbVVUKXhNBHlIGBkcAQEM%3D&rst=5975&ck=1&ref=https://seguro.caixamisteriosa.net/checkout/address IP162.247.241.14:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashbc32ed98d624acb4008f986349a20d26 2d3df8c11d2168ce2c27e0937421d11d85016361 0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /events/1/NRJS-1173a7bb9742e987ab2?a=926985131&v=1216.487a282&to=NlQEYUJSDBFUBkdZWQ8eJ1ZEWg0MGgZbVVUKXhNBHlIGBkcAQEM%3D&rst=5975&ck=1&ref=https://seguro.caixamisteriosa.net/checkout/address HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 700
Origin: https://seguro.caixamisteriosa.net
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 06:16:04 GMT
Content-Type: image/gif
Content-Length: 24
Connection: keep-alive
CF-Ray: 745cd5845bb11c06-OSL
Access-Control-Allow-Origin: https://seguro.caixamisteriosa.net
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Vary: Accept-Encoding
Server: cloudflare
|
|
| fonts.googleapis.com/css2?family=Rubik:wght@400;500;700&display=swap | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css2?family=Rubik:wght@400;500;700&display=swap IP142.250.74.10:0
GET /css2?family=Rubik:wght@400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Sep 2022 06:16:01 GMT
date: Mon, 05 Sep 2022 06:16:01 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| cdn.yampi.me/jquery/jquery.js | 104.26.2.88 | 200 OK | 0 B |
URL HTTP/2cdn.yampi.me/jquery/jquery.js IP104.26.2.88:0
GET /jquery/jquery.js HTTP/1.1
Host: cdn.yampi.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 06:16:01 GMT
content-type: application/javascript
x-amz-id-2: wJhbb+wve3IBCLN+i98oA8RKqKMqW1e3wuPAOF1J7Nwcjv20jg3exY+yLyWVWh3jCubgrVSOXOY=
x-amz-request-id: BV3779XFHJY1PMHT
last-modified: Tue, 24 Sep 2019 11:23:34 GMT
x-amz-version-id: 6XhfNvj9UGB1eWzPJf8PFJnclFrAQqDF
etag: W/"9f7c65c84c8e8c3e317945e8fd89899b"
cache-control: max-age=31536000
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OjA%2FHjbd92M69%2Fi0lL8tIGpvSEwRS9UrAtVEJAYa0JJB8Mk3En71GjHXaF10naKc77i%2B52DaJ%2BbQngrS7lNKBshmk0QOKD13hkOsiZZHFA%2BW9BXp9bNr%2BWcyBtrN1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745cd5707a6e0b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.yampi.io/ana/ana.min.js?t=1662422400000 | 104.18.15.227 | 200 OK | 0 B |
URL HTTP/2cdn.yampi.io/ana/ana.min.js?t=1662422400000 IP104.18.15.227:0
GET /ana/ana.min.js?t=1662422400000 HTTP/1.1
Host: cdn.yampi.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 06:16:02 GMT
content-type: application/javascript
x-amz-id-2: Ri1AxtDoWxPVOjH3Pp6GTtSewcJdQIyu+WfS2oei0/iWT5NZ4/D4JWDr5XKTAK4VLVtEHD4FZYk=
x-amz-request-id: 6CHQ8NT7CRM7N122
last-modified: Sun, 26 Jun 2022 23:28:17 GMT
x-amz-version-id: QVByH4DoJS5uOcK0PZ6NhcCV1oJEdR5U
etag: W/"e7cabc20ce5d56c20d8c4577a36e2525"
cf-cache-status: HIT
expires: Tue, 05 Sep 2023 06:16:02 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 745cd5733bf9b50f-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| seguro.caixamisteriosa.net/cart/recomm | 170.82.173.30 | 200 OK | 0 B |
URL HTTP/2seguro.caixamisteriosa.net/cart/recomm IP170.82.173.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /cart/recomm HTTP/1.1
Host: seguro.caixamisteriosa.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg8EVFRXARAJVldbDwQGVVU=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI5MzUyNDkiLCJhcCI6IjExMzQxNzA4MjMiLCJpZCI6ImYzZWY2NzVmMmQ5MDBjMzEiLCJ0ciI6IjlhNDkwNjRiNzc2OWVhYjY0Yjg3YzAyMzdkZjViZDA2IiwidGkiOjE2NjIzNTg1NTc2OTV9fQ==
traceparent: 00-9a49064b7769eab64b87c0237df5bd06-f3ef675f2d900c31-01
tracestate: 2935249@nr=0-1-2935249-1134170823-f3ef675f2d900c31----1662358557695
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/checkout/address
Cookie: XSRF-TOKEN=eyJpdiI6IkVmYm44TENEOTZ6YVwvSjFiZFRpOEpRPT0iLCJ2YWx1ZSI6Ijd4Q3VPbEE1ZjcrSDRXME9tYlRMd3lOMFBnUVwvcTArQ0h4THhKdHk0Qm1NNjR4UytRcXZXeHVHYVlBUlwvZGZCNWJTZ2FpQnZzVlFlN21wdFhUbG43SWc9PSIsIm1hYyI6ImUxMzg0Y2QxZTBjZDJjZjM0NDU2M2U3MGRlZmYxMTY1NTE5NzU2YTI0MWFiMWY2M2UwOWE1MTUyYzBhZTNhOTIifQ%3D%3D; bubbstore_checkout=eyJpdiI6Ing2UkllZHRGYTBUSG5qVm42Z1p3RFE9PSIsInZhbHVlIjoiRFFwdDJlVSs3aVhBNjFKRVpwT1p5U3lhdXA5YUIxTWpvUjhKais2dXFsWWhpV3ppc1VWMmVuTm5LdTlYb2N0UXNhRlBsYzRZTEJMRjBaNFRFSWp0Q0E9PSIsIm1hYyI6IjgzYzVmMGIzZDMzMzk4NzYxNjc3YjljYzNhMjJmOTc0MTY4NTUyNWIyYTU2ZDJkMjk4MGUwMTU4MDFiNjlkYTgifQ%3D%3D; caixa-misteriosa9_cart=eyJpdiI6ImVBRVZTVnhCUHM4a3ZpeFV4OXhmVnc9PSIsInZhbHVlIjoicGpXb1J0amJIQ0xqNHV6SlVPb2djU3RuNndDZjR6WDdiR0YrdnE2eFNnTEpVdDRuZHh3UWxPTEE4N2diYVJIb09vdGkxSVFRSWJqbjlcL29ySWRjQ2lnPT0iLCJtYWMiOiI1MTU5ZmM1MTE0YjIwMTMzMTQ1YzUxYzQwZDVkMzNhNDUxNDRmOGM3NDU2MDc1NDJkNDFiMWQ0MDg4MDk3YmM1In0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 06:16:02 GMT
content-type: application/json
x-protected-by: Sqreen
access-control-allow-origin: *
set-cookie: XSRF-TOKEN=eyJpdiI6IlNsS2xFZVkyclAwRkJMbVYrUlV2R2c9PSIsInZhbHVlIjoiZXZ0SG03REpFOU90ckJyOVlLYmx2dVF4cEQzNmFLS1UyMWswazROdkRiT1RSck1LUEdzVENOTEt3eEFJOHRrZDcwR3p0YytXSWdpUXJEdUx5QUlKVGc9PSIsIm1hYyI6IjI0MWE4NDBiOGY4YWUyYWM5M2ViMGQ0NWZmYWYwODE3YTk0YjUyZTRiYzY0MTBmMjA1MDQyM2JlNTMwODkzM2QifQ%3D%3D; expires=Mon, 05-Sep-2022 09:16:02 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6IjVJOFpNWVg0Z2RlY2REUmthcDN5Q2c9PSIsInZhbHVlIjoiNGRCVVlHQUZcL2IrWlNCeDY2Rm5kM2J1SzMwSnZmZjhXZTBZUFhaUitqWFwvVFhmV0dORmNLY3NoajNad3o2MHlhbXhQRU56YU1UdTJcL2RBeGphRWRHSUE9PSIsIm1hYyI6IjcyNWVkOWExOGQyN2UzYWE5ZDA0ODc5NWVhMGQyNjY2MmFmZmIzNmQ0ZDg0NWJkMzQyMjdmMWNjZDdkOGVkMTMifQ%3D%3D; expires=Mon, 05-Sep-2022 09:16:02 GMT; Max-Age=10800; path=/; httponly
x-newrelic-app-data: PxQFWFVWCgcJR1hQAQgPU1UCBxFORDQHUjZKA1ZLVVFHDFYPbU5yARBfWA86TFtSQhBPEFJSWAsJExoDTFZTUgBSFFIWCAcDAVwVTABNEVRSVwFWXlpcV1RRVQEHAgBESFdXXxEDPg==
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| seguro.caixamisteriosa.net/e/t | 170.82.173.30 | 200 OK | 0 B |
URL HTTP/2seguro.caixamisteriosa.net/e/t IP170.82.173.30:0 ASN#266444 3L CLOUD INTERNET SERVICES LTDA - EPP
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
POST /e/t HTTP/1.1
Host: seguro.caixamisteriosa.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg8EVFRXARAJVldbDwQGVVU=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI5MzUyNDkiLCJhcCI6IjExMzQxNzA4MjMiLCJpZCI6ImE4YWUzMzZmNDVlNWMzMWQiLCJ0ciI6IjgxYjk1Y2MzZWUyMjVhNGMxZjViMmQ0M2NiZjQ2YjQyIiwidGkiOjE2NjIzNTg1NTc3MDJ9fQ==
traceparent: 00-81b95cc3ee225a4c1f5b2d43cbf46b42-a8ae336f45e5c31d-01
tracestate: 2935249@nr=0-1-2935249-1134170823-a8ae336f45e5c31d----1662358557702
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 376
Origin: https://seguro.caixamisteriosa.net
Connection: keep-alive
Referer: https://seguro.caixamisteriosa.net/checkout/address
Cookie: XSRF-TOKEN=eyJpdiI6IkVmYm44TENEOTZ6YVwvSjFiZFRpOEpRPT0iLCJ2YWx1ZSI6Ijd4Q3VPbEE1ZjcrSDRXME9tYlRMd3lOMFBnUVwvcTArQ0h4THhKdHk0Qm1NNjR4UytRcXZXeHVHYVlBUlwvZGZCNWJTZ2FpQnZzVlFlN21wdFhUbG43SWc9PSIsIm1hYyI6ImUxMzg0Y2QxZTBjZDJjZjM0NDU2M2U3MGRlZmYxMTY1NTE5NzU2YTI0MWFiMWY2M2UwOWE1MTUyYzBhZTNhOTIifQ%3D%3D; bubbstore_checkout=eyJpdiI6Ing2UkllZHRGYTBUSG5qVm42Z1p3RFE9PSIsInZhbHVlIjoiRFFwdDJlVSs3aVhBNjFKRVpwT1p5U3lhdXA5YUIxTWpvUjhKais2dXFsWWhpV3ppc1VWMmVuTm5LdTlYb2N0UXNhRlBsYzRZTEJMRjBaNFRFSWp0Q0E9PSIsIm1hYyI6IjgzYzVmMGIzZDMzMzk4NzYxNjc3YjljYzNhMjJmOTc0MTY4NTUyNWIyYTU2ZDJkMjk4MGUwMTU4MDFiNjlkYTgifQ%3D%3D; caixa-misteriosa9_cart=eyJpdiI6ImVBRVZTVnhCUHM4a3ZpeFV4OXhmVnc9PSIsInZhbHVlIjoicGpXb1J0amJIQ0xqNHV6SlVPb2djU3RuNndDZjR6WDdiR0YrdnE2eFNnTEpVdDRuZHh3UWxPTEE4N2diYVJIb09vdGkxSVFRSWJqbjlcL29ySWRjQ2lnPT0iLCJtYWMiOiI1MTU5ZmM1MTE0YjIwMTMzMTQ1YzUxYzQwZDVkMzNhNDUxNDRmOGM3NDU2MDc1NDJkNDFiMWQ0MDg4MDk3YmM1In0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 06:16:02 GMT
content-type: text/html; charset=UTF-8
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6IkZZbDZ1U2NaM2JGcFRzMSt6eG5zUFE9PSIsInZhbHVlIjoia3hPZThiazRuTHJBeFEyRUdzOW4rZENcL1pQZk1rYld1VVVkOVhVQXNmcUY3a3RPZ0lUdVNjNlloazljUU5RM0xvdnFSdnpJaDFvNnMra2RJWGs3bU1BPT0iLCJtYWMiOiIyYTExZTkzOTY1MGFmN2QxOGZhMTM1YzY0Nzk1OTAyMGNlYWNmNWY4NzliNGIyY2FlNjkyMTVjNDRlMzg2MzdlIn0%3D; expires=Mon, 05-Sep-2022 09:16:02 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6IjVzNUR4bDVcL09QU0JnWEU0enhjb3RBPT0iLCJ2YWx1ZSI6InZxZjZjZm5WNmh3M2dvYUc4NTB6RHhyQXphSVRwdnR4Qnl3Qis5TG54dXZFREpXOG5acHU3c2tlaWxoS1FXY1c1SWJFSXdJZG5HMDdzZ3BwM1llK3ZnPT0iLCJtYWMiOiIwMjQ1ZTM1YzAyNDRhMGQ5MDRiMzYwODVlYTFhYmYxNWU1YzJmOTg2ZGRlY2NiM2MzYWQzMGVkOGI3ZDU1MWEyIn0%3D; expires=Mon, 05-Sep-2022 09:16:02 GMT; Max-Age=10800; path=/; httponly
x-newrelic-app-data: PxQFWFVWCgcJR1hQAQgPU1UCBxFORDQHUjZKA1ZLVVFHDFYPbU5yARBfWA86THlDQDg9KkNFRzo4clldFhQMDlwHShFkZGRTVABKIl4PRxALWlsEFCNMQVEHCgtZVhVKVB8GA1JWU04ATApVDwEAHh5UFUNTUAFTVgFVV1RbDgEDXVcGFR1RBwhCU24=
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|