firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 06 Sep 2022 21:04:27 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UG183XR5u5CpmCzLWjoqkI1D_W3uMVBzGuQ0LcQrfpREyowIz8237Q==
Age: 3198
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9adda4796e3cda8d92753c46964621c
5f1eba1f6085b23dea088a91fe6f8947172f9f62
a0577a8fcfa81b3f86d99566eb4429655b93a238ffd1a3752bc9aae3d969deea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A0577A8FCFA81B3F86D99566EB4429655B93A238FFD1A3752BC9AAE3D969DEEA"
Last-Modified: Tue, 06 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5629
Expires: Tue, 06 Sep 2022 23:31:34 GMT
Date: Tue, 06 Sep 2022 21:57:45 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0vs529wFQeHo_J7_LMJ-L21Kni9n56Tcu6LYGLRmN5erPB4TN1Blug==
age: 74548
X-Firefox-Spdy: h2
seguro.marazul-tech.com/cart?cart_token=shopify-5513b72c2a471be2cf62557ffbbb0ff1&utm_source=SMS&utm_campaign=Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=3ee1fee4e4ca533f2314dc8ac87cc17dffdea4e2&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10
301 Moved Permanently 134 B URL HTTP/1.1 seguro.marazul-tech.com/cart?cart_token=shopify-5513b72c2a471be2cf62557ffbbb0ff1&utm_source=SMS&utm_campaign=Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=3ee1fee4e4ca533f2314dc8ac87cc17dffdea4e2&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10
IP
ASN #266444 3L CLOUD INTERNET SERVICES LTDA - EPP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /cart?cart_token=shopify-5513b72c2a471be2cf62557ffbbb0ff1&utm_source=SMS&utm_campaign=Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=3ee1fee4e4ca533f2314dc8ac87cc17dffdea4e2&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10 HTTP/1.1
Host: seguro.marazul-tech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Sep 2022 21:57:45 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Keep-Alive: timeout=15
Location: https://seguro.marazul-tech.com:443/cart?cart_token=shopify-5513b72c2a471be2cf62557ffbbb0ff1&utm_source=SMS&utm_campaign=Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=3ee1fee4e4ca533f2314dc8ac87cc17dffdea4e2&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10
X-GoCache-CacheStatus: BYPASS
Server: gocache
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 21:57:45 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 06 Sep 2022 21:38:18 GMT
Cache-Control: max-age=3600
Expires: Tue, 06 Sep 2022 21:45:47 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: wBnxT5pBZuxdhNsRXCTDsRH1CKbwDV6OSEB_MiNS4SEIKnpCCKsNyA==
Age: 1168
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 63db942db8b6a5cd65c613609548c417
133ad9292df54c4d3fd9565c484fae813d83a8e3
f4dffc73dfba0c502fc09702a15e18a6d3459ddc46197db75c4efc400d0c7f92
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4DFFC73DFBA0C502FC09702A15E18A6D3459DDC46197DB75C4EFC400D0C7F92"
Last-Modified: Mon, 05 Sep 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10141
Expires: Wed, 07 Sep 2022 00:46:47 GMT
Date: Tue, 06 Sep 2022 21:57:46 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash e8952752ad4a452a575522a7eb737217
c5554fa2af05d7a7117032b0f99352de08988346
8c182bed7bbd843774a2136823b30a4cb707e2a5386f71d01640aa3558888bf7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2500
Cache-Control: max-age=125438
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:46 GMT
Etag: "6316ff94-1d7"
Expires: Thu, 08 Sep 2022 08:48:24 GMT
Last-Modified: Tue, 06 Sep 2022 08:06:44 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4Y7irSJogiM9AQZLY/BJLw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: nxnv3oY90wR9uK2mknzsjjmRa0E=
awesome-assets.yampi.me/checkout/build/assets/css/app-f44a883bc0.css
200 OK 134 kB URL HTTP/2 awesome-assets.yampi.me/checkout/build/assets/css/app-f44a883bc0.css
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size 134 kB (133865 bytes)
Hash f44a883bc0053f8b6e3f2e277c57ba94
55b0c8ce27397adf2dde00dade512dd51e8a5227
4de73ff14ff621eb8699ce6f8d16011db1396da836d3f3c58b65fbcd7501365e
GET /checkout/build/assets/css/app-f44a883bc0.css HTTP/1.1
Host: awesome-assets.yampi.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:47 GMT
content-type: text/css
content-length: 133865
x-amz-id-2: iiKNJustH0CCZ5a6QV3nu9l0w55abVTuIhW6aZmtaWl2lTiesdV7yPUBVUWMwku5f4z6B95amAI=
x-amz-request-id: R7XSAPF5QSPDGPJG
cache-control: public, max-age=315360000, no-transform
last-modified: Tue, 06 Sep 2022 18:09:42 GMT
x-amz-version-id: 5d8O9v6VyeU6klY2wk2zkN3NliDvHubb
etag: "f44a883bc0053f8b6e3f2e277c57ba94"
cf-cache-status: HIT
age: 10633
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pmYmnNzhOGiSfXMZH7fRd%2B2yb75sU143hK9WEBYb5r3JVWtA3NFXuyZ99DXvE8IwqZUgzfy%2BbBcUcLGa0TwRMA4MD%2FxmxecTLGfDyiROFWHY%2FvsLcPaEve6ltJGWvDe%2B3yv68l7ls%2F0o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 746a765a8d13b518-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ea5d89f3b91e9e92f6024a05a76d0916
fa5a430f9c241f95ce139f4287d5fd3583c1f4f7
5f88f1d962a8f8ba18d5b077d2a8832554b62960764922f6bc45362480d5cd45
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1214
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:47 GMT
Last-Modified: Tue, 06 Sep 2022 21:37:33 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
secure.mlstatic.com/sdk/javascript/v1/mercadopago.js
200 OK 9.1 kB URL HTTP/1.1 secure.mlstatic.com/sdk/javascript/v1/mercadopago.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (25829), with no line terminators
Hash 13e3cc8ff400bf1da09ba98065151e4a
05da8917634372f71cd2f851e42129fecfb2f45f
9fb8f6afd1ae3d95fbd299a8a9b63fb83e653410c7a9cd0e42fbb75b4faf1c36
GET /sdk/javascript/v1/mercadopago.js HTTP/1.1
Host: secure.mlstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 9065
Server: Tengine
Vary: Accept-Encoding
Content-Encoding: gzip
ETag: "825262-9065-1647036440000"
Last-Modified: Fri, 11 Mar 2022 22:07:20 GMT
x-envoy-upstream-service-time: 2
x-envoy-decorator-operation: production.openplatform-sdk-javascript.melifrontends.com
X-Request-Id: d2e52704-7958-472c-b559-cac792b41f98
X-Request-Device-Id: d2e52704-7958-472c-b559-cac792b41f98
X-D2id: d2e52704-7958-472c-b559-cac792b41f98
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Cache-Access-Control-Allow-Origin: *
Cache-Control: max-age=3600
Date: Tue, 06 Sep 2022 21:57:47 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 21d1b5be072df45253749eeb3290be82
4ac9978797c085289b9fcc2fe9a57b619e1c78c9
9ea779e1ad86a4a7c403b574908e2dc60d079b366ab1cf439b34c73c9a9c64c9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c0498832f97967e1fbaa64eba7c65094
2dcaaa99759c7b3279d75f4f934bf05a1c4ca8e7
63621ee746f1a80c3c6167ca190e5008e3e79db0bc8f0e5cb0e5dccc11ceb822
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 7778c2f9b4a3fc4a62b3ac390fa74822
f56ddd3583a90d2b7b2a051500c891fbeb90800b
12243bf1156cc81406f2ed4cea39e690fc03acd0f9adb110d82cd00c0a69d434
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 519
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:47 GMT
Last-Modified: Tue, 06 Sep 2022 21:49:08 GMT
Server: ECS (amb/6B7E)
X-Cache: HIT
Content-Length: 471
www.google.com/recaptcha/api.js?render=6LdxeuoUAAAAAP6iiKD6JZKojOflG8Z_w0Ebx6LC
200 OK 584 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6LdxeuoUAAAAAP6iiKD6JZKojOflG8Z_w0Ebx6LC
IP
File type ASCII text, with very long lines (884), with no line terminators
Hash b7a6c59a907d5a389d2689db5a03b1ce
75084c2c8c6fea60d8bbfa6b22cecd4d51c98e31
00a024e5bb473677e5844a1dc71854b4351f003df053dae198624d2985f3fe86
GET /recaptcha/api.js?render=6LdxeuoUAAAAAP6iiKD6JZKojOflG8Z_w0Ebx6LC HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Tue, 06 Sep 2022 21:57:47 GMT
date: Tue, 06 Sep 2022 21:57:47 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 584
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c0498832f97967e1fbaa64eba7c65094
2dcaaa99759c7b3279d75f4f934bf05a1c4ca8e7
63621ee746f1a80c3c6167ca190e5008e3e79db0bc8f0e5cb0e5dccc11ceb822
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8fc7316fab55e89a81536e926eab6f83
7fcab743b176312e76999b39a1b2a3b97dbeb10f
8178b9805611209f5c47dce32da555117870a90648e026d08cc691a4103169a7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/pWyJAO6WNqQ
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/pWyJAO6WNqQ
IP
Hash 978582b1024e3f6adb0b944d43472479
905710206f9a404676cf948b7691f3b8530efe5a
36e65a7de3629939a567d0b092fbe7724dd204cebac5e47a7a33b15b2e301374
POST /s/gts1d4/pWyJAO6WNqQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:47 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dec22851777a3030fc2502dac7ba19d9
fd5e9e9204374e5044254312646e33899b27cf48
67de7221edf19e62be0ae66623a8596fe4bad13adbc97703da17d959737ba426
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "67DE7221EDF19E62BE0AE66623A8596FE4BAD13ADBC97703DA17D959737BA426"
Last-Modified: Mon, 05 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3834
Expires: Tue, 06 Sep 2022 23:01:41 GMT
Date: Tue, 06 Sep 2022 21:57:47 GMT
Connection: keep-alive
js.upnid.com/v0.js
200 OK 8.3 kB IP
File type Unicode text, UTF-8 text, with very long lines (23050)
Hash 49fa980f95bb3bbff8b7a2857a727d5d
9e931943f03079522318820948018d78610eaca4
4e295d58275798f67bf7b9c48b8cae16238c9a3dabca082238e7bab8eaa34943
GET /v0.js HTTP/1.1
Host: js.upnid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Origin
content-encoding: br
via: 1.1 google
content-length: 8310
date: Tue, 06 Sep 2022 19:52:24 GMT
age: 7523
last-modified: Tue, 19 Jan 2021 20:16:07 GMT
content-type: text/javascript; charset=utf-8
cache-control: public,max-age=3600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.shopify.com/s/files/1/0469/2253/0970/products/desprogressiva-curlzr-volta-aos-cachos-ultimas-unidades-loja-mar-azul-tech-930843_250x250.jpg
200 OK 19 kB URL HTTP/2 cdn.shopify.com/s/files/1/0469/2253/0970/products/desprogressiva-curlzr-volta-aos-cachos-ultimas-unidades-loja-mar-azul-tech-930843_250x250.jpg
IP
File type ISO Media, AVIF Image\012- data
Hash 32b5ff714c0a692e4f46c6892bad9a18
d0d39e3a6dcbc5dcc6655853ede9b2ddfce8816e
200da052fb45dbf8ecd50ca55a7b3387db3bebedc735d2b6b59813dddb9d0e65
GET /s/files/1/0469/2253/0970/products/desprogressiva-curlzr-volta-aos-cachos-ultimas-unidades-loja-mar-azul-tech-930843_250x250.jpg HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:47 GMT
content-type: image/avif
content-length: 19296
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0469/2253/0970/products/desprogressiva-curlzr-volta-aos-cachos-ultimas-unidades-loja-mar-azul-tech-930843_250x250.jpg>; rel="canonical"
server-timing: imagery;dur=582.854, imageryFetch;dur=20.543, imageryProcess;dur=561.392;desc="image"
timing-allow-origin: *
vary: Accept, Accept-Encoding
x-content-type-options: nosniff
x-request-id: bc895068-f1c0-4c92-b672-31e8d6894cd9
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-central1
last-modified: Sat, 03 Sep 2022 12:16:16 GMT
cf-cache-status: HIT
age: 100086
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bq9cn%2FC%2FSMSje%2BrOs%2Bn4AniInJxfEVzd2xzDeCx9OUqrYF0kr950XAz14Xb%2B9BxNjg6VsSWpeSJaKfnwlR9ynBZYE1I6zBuxWO%2BnxwFbT0HBuTMsWcsJkS6mtkFgh8F%2F1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 746a765c0d1ab529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dec22851777a3030fc2502dac7ba19d9
fd5e9e9204374e5044254312646e33899b27cf48
67de7221edf19e62be0ae66623a8596fe4bad13adbc97703da17d959737ba426
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "67DE7221EDF19E62BE0AE66623A8596FE4BAD13ADBC97703DA17D959737BA426"
Last-Modified: Mon, 05 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3834
Expires: Tue, 06 Sep 2022 23:01:41 GMT
Date: Tue, 06 Sep 2022 21:57:47 GMT
Connection: keep-alive
ocsp.pki.goog/s/gts1d4/pWyJAO6WNqQ
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/pWyJAO6WNqQ
IP
Hash 978582b1024e3f6adb0b944d43472479
905710206f9a404676cf948b7691f3b8530efe5a
36e65a7de3629939a567d0b092fbe7724dd204cebac5e47a7a33b15b2e301374
POST /s/gts1d4/pWyJAO6WNqQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:47 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css2?family=Rubik:wght@400;500;700&display=swap
200 OK 2.7 kB URL HTTP/2 fonts.googleapis.com/css2?family=Rubik:wght@400;500;700&display=swap
IP
Hash 98f6e79cdc386d184a7d07829278932f
b8e66e9fd149ab159c65d9f0325fcad2693ae003
fa83740108c600e42fc06ea74f949e2df42d345d83e7d27277a2fa52acaf4637
GET /css2?family=Rubik:wght@400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Sep 2022 21:57:47 GMT
date: Tue, 06 Sep 2022 21:57:47 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3766
Expires: Tue, 06 Sep 2022 23:00:33 GMT
Date: Tue, 06 Sep 2022 21:57:47 GMT
Connection: keep-alive
github.bubbstore.com/svg/card-mastercard.svg
200 OK 7.0 kB URL HTTP/2 github.bubbstore.com/svg/card-mastercard.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (352)
Hash f9d2285060273f39d51f5447d0c15105
5886affa7fde2ca4a56fc59ea869d4751d32604d
c8689deac747f7287b7ef4116cbc688e7af3b927bb5fff086b319c936a230d9c
GET /svg/card-mastercard.svg HTTP/1.1
Host: github.bubbstore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:47 GMT
content-type: image/svg+xml
x-origin-cache: HIT
last-modified: Thu, 17 Jun 2021 16:55:43 GMT
access-control-allow-origin: *
etag: W/"60cb7e8f-5b3"
expires: Tue, 06 Sep 2022 22:07:47 GMT
cache-control: max-age=691200
x-proxy-cache: MISS
x-github-request-id: 5FD2:0204:3F19C9:43B328:6306A3B0
via: 1.1 varnish
x-served-by: cache-bma1660-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1661379505.585928,VS0,VE172
vary: Accept-Encoding
x-fastly-request-id: d081bf9aa19b153f514ef3b177eb673dd6f0b687
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yX72eIDRrGB84O4cn7n23B3ZMS%2BEGcptrY%2FO8j3bqAPTGGGNQQMtsp1pHLlF6WvSKT4I5rrX8JsPjTnGJzrZ3ZPjllFOFSWC7HZHWTaGl%2Bb7vgFXCUbCQo4omr7VKA5sskhJ3Fd44w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 746a765bca07b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
github.bubbstore.com/svg/card-aura.svg
200 OK 4.0 kB URL HTTP/2 github.bubbstore.com/svg/card-aura.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3016)
Hash 947868a2f99b2cee09b6fa5375eafa74
9899d5ef01cf6e9a3aaff21660fd7f3e90077190
8847ef48ffc2adc45f7ed88aebfaa72567d5c368a8f84be8713899c560b6751a
GET /svg/card-aura.svg HTTP/1.1
Host: github.bubbstore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:47 GMT
content-type: image/svg+xml
x-origin-cache: HIT
last-modified: Thu, 17 Jun 2021 16:55:43 GMT
access-control-allow-origin: *
etag: W/"60cb7e8f-111a"
expires: Tue, 06 Sep 2022 22:07:47 GMT
cache-control: max-age=691200
x-proxy-cache: MISS
x-github-request-id: B3E4:210E:2AE947:2E39F2:62EA7A7B
via: 1.1 varnish
x-served-by: cache-bma1623-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1659533947.115851,VS0,VE106
vary: Accept-Encoding
x-fastly-request-id: 42916230cf12b0bda932a4d252d9e38dd0770242
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8eHJWHCcmyKXHhA1tQqN7kPRCso1qrbsDSqmEUu2zPHcSLmzjZwn4MOr5zAlLfoCZgDYI5bzDUvOarArsYlaUyGeR2wEQqRAb7shc7VgxsmqAC7RwnXiBEePRPm0KZPs%2FJMTeI04oQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 746a765bca09b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3766
Expires: Tue, 06 Sep 2022 23:00:33 GMT
Date: Tue, 06 Sep 2022 21:57:47 GMT
Connection: keep-alive
seguro.marazul-tech.com/cart?cart_token=shopify-5513b72c2a471be2cf62557ffbbb0ff1&utm_source=SMS&utm_campaign=Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=3ee1fee4e4ca533f2314dc8ac87cc17dffdea4e2&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10
302 Found 3.4 kB URL HTTP/2 seguro.marazul-tech.com/cart?cart_token=shopify-5513b72c2a471be2cf62557ffbbb0ff1&utm_source=SMS&utm_campaign=Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=3ee1fee4e4ca533f2314dc8ac87cc17dffdea4e2&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10
IP
ASN #266444 3L CLOUD INTERNET SERVICES LTDA - EPP
Hash 388e0d041e853f9756ce400feef719c9
b0be38e1f47967da059effb15089a3f07ed2ed8e
32b2c564dc757287ad49195eeb9330eb30540a9790ec9c4b982a2252ec81ee65
GET /cart?cart_token=shopify-5513b72c2a471be2cf62557ffbbb0ff1&utm_source=SMS&utm_campaign=Carrinho%20Abandonado%201&forceCheckout=1&skipToCheckout=1&store_token=3ee1fee4e4ca533f2314dc8ac87cc17dffdea4e2&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10 HTTP/1.1
Host: seguro.marazul-tech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Tue, 06 Sep 2022 21:57:46 GMT
content-type: text/html; charset=UTF-8
location: https://seguro.marazul-tech.com/checkout/payment?cart_token=shopify-5513b72c2a471be2cf62557ffbbb0ff1&utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&store_token=3ee1fee4e4ca533f2314dc8ac87cc17dffdea4e2&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6IjAwYW1UVDhoUGp3YVg0WkRYMFl0cHc9PSIsInZhbHVlIjoia0VEeXpuaUlzc3ZJMXQzVDVhSXdaMWFISlFMc2pzQWRBQ09mdFVWTGlSUGxEUTRsWlwvS1l4XC80QVg3cndWemJWYkJaNmdLd2E3c29KSzB3YUFYamZlQT09IiwibWFjIjoiMjhiOGUwYjgyMWNkZDRjYmI0YzU2YTJkY2NmOTE5NGE0MjNlNjFlZTQwMWVmNDlkYjUzYjY4ZjAyNzk2ZjY0YiJ9; expires=Wed, 07-Sep-2022 00:57:46 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6Ilk2SFwvaytzaFd4RXFxek44M3ljT1d3PT0iLCJ2YWx1ZSI6Ik1ZSXBacHJ0NE4zNkdhRUdvd3R6b3JGQmNMcG1abDRzQXNKamJ0YWI2aTlvcmc1akcrWUJaU1lKVUY5ZzFEaVJPN25ISzVld2xcLzU3ZDRZRStCNytZdz09IiwibWFjIjoiNWFhMGFkZmU2M2YyMDBlMDNhOWM1NGM2NDkwZjQyYzM4MjgyOTY4YWEyNzgwZTRiOTNkYzVhZmYyNDA2ZDFhMCJ9; expires=Wed, 07-Sep-2022 00:57:46 GMT; Max-Age=10800; path=/; httponly
marazul-tech_cart=eyJpdiI6IjdtSDBGaUlUUXpIOVhnVkdjRlAxWFE9PSIsInZhbHVlIjoiNldtRm1ib0U2OGdLY1wvMFwvaitoQVhaTVlqbm5hZlBzNUJtZ05SUFRMUlVkbVZsVStzV09saThId1pVYmF2TDhtMHJTSmdjbDlYNFRUbWtDR00rMVlqdz09IiwibWFjIjoiOGMxZDI2ZDFiZmMxMGE0MTBiMDY0MTg3YzE5MDU3NWVkZDVkZDMwNjRmNWZmZGVhNGIxNmM5ZWQ2Y2EwNDBjMSJ9; expires=Sun, 11-Sep-2022 21:57:46 GMT; Max-Age=432000; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0766520-2dbc-4f52-b0e2-1a908af4cd29.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0766520-2dbc-4f52-b0e2-1a908af4cd29.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1462b0c8fff091f29c7c5145031c08aa
55154c3878e9650f463805c3829f03a1603f14c1
62f913a6498b21da33451e7cf0e37c5fdef565324bcd35d93cb536527394a3d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0766520-2dbc-4f52-b0e2-1a908af4cd29.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11778
x-amzn-requestid: 0054ce27-72f6-4161-90d0-eeb20d9c9537
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YDqcrEczIAMFqlg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6317bdea-0c3e511533c91b783a458f2b;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 21:38:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Q4n9f959aCshN6qgQ2LWVSUTmSd4hvjWyF2GNdsR1_asVSdFKxXsqw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 21:41:08 GMT
age: 999
etag: "55154c3878e9650f463805c3829f03a1603f14c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F544c97ea-c914-4fdc-82af-945cb0832cde.jpeg
200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F544c97ea-c914-4fdc-82af-945cb0832cde.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash edcd025faafbf7161d4d606f47304c2b
a99519726bc82f2cc0541c79f47ddd15c7362669
ed7b147e3ea371ea4b014805d9c2f45407918924bb2ec540ea6f7cd0a8b1b698
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F544c97ea-c914-4fdc-82af-945cb0832cde.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3529
x-amzn-requestid: 7c3c10fd-ce94-4d39-9fc0-de3f30d307c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XkARtEI8oAMFqjQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630b140a-396d466a114b14592f68c813;Sampled=0
x-amzn-remapped-date: Sun, 28 Aug 2022 07:06:50 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: PCqO2_8gh8yq-POB4jnsRNA0xRULJBB3n8-_Kz7nWQrxqbMPykbfkw==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 21:42:16 GMT
age: 931
etag: "a99519726bc82f2cc0541c79f47ddd15c7362669"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.mercadopago.com/v2/security.js
200 OK 2.2 kB URL HTTP/2 www.mercadopago.com/v2/security.js
IP
Hash 02197f100f86c7b1f5b393be67a2e7c0
dd213fc0dffe849e7a2b3cafe18b114f1af81871
5db80f102ccba99aacd96de36191d0ca5340169c5b64b1a256f5697acc1b4812
GET /v2/security.js HTTP/1.1
Host: www.mercadopago.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 06 Sep 2022 21:57:47 GMT
set-cookie: _d2id=93649102-7c5e-4bd1-8257-3fcff242f5f2-n; Path=/; Domain=.mercadopago.com; Expires=Wed, 06 Sep 2023 21:57:47 GMT
cache-control: max-age=0, private, no-store, no-cache, must-revalidate
x-transaction-name: get_off_widget
content-encoding: gzip
x-request-id: 93649102-7c5e-4bd1-8257-3fcff242f5f2
x-request-device-id: 93649102-7c5e-4bd1-8257-3fcff242f5f2
x-d2id: 93649102-7c5e-4bd1-8257-3fcff242f5f2
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: Miss from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: f2kPhUUcq4pnkcrJ4PVWxdqXko2tzAPRloE2SC3Bc2A8kG1TCBGPFg==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3766
Expires: Tue, 06 Sep 2022 23:00:33 GMT
Date: Tue, 06 Sep 2022 21:57:47 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b220c7c-ed68-4f56-82a7-5748d044635a.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b220c7c-ed68-4f56-82a7-5748d044635a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 70c964498818242b742575cfa1769b67
cde85fbe83c9e29618edf4e05002bd623e3ab965
bdb0e76fe216f742789ba5a77645c640fe0c7f207707181e618fa31d4cf58605
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b220c7c-ed68-4f56-82a7-5748d044635a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8462
x-amzn-requestid: 1a501a0a-2671-468b-885b-2a2efb73bc2e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YDq64HbCIAMFjGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6317beab-395f6d1436b027ee60d00abd;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 21:42:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: ZWf6CXKcClMXAXmFXNp0sxVCMUFyZqhhh7B83tJMX_jvteLRDzG8QA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 21:42:04 GMT
etag: "cde85fbe83c9e29618edf4e05002bd623e3ab965"
content-type: image/jpeg
age: 943
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74f48f7-6138-4042-9b4c-f63bb036324f.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74f48f7-6138-4042-9b4c-f63bb036324f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 124a0c0a970006aa660031b5e0ec70d9
3dcd7b5ca2cc9ab604df554b341d1e08bffaa3d7
14c5c6aaf110c123037eb860ecc9d386d46af55fe54cb50f9d1ad430f7e0c516
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74f48f7-6138-4042-9b4c-f63bb036324f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11972
x-amzn-requestid: e71daf97-7463-492d-b55a-0eab022d8b05
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X0nI2G1tIAMFk2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6311b89e-7d6c6d1769649d371c505453;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 08:02:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lNUnWV03HGfGLUSblwFyCjoiSuPlolly4h94cFFZcve3AmtJNkiH7g==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 21:42:16 GMT
age: 931
etag: "3dcd7b5ca2cc9ab604df554b341d1e08bffaa3d7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe12fd665-3bdf-498a-98f0-c69e29204995.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe12fd665-3bdf-498a-98f0-c69e29204995.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78bacb8692b8f5a5b5b628335778adc0
9cf78c7901f15b194592efb0db560af569e9470f
871fe5479807b985202b776b60378918e89e04d7da9b9a546a0ce72857a01b90
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe12fd665-3bdf-498a-98f0-c69e29204995.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6919
x-amzn-requestid: 36c39d63-51c8-45c1-a0c1-4aab3f27da78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YDqzaELSIAMFeiA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6317be7c-08ed1df52818a79115c15e71;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 21:41:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: C2WbN-Trv1uxf1ya8kCZ6PBlH550lTv1c2OOiJuOKm4eFLywKPUmBA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 21:41:16 GMT
age: 991
etag: "9cf78c7901f15b194592efb0db560af569e9470f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff29f2a08-1dd5-4577-ae0d-6852e6e83ba7.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff29f2a08-1dd5-4577-ae0d-6852e6e83ba7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6447311cd0f34fb9cde4e21946e0d8af
cfca3a21a33e58f300343f643634c50a924bb6db
e2de947b52e13a0350c5b6904020924b957161d825930677386185a62d2f2401
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff29f2a08-1dd5-4577-ae0d-6852e6e83ba7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5384
x-amzn-requestid: b2d61cc9-3109-4b76-9aee-96f14b755184
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YDqcrFFGIAMF8pA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6317bdea-43651bdc494d8c415225415e;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 21:38:50 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: AdZGxVLg3lCcqbxAbsf79mse38ZRqK_L98l4OQZELiaNS4pAjuQ1BA==
via: 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 21:41:08 GMT
age: 999
etag: "cfca3a21a33e58f300343f643634c50a924bb6db"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 62c739a1335c5cf0fd4e783db6cdf14b
4f4a2acf32a7b7d8d86f7d0b037cdd16d59704ff
de1d42a2f47b8a7f1fed1880f1b485f63a5e07ede87fee3194cabeab056cf6f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb53024bbd41c1d8f88fa7b9becb704a
c87f5ac53cff6e3436c15551f8092f1e0215cb79
f2f589c71f9426ead1c60e4707982aa501b785a6040c95214db905a5cff8a777
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2
200 OK 34 kB URL HTTP/2 fonts.gstatic.com/s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 33580, version 1.0\012- data
Hash 848cd2ecd011428969dc6b90431bc482
6b1a7b562a56bd54510e0f6f95e26babca331a1b
981307dcbbd348f6fb4e3eab184077392f9ee15097ea868f630debefad9044e9
GET /s/rubik/v21/iJWKBXyIfDnIV7nBrXw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Sep 2022 21:08:19 GMT
expires: Tue, 05 Sep 2023 21:08:19 GMT
cache-control: public, max-age=31536000
age: 89368
last-modified: Mon, 18 Jul 2022 19:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
github.bubbstore.com/svg/card-hipercard.svg
200 OK 46 kB URL HTTP/2 github.bubbstore.com/svg/card-hipercard.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3869)
Hash b6e435272f42cdfb7cfce574da0800dc
e34bdb051d5da00395837b5afdc36110e0403204
c0a99ec8053120bd1e34e2b2dd5a3ac431b47c7938f7641827c484c24972d615
GET /svg/card-hipercard.svg HTTP/1.1
Host: github.bubbstore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:47 GMT
content-type: image/svg+xml
x-origin-cache: HIT
last-modified: Thu, 17 Jun 2021 16:55:43 GMT
access-control-allow-origin: *
etag: W/"60cb7e8f-54bc"
expires: Tue, 06 Sep 2022 22:07:47 GMT
cache-control: max-age=691200
x-proxy-cache: MISS
x-github-request-id: D79C:C438:19BD234:1AFB49D:63175C58
via: 1.1 varnish
x-served-by: cache-bma1649-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1662475353.920092,VS0,VE123
vary: Accept-Encoding
x-fastly-request-id: f0b2a6ca2f786381a5e8b0e3e05418e8754cbef0
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IThzx6J0u62c0YIFSIcd8qztJtZnWhm3XuOKOot455gxs%2FjjdQleJ3pyWBGOkE%2FASkZRzrmEpRK8M4jyhY3BA8zIPfsjDXmors7YreOzOnZO8B1eUvWbxS3GdRTvnMicROR1wo7PXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 746a765bca0bb4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb53024bbd41c1d8f88fa7b9becb704a
c87f5ac53cff6e3436c15551f8092f1e0215cb79
f2f589c71f9426ead1c60e4707982aa501b785a6040c95214db905a5cff8a777
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 62c739a1335c5cf0fd4e783db6cdf14b
4f4a2acf32a7b7d8d86f7d0b037cdd16d59704ff
de1d42a2f47b8a7f1fed1880f1b485f63a5e07ede87fee3194cabeab056cf6f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 841b41a4d02b151759ae52ef4d397d45
a14081bf91a05ada26c7079dbf5fcd75d0cdd3b3
1c43e4e9761165da05952ea1d8adb5d304768935e6dc9e0b4f9f06e9ea141f6c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5873
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:48 GMT
Last-Modified: Tue, 06 Sep 2022 20:19:55 GMT
Server: ECS (amb/6B7E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 841b41a4d02b151759ae52ef4d397d45
a14081bf91a05ada26c7079dbf5fcd75d0cdd3b3
1c43e4e9761165da05952ea1d8adb5d304768935e6dc9e0b4f9f06e9ea141f6c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:48 GMT
Server: ECS (amb/6BBF)
Content-Length: 471
fonts.dooki.com.br/fa/4.7.0/fa.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 fonts.dooki.com.br/fa/4.7.0/fa.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /fa/4.7.0/fa.woff2?v=4.7.0 HTTP/1.1
Host: fonts.dooki.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://fonts.dooki.com.br/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:48 GMT
content-type: binary/octet-stream
content-length: 77160
x-amz-id-2: h3KG8134MvzX6WKf857ZzOoD2wI6lbJ3eq85NpxxGucB200qeO5xXHtxTJaw8TA/kQFD6q76RHc=
x-amz-request-id: V3ZVHYQFQPXFN7M1
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 1800
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Sat, 10 Nov 2018 14:21:40 GMT
x-amz-version-id: null
etag: "af7ae505a9eed503f8b8e6982036873e"
cf-cache-status: REVALIDATED
expires: Wed, 14 Sep 2022 21:57:48 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 746a765eba34fab4-OSL
X-Firefox-Spdy: h2
api.mercadopago.com/v1/device_sessions/web_device
200 OK 0 B URL HTTP/2 api.mercadopago.com/v1/device_sessions/web_device
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/device_sessions/web_device HTTP/1.1
Host: api.mercadopago.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://seguro.marazul-tech.com/
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:48 GMT
content-type: application/json; charset=utf-8
content-length: 0
access-control-allow-origin: https://seguro.marazul-tech.com
access-control-allow-methods: PUT, GET, POST, DELETE, OPTIONS
access-control-allow-headers: content-type
access-control-max-age: 86400
x-request-id: 35ee9a54-fb19-4b10-a4dc-fbadb7234927
x-trace-digest-53: 6TZOJol4KEm/foFlp0bwUZJxNLUjCzGgnbYyFF0UZAYa7Cv4lizXUPuCHL/8bgWB
x-trace-digest-keys: x-source-ip,x-trace-source,x-request-id,x-trace-digest-53,x-trace-digest-keys,x-trace-existing-keys
x-source-ip: 91.90.42.154
x-b3-spanid: 78e467c6992ff2de
x-b3-traceid: 78e467c6992ff2de
x-trace-source: fury_app
x-b3-sampled: 0
x-trace-existing-keys: x-b3-sampled,x-b3-spanid,x-b3-traceid
access-control-allow-credentials: true
vary: Accept,Accept-Encoding
cache-control: max-age=0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=16070400; includeSubDomains; preload
timing-allow-origin: *
X-Firefox-Spdy: h2
seguro.marazul-tech.com/checkout/payment?cart_token=shopify-5513b72c2a471be2cf62557ffbbb0ff1&utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&store_token=3ee1fee4e4ca533f2314dc8ac87cc17dffdea4e2&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10
200 OK 41 kB URL HTTP/2 seguro.marazul-tech.com/checkout/payment?cart_token=shopify-5513b72c2a471be2cf62557ffbbb0ff1&utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&store_token=3ee1fee4e4ca533f2314dc8ac87cc17dffdea4e2&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10
IP
ASN #266444 3L CLOUD INTERNET SERVICES LTDA - EPP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (31151)
Hash e61a12d0a4eb9918e55e77a63443fd80
e2839294859c2aece2631d41a9693bbe0b29cefb
869ab170b018ac78f6708a68106770bd644eb3212da9ac50b82fb05609e241d6
GET /checkout/payment?cart_token=shopify-5513b72c2a471be2cf62557ffbbb0ff1&utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&store_token=3ee1fee4e4ca533f2314dc8ac87cc17dffdea4e2&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10 HTTP/1.1
Host: seguro.marazul-tech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjAwYW1UVDhoUGp3YVg0WkRYMFl0cHc9PSIsInZhbHVlIjoia0VEeXpuaUlzc3ZJMXQzVDVhSXdaMWFISlFMc2pzQWRBQ09mdFVWTGlSUGxEUTRsWlwvS1l4XC80QVg3cndWemJWYkJaNmdLd2E3c29KSzB3YUFYamZlQT09IiwibWFjIjoiMjhiOGUwYjgyMWNkZDRjYmI0YzU2YTJkY2NmOTE5NGE0MjNlNjFlZTQwMWVmNDlkYjUzYjY4ZjAyNzk2ZjY0YiJ9; bubbstore_checkout=eyJpdiI6Ilk2SFwvaytzaFd4RXFxek44M3ljT1d3PT0iLCJ2YWx1ZSI6Ik1ZSXBacHJ0NE4zNkdhRUdvd3R6b3JGQmNMcG1abDRzQXNKamJ0YWI2aTlvcmc1akcrWUJaU1lKVUY5ZzFEaVJPN25ISzVld2xcLzU3ZDRZRStCNytZdz09IiwibWFjIjoiNWFhMGFkZmU2M2YyMDBlMDNhOWM1NGM2NDkwZjQyYzM4MjgyOTY4YWEyNzgwZTRiOTNkYzVhZmYyNDA2ZDFhMCJ9; marazul-tech_cart=eyJpdiI6IjdtSDBGaUlUUXpIOVhnVkdjRlAxWFE9PSIsInZhbHVlIjoiNldtRm1ib0U2OGdLY1wvMFwvaitoQVhaTVlqbm5hZlBzNUJtZ05SUFRMUlVkbVZsVStzV09saThId1pVYmF2TDhtMHJTSmdjbDlYNFRUbWtDR00rMVlqdz09IiwibWFjIjoiOGMxZDI2ZDFiZmMxMGE0MTBiMDY0MTg3YzE5MDU3NWVkZDVkZDMwNjRmNWZmZGVhNGIxNmM5ZWQ2Y2EwNDBjMSJ9
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:46 GMT
content-type: text/html; charset=UTF-8
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6ImJteFBaS0pvb1BsblpXM0JaXC83RWZnPT0iLCJ2YWx1ZSI6IktXNlJMOFRja3M0dWFlOUFGWDN3MThvXC9iRzBpVkZuVkN6WTFTNTZ3cHZaTWl2SFArRk5LTXZKMlZoN3VCOUZkMytKaFRyNGxcL05ZOTNWR1Z5UExXOEE9PSIsIm1hYyI6ImQ1ZThhOTBmODI2ZWFjOTI4NDJiNjY2OTIzYjY1ZDUwMDk5ZTk2M2QxYzg3YmU1MjBiZGE1OTMwNGNiYzA5ZDIifQ%3D%3D; expires=Wed, 07-Sep-2022 00:57:46 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6ImdhXC8wbUk3RHJSZk9wcCtYNWNadWRnPT0iLCJ2YWx1ZSI6IkdoVDc0cjFaZzc2Y01oUUxYbU9wTGQ4RUZIN1RvZGF3bkt0N29MYUs3aUduUGN1NGUxR0h3TzMzMHVrbzBhZnlOcWlHSnBUZEtyeHJIbzFlMXdLZ05RPT0iLCJtYWMiOiJmYzFmNmY4NjgyMDlhNTQzMzI5YWI3YjUxZTVkNmNjZTFlMWNlNDBkOTc4ZTNlNjI5NTI3ODQ2NDk2MzQ0NmQ5In0%3D; expires=Wed, 07-Sep-2022 00:57:46 GMT; Max-Age=10800; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 9a06d4975d9a2cde5a503d8c6b2cd261
a6713b7912b2caaec2ff123438917d593e4af878
86d809724667ef6f33c06c3fe7e63637d11bb7f6a9a9835b8a5c201331d10aa0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 06 Sep 2022 21:57:48 GMT
Last-Modified: Tue, 06 Sep 2022 21:12:21 GMT
Server: ECS (nyb/1D2C)
X-Cache: Miss from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: pMtOOQb3ltHE4-U3lz0FKRmuLkhItPm74pyJ7KQhQjekBVslcfiY8Q==
Age: 2727
analytics.tiktok.com/i18n/pixel/config.js?sdkid=C5OA7O5O3VNUQLVLPI4G&hostname=seguro.marazul-tech.com
200 OK 20 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/config.js?sdkid=C5OA7O5O3VNUQLVLPI4G&hostname=seguro.marazul-tech.com
IP
ASN #20940 Akamai International B.V.
File type C source, Unicode text, UTF-8 text, with very long lines (58149)
Hash 80532fd183d6bc477f46ab4eb75bbd4c
ccc7d7e739c5a19f5d5647feab6fc7e1438f82ae
6168d2ec51432e3fc6b21d9e9dda39a9746c6d3c5652118f315c79ebdc1fc213
GET /i18n/pixel/config.js?sdkid=C5OA7O5O3VNUQLVLPI4G&hostname=seguro.marazul-tech.com HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20220906215748475E57AC35EE0B7311F8
x-tt-trace-host: 014c3d3a48b720cad047ee4725ef00c61e44307b2314520c7a2b075ae2e3eda4b0037003d7f3d240519caeb81bf89542917672a593c3ca30292711b094e29f48d86fb1a32a5aca19f24daaf31ab1694f4155d1e09c65650ae9f2e097fce1b5da6f
content-encoding: gzip
content-length: 19865
x-origin-response-time: 20,184.27.45.68
x-akamai-request-id: 3dbe62ee.52b2fca7
expires: Tue, 06 Sep 2022 21:57:48 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 06 Sep 2022 21:57:48 GMT
x-cache: TCP_MISS from a104-84-152-231.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
vary: Accept-Encoding
set-cookie: _ttp=2EPe67HF6jQ5jKn5gQfTlxvATvf; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a184-27-45-68.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=106, origin; dur=20, inner; dur=4
x-parent-response-time: 125,104.84.152.231
X-Firefox-Spdy: h2
s3.sa-east-1.amazonaws.com/king-assets.yampi.me/dooki/62faee62d5a91/62faee62d5a97.png
200 OK 7.4 kB URL HTTP/1.1 s3.sa-east-1.amazonaws.com/king-assets.yampi.me/dooki/62faee62d5a91/62faee62d5a97.png
IP
File type PNG image data, 677 x 87, 8-bit/color RGBA, non-interlaced\012- data
Hash a740eb208fbdb9704f67d03e34bf1e8a
b2fe2630d5ebb7bda6f776d1c6856a1c26c4abaf
551c9a260933f329cad81fa6c9cf3533345445083e2df7119f5cc943ba909aa9
GET /king-assets.yampi.me/dooki/62faee62d5a91/62faee62d5a97.png HTTP/1.1
Host: s3.sa-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: rKvfbSzxFg75oJUchr4BRRk6DaHbizNWvA6mY/mlSueLXutqo7qLU4jGqofQ/y1MF3WuWmKP9uM=
x-amz-request-id: HMRVYKC02K37TFWG
Date: Tue, 06 Sep 2022 21:57:49 GMT
Last-Modified: Tue, 16 Aug 2022 01:09:55 GMT
ETag: "a740eb208fbdb9704f67d03e34bf1e8a"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 7445
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 904
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Cookie: _ttp=2EPe67HF6jQ5jKn5gQfTlxvATvf
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 2022090621574840CA11DC5B75455689B0
x-tt-trace-host: 014c3d3a48b720cad047ee4725ef00c61e44307b2314520c7a2b075ae2e3eda4b0723b1cdd760d1c8b4b866e4b2444741cc0045989c0e0b66bdad8f921928be1310413d76da90b2d52b3b1df2b604ca62ff51a359be7a1f9141d7bb18d24e952cb
x-origin-response-time: 15,184.27.45.52
x-akamai-request-id: 3e7755a5.52b2fdb8
expires: Tue, 06 Sep 2022 21:57:48 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 06 Sep 2022 21:57:48 GMT
x-cache: TCP_MISS from a104-84-152-231.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
x-cache-remote: TCP_MISS from a184-27-45-52.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=120, origin; dur=15, inner; dur=12
x-parent-response-time: 130,104.84.152.231
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js
200 OK 158 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js
IP
File type HTML document, ASCII text, with very long lines (579)
Size 158 kB (158056 bytes)
Hash d63a69f898e1d00cfc7c871744ded8c4
e166540eccb571c95c8c1135c2168cf5df306991
ed7892ca1498d6dfc0ff8b354ab8c409eed81b1fa77b427467815d0c7f45021c
GET /recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158056
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 21:31:14 GMT
expires: Sat, 02 Sep 2023 21:31:14 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Sep 2022 18:40:58 GMT
content-type: text/javascript
age: 347194
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 928
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Cookie: _ttp=2EPe67HF6jQ5jKn5gQfTlxvATvf
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 2022090621574808EC885743F01E54EBE0
x-tt-trace-host: 014c3d3a48b720cad047ee4725ef00c61e44307b2314520c7a2b075ae2e3eda4b0723b1cdd760d1c8b4b866e4b2444741caa642a51ae35cc05e530790013ec19d2df42486256c075329ef7fdd523776fb63644903e4f0f2ff5ce1edcb3bb7ad120
x-origin-response-time: 28,184.27.45.52
x-akamai-request-id: 3e775546.52b2fdbf
expires: Tue, 06 Sep 2022 21:57:48 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 06 Sep 2022 21:57:48 GMT
x-cache: TCP_MISS from a104-84-152-231.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
x-cache-remote: TCP_MISS from a184-27-45-52.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=111, origin; dur=28, inner; dur=17
x-parent-response-time: 134,104.84.152.231
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 51793b7aca12e07c707f923e821c3231
8aecbe01ed606227ff1d7c5684f4ca82e5016bf9
a3a7bcdc8076b46d7c77ae9a4b22a064de07b296c9e18070aaed7ad9c8fdef8b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
seguro.marazul-tech.com/cart/recomm
200 OK 55 kB URL HTTP/2 seguro.marazul-tech.com/cart/recomm
IP
ASN #266444 3L CLOUD INTERNET SERVICES LTDA - EPP
Hash 12f0e309415e78f8d643e34faf4b2ef8
1c6750c6fadd10ff6450852fe5458bd87f57a8bd
6c8b5e9c25adcec742026a58519bdac5890c9ed63b7226947a4a2ecc062fba44
Analyzer Verdict Alert fortinet Phishing
GET /cart/recomm HTTP/1.1
Host: seguro.marazul-tech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg8EVFRXARAJVldbDwQGVVU=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI5MzUyNDkiLCJhcCI6IjExMzQxNzA4MjMiLCJpZCI6ImIzMTI5MTY1ZjU1YjMyNjEiLCJ0ciI6ImE4ZDdmMjIwMmU0MGJlZDlhYjlkM2Y4ODVjMGZmNDIxIiwidGkiOjE2NjI1MDE0NjIwNzV9fQ==
traceparent: 00-a8d7f2202e40bed9ab9d3f885c0ff421-b3129165f55b3261-01
tracestate: 2935249@nr=0-1-2935249-1134170823-b3129165f55b3261----1662501462075
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/checkout/payment?utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10
Cookie: XSRF-TOKEN=eyJpdiI6ImJteFBaS0pvb1BsblpXM0JaXC83RWZnPT0iLCJ2YWx1ZSI6IktXNlJMOFRja3M0dWFlOUFGWDN3MThvXC9iRzBpVkZuVkN6WTFTNTZ3cHZaTWl2SFArRk5LTXZKMlZoN3VCOUZkMytKaFRyNGxcL05ZOTNWR1Z5UExXOEE9PSIsIm1hYyI6ImQ1ZThhOTBmODI2ZWFjOTI4NDJiNjY2OTIzYjY1ZDUwMDk5ZTk2M2QxYzg3YmU1MjBiZGE1OTMwNGNiYzA5ZDIifQ%3D%3D; bubbstore_checkout=eyJpdiI6ImdhXC8wbUk3RHJSZk9wcCtYNWNadWRnPT0iLCJ2YWx1ZSI6IkdoVDc0cjFaZzc2Y01oUUxYbU9wTGQ4RUZIN1RvZGF3bkt0N29MYUs3aUduUGN1NGUxR0h3TzMzMHVrbzBhZnlOcWlHSnBUZEtyeHJIbzFlMXdLZ05RPT0iLCJtYWMiOiJmYzFmNmY4NjgyMDlhNTQzMzI5YWI3YjUxZTVkNmNjZTFlMWNlNDBkOTc4ZTNlNjI5NTI3ODQ2NDk2MzQ0NmQ5In0%3D; marazul-tech_cart=eyJpdiI6IjdtSDBGaUlUUXpIOVhnVkdjRlAxWFE9PSIsInZhbHVlIjoiNldtRm1ib0U2OGdLY1wvMFwvaitoQVhaTVlqbm5hZlBzNUJtZ05SUFRMUlVkbVZsVStzV09saThId1pVYmF2TDhtMHJTSmdjbDlYNFRUbWtDR00rMVlqdz09IiwibWFjIjoiOGMxZDI2ZDFiZmMxMGE0MTBiMDY0MTg3YzE5MDU3NWVkZDVkZDMwNjRmNWZmZGVhNGIxNmM5ZWQ2Y2EwNDBjMSJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:48 GMT
content-type: application/json
x-protected-by: Sqreen
access-control-allow-origin: *
set-cookie: XSRF-TOKEN=eyJpdiI6IlBuNlZkR3hrcWx4QXQ4Yk9JYVRabmc9PSIsInZhbHVlIjoidGc4VHplMEt0ZytXb3pQclRvNU93U2F1WEY2SVJtN3FNV05SQTBTakJKNEVjNjlOSWdOZXJlZFJPN1wvRjY3bVBaMmxsMTNBQkpremo1MkN4OFNFYTF3PT0iLCJtYWMiOiI0ZTliMjYwZjcyYjM5MGMzNWE1MWNhODJlMzZjMGRhZDlmZWY4ODgxYWI4OTZkNDYwYTZkYTk2ODY3NWZjMzdiIn0%3D; expires=Wed, 07-Sep-2022 00:57:48 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6IjRzb3dza1dwT1hZMGV1OThlU0JWV0E9PSIsInZhbHVlIjoiSXUwMHJlckozVDZwTThMcEVuSnpUVE5PMytUYkRPXC8wdjNEaW9RSTZZZDAwTmVrRk1iZXJONjlDaTNGanNXSUZiMnlOQ1pcL2krZjBtZGpDXC9rbk1WY0E9PSIsIm1hYyI6ImViZDUxZTY1MzQ3ZjNiOWEyMWFkMTFhMWU0NmQxZmZkMjY3MjQ5YzBkZDY2ZmI0Y2Y2NjliY2Q1ZDc0MjE0MDAifQ%3D%3D; expires=Wed, 07-Sep-2022 00:57:48 GMT; Max-Age=10800; path=/; httponly
x-newrelic-app-data: PxQFWFVWCgcJR1hQAQgPU1UCBxFORDQHUjZKA1ZLVVFHDFYPbU5yARBfWA86TFtSQhBPEFJSWAsJExoDTFZTUgBSFFIWCAcEAVYVTABNEVoAAQ5ZVlFaUANdVFYPVVRESFdXXxEDPg==
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
seguro.marazul-tech.com/cart/promocode/store
200 OK 39 kB URL HTTP/2 seguro.marazul-tech.com/cart/promocode/store
IP
ASN #266444 3L CLOUD INTERNET SERVICES LTDA - EPP
File type JSON data\012- , ASCII text, with very long lines (60736)
Hash a88f0708a6d276f512c96d6298308021
97efb832113836420d7462f2dab39a7d670eee7a
f0bd167f36180645f546017f77cbc6e840adc01cceae14d3328c08043e23b2dc
Analyzer Verdict Alert fortinet Phishing
POST /cart/promocode/store HTTP/1.1
Host: seguro.marazul-tech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg8EVFRXARAJVldbDwQGVVU=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI5MzUyNDkiLCJhcCI6IjExMzQxNzA4MjMiLCJpZCI6IjEyMjY2ZWU4NTdhYTk4NTciLCJ0ciI6IjhiODc4ODlhYjE0ZmVlOGFiYjlkMzgxNGMxNjVjZjE5IiwidGkiOjE2NjI1MDE0NjIwNzJ9fQ==
traceparent: 00-8b87889ab14fee8abb9d3814c165cf19-12266ee857aa9857-01
tracestate: 2935249@nr=0-1-2935249-1134170823-12266ee857aa9857----1662501462072
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 63
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/checkout/payment?utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10
Cookie: XSRF-TOKEN=eyJpdiI6ImJteFBaS0pvb1BsblpXM0JaXC83RWZnPT0iLCJ2YWx1ZSI6IktXNlJMOFRja3M0dWFlOUFGWDN3MThvXC9iRzBpVkZuVkN6WTFTNTZ3cHZaTWl2SFArRk5LTXZKMlZoN3VCOUZkMytKaFRyNGxcL05ZOTNWR1Z5UExXOEE9PSIsIm1hYyI6ImQ1ZThhOTBmODI2ZWFjOTI4NDJiNjY2OTIzYjY1ZDUwMDk5ZTk2M2QxYzg3YmU1MjBiZGE1OTMwNGNiYzA5ZDIifQ%3D%3D; bubbstore_checkout=eyJpdiI6ImdhXC8wbUk3RHJSZk9wcCtYNWNadWRnPT0iLCJ2YWx1ZSI6IkdoVDc0cjFaZzc2Y01oUUxYbU9wTGQ4RUZIN1RvZGF3bkt0N29MYUs3aUduUGN1NGUxR0h3TzMzMHVrbzBhZnlOcWlHSnBUZEtyeHJIbzFlMXdLZ05RPT0iLCJtYWMiOiJmYzFmNmY4NjgyMDlhNTQzMzI5YWI3YjUxZTVkNmNjZTFlMWNlNDBkOTc4ZTNlNjI5NTI3ODQ2NDk2MzQ0NmQ5In0%3D; marazul-tech_cart=eyJpdiI6IjdtSDBGaUlUUXpIOVhnVkdjRlAxWFE9PSIsInZhbHVlIjoiNldtRm1ib0U2OGdLY1wvMFwvaitoQVhaTVlqbm5hZlBzNUJtZ05SUFRMUlVkbVZsVStzV09saThId1pVYmF2TDhtMHJTSmdjbDlYNFRUbWtDR00rMVlqdz09IiwibWFjIjoiOGMxZDI2ZDFiZmMxMGE0MTBiMDY0MTg3YzE5MDU3NWVkZDVkZDMwNjRmNWZmZGVhNGIxNmM5ZWQ2Y2EwNDBjMSJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:48 GMT
content-type: application/json
x-protected-by: Sqreen
access-control-allow-origin: *
set-cookie: XSRF-TOKEN=eyJpdiI6IktOU1FwXC9lOFwvSlFIWVgzXC85cTZxeXc9PSIsInZhbHVlIjoiNzVtZHRUcytlV3hnK3lDYVlnY3prTU5WRFg5T1VTa2dPcU5WRklXYm02bitZUDkxdVl0ZHRQMW1raWZUTTFYMHQ2Skg4TG1OOFRBa3BuZStRR0xIQmc9PSIsIm1hYyI6IjQyNDI5MGU2ZDdhYTQ4NTIxMTk4MzE2NjE3MWMwMDM5YWQ2YmIyMWIzMTNlY2RjOTI5OWNlYWExZTM1MjE0ODYifQ%3D%3D; expires=Wed, 07-Sep-2022 00:57:48 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6IjhsVVo3YlwvSmlRc1pPV0ZtdnRTZ2Z3PT0iLCJ2YWx1ZSI6Ik13RVlwbTZkVzZUV2JOWlVGMVhKZFwvSHhKXC9Qb1wvOWNvaUR2MGRwcEhnNGtkWllPeWorVEdSRCtZeXorVVI0XC85OHhcL1gwb0k3allKXC9sY0VUcGFiUXNRPT0iLCJtYWMiOiI3YWI4YTI0YTFmYjMzODMyMzBkOGE2MGNjY2MzNzU3NjM1NTJhYjJiZTZhZDAzY2QzNDYxMWM4NGU1NDE1NWQ5In0%3D; expires=Wed, 07-Sep-2022 00:57:48 GMT; Max-Age=10800; path=/; httponly
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 393 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (379)
Hash 465f1eb58f0ecc5ffe55a96a7ba621d5
25e4030f31f3a5220f1e89af55058aaba051744f
d0793f4d7e7bf9f03926e21457d85d1cb0808927b99801451eb985cb8701eb0b
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Sep 2022 21:57:48 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S285824674%3A1662501468864533&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQN2RmXUIdmP2g593lLBiq7n3psddWkRPN9u9Siraj02FWj0Zw-l3B43tLcv6kk-aCAkOwsx9vXVmQ
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-wd1WvPX4V8Iki0TIWjY1_w' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 393
server: GSE
set-cookie: __Host-GAPS=1:qB225WBzINQ5RdehpK5axVapZaQLIQ:uCqCO2SsF1NbdyCz;Path=/;Expires=Thu, 05-Sep-2024 21:57:48 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0b218225171cae57237cd71ae6f3347b
821f6cda5bf110fad5777736e92a27db636d488c
1372a445d0f8e9b0b2b3abb6762ca5ec3867bb42928aa2f7ed84a47f660f3c59
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 781
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:48 GMT
Last-Modified: Tue, 06 Sep 2022 21:44:48 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
www.mercadolibre.com/jms/lgz/background/etid
200 OK 0 B URL HTTP/2 www.mercadolibre.com/jms/lgz/background/etid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jms/lgz/background/etid HTTP/1.1
Host: www.mercadolibre.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 0
date: Tue, 06 Sep 2022 21:57:48 GMT
server: Tengine
set-cookie: _d2id=95d83496-980a-44a5-829a-777f37cb2e8e-n; Path=/; Domain=.mercadolibre.com; Expires=Wed, 06 Sep 2023 21:57:48 GMT
access-control-allow-origin: *
access-control-expose-headers: Etag
etag: 6c5fb2a2-55a6-47f0-a251-d44c95787044-1662501468873
cache-control: private, must-revalidate, proxy-revalidate
x-envoy-upstream-service-time: 2
x-envoy-decorator-operation: production.auth-device-profiles-frontend.melifrontends.com
x-request-id: 95d83496-980a-44a5-829a-777f37cb2e8e
x-request-device-id: 95d83496-980a-44a5-829a-777f37cb2e8e
x-d2id: 95d83496-980a-44a5-829a-777f37cb2e8e
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-cache: Miss from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nvjE-7blbjQWW44gyn0dnEPh7JMLrkFaM6m-HSY-02lkSeX0_cdWOQ==
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 930
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Cookie: _ttp=2EPe67HF6jQ5jKn5gQfTlxvATvf
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 2022090621574856186B62BA39E064E890
x-tt-trace-host: 014c3d3a48b720cad047ee4725ef00c61e1ac589af1e61ca0f723803db67722fc1b34449b9038fdca36a4f25fba41ce57c5309134919c86ffbd488da52359db8c93aed4c829cffcbb2cb17041372b18810da44ee8c9ac58c867220b3c11889ba69
x-origin-response-time: 37,23.40.17.146
x-akamai-request-id: 309003fa.52b2fdbc
expires: Tue, 06 Sep 2022 21:57:48 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 06 Sep 2022 21:57:48 GMT
x-cache: TCP_MISS from a104-84-152-231.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
x-cache-remote: TCP_MISS from a23-40-17-146.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=306, origin; dur=37, inner; dur=13
x-parent-response-time: 343,104.84.152.231
X-Firefox-Spdy: h2
s3.sa-east-1.amazonaws.com/king-assets.yampi.me/dooki/61200f04b9c5f/61200f04b9c64.png
200 OK 7.6 kB URL HTTP/1.1 s3.sa-east-1.amazonaws.com/king-assets.yampi.me/dooki/61200f04b9c5f/61200f04b9c64.png
IP
File type PNG image data, 272 x 272, 8-bit/color RGBA, non-interlaced\012- data
Hash 78e60acf5aba1d62b42cd34ffc212c10
0c50523cff991a160be8a59f1cde129defe4309d
c30cf70847312573a625791046e9ba429d8b2441350500044aa3e2da67318394
GET /king-assets.yampi.me/dooki/61200f04b9c5f/61200f04b9c64.png HTTP/1.1
Host: s3.sa-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: RSKxK6cXFwtqXHtnlokgk7h8YneO1S4mHOz3aUO12vrx38loEbrV3adyetszV65jgywJlchF9iI=
x-amz-request-id: HMRP5PJGFGGFC9BN
Date: Tue, 06 Sep 2022 21:57:49 GMT
Last-Modified: Fri, 20 Aug 2021 20:22:29 GMT
ETag: "78e60acf5aba1d62b42cd34ffc212c10"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 7647
www.mercadolibre.com/jms/lgz/background/etid
200 OK 0 B URL HTTP/2 www.mercadolibre.com/jms/lgz/background/etid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jms/lgz/background/etid HTTP/1.1
Host: www.mercadolibre.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
If-None-Match: 6c5fb2a2-55a6-47f0-a251-d44c95787044-1662501468873
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 0
date: Tue, 06 Sep 2022 21:57:49 GMT
server: Tengine
set-cookie: _d2id=3a46b66c-c562-4224-a37f-7cb8f2494210-n; Path=/; Domain=.mercadolibre.com; Expires=Wed, 06 Sep 2023 21:57:49 GMT
access-control-allow-origin: *
access-control-expose-headers: Etag
etag: 6c5fb2a2-55a6-47f0-a251-d44c95787044-1662501468873
cache-control: private, must-revalidate, proxy-revalidate
x-envoy-upstream-service-time: 2
x-envoy-decorator-operation: production.auth-device-profiles-frontend.melifrontends.com
x-request-id: 3a46b66c-c562-4224-a37f-7cb8f2494210
x-request-device-id: 3a46b66c-c562-4224-a37f-7cb8f2494210
x-d2id: 3a46b66c-c562-4224-a37f-7cb8f2494210
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-cache: Miss from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: oONC_xuuMDErRJZFtIrlDbwDSaXHm44YMYa_lkluYdHlDJANJ99I9g==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 10585eccdd73117e0bc71ecaf1cd02cb
7bda7ff7308cac8c8824a5a558097a15a2325f5e
6303f8b80751e64006c77524615f10709b136b0606695feb0f51b964e0c2163d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 10585eccdd73117e0bc71ecaf1cd02cb
7bda7ff7308cac8c8824a5a558097a15a2325f5e
6303f8b80751e64006c77524615f10709b136b0606695feb0f51b964e0c2163d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-45745009-5&cid=165655034.1662501463&jid=1015975251&gjid=1063546888&_gid=1040485019.1662501463&_u=IEHAAEATAAAAAC~&z=1537922723
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-45745009-5&cid=165655034.1662501463&jid=1015975251&gjid=1063546888&_gid=1040485019.1662501463&_u=IEHAAEATAAAAAC~&z=1537922723
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-45745009-5&cid=165655034.1662501463&jid=1015975251&gjid=1063546888&_gid=1040485019.1662501463&_u=IEHAAEATAAAAAC~&z=1537922723 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://seguro.marazul-tech.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 06 Sep 2022 21:57:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-223946953-1&cid=165655034.1662501463&jid=860615467&gjid=1246702871&_gid=1040485019.1662501463&_u=IEBAAEASAAAAAC~&z=203460885
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-223946953-1&cid=165655034.1662501463&jid=860615467&gjid=1246702871&_gid=1040485019.1662501463&_u=IEBAAEASAAAAAC~&z=203460885
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-223946953-1&cid=165655034.1662501463&jid=860615467&gjid=1246702871&_gid=1040485019.1662501463&_u=IEBAAEASAAAAAC~&z=203460885 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://seguro.marazul-tech.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 06 Sep 2022 21:57:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 10585eccdd73117e0bc71ecaf1cd02cb
7bda7ff7308cac8c8824a5a558097a15a2325f5e
6303f8b80751e64006c77524615f10709b136b0606695feb0f51b964e0c2163d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
seguro.marazul-tech.com/cart/orderbump/79645/view
200 OK 95 B URL HTTP/2 seguro.marazul-tech.com/cart/orderbump/79645/view
IP
ASN #266444 3L CLOUD INTERNET SERVICES LTDA - EPP
Hash 144ff134511e7e1f2bc32fa758fbd82c
aad690a47714a8ea895aed5449ce268087f301b4
ef2fddbf9dfc7908fd7ca97cbc800e63a48f738a0dd9fad2f891ca36d7851625
Analyzer Verdict Alert fortinet Phishing
POST /cart/orderbump/79645/view HTTP/1.1
Host: seguro.marazul-tech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg8EVFRXARAJVldbDwQGVVU=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI5MzUyNDkiLCJhcCI6IjExMzQxNzA4MjMiLCJpZCI6ImZmOTA0NTUxMjFkNzhlMTEiLCJ0ciI6Ijg2NjIwNTI4ZjVlMzgwNjNjYzg0MjMzZGNkNjRiMjk4IiwidGkiOjE2NjI1MDE0NjM2NTN9fQ==
traceparent: 00-86620528f5e38063cc84233dcd64b298-ff90455121d78e11-01
tracestate: 2935249@nr=0-1-2935249-1134170823-ff90455121d78e11----1662501463653
X-Requested-With: XMLHttpRequest
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/checkout/payment?utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10
Cookie: XSRF-TOKEN=eyJpdiI6IlJRRTVTK0ZcL09Gc0VKdzQ0cGphMWt3PT0iLCJ2YWx1ZSI6IjIxVXBiYkhIYmpxUWJHM0g0V0Y0WWlnM3ZzT1huKzVvT1RXVDRLb3lxRHlzS05keWkrOHVwemEzZ2tYTEhtS0JUZ0lwajBScXdvMmlhMkltWlZ6a3ZnPT0iLCJtYWMiOiI0NWUwODgxZDI1NDJkZWNkNmQ0NzM1MDk5ZTEyMWJkNmM3NjU1MjBlNzJkNjk4OTI4YzNlZDNjZTc5NTM1ODVkIn0%3D; bubbstore_checkout=eyJpdiI6IkZ0NG13UmJwOE9DRDRrSFhJM0ZFTlE9PSIsInZhbHVlIjoiWDZtVmRtK0dtWHV2Yk5BbnhTempldExTU1Qya2RDNXNUeWNXRlJJNmhtUWlwamNyTGR3a1FhT3ZMYnY1QU5CY3NsRjA5SFdwSkF5SzZaMTlJWGFGZnc9PSIsIm1hYyI6IjVlNjRiNmM1YTE4NjBlM2E2YmU4NDczMDExZjkwYjZmMjkyM2JkN2ViYzNiMTYzYTZkMGI1MTY1ZmFiZDc0YTAifQ%3D%3D; marazul-tech_cart=eyJpdiI6IjdtSDBGaUlUUXpIOVhnVkdjRlAxWFE9PSIsInZhbHVlIjoiNldtRm1ib0U2OGdLY1wvMFwvaitoQVhaTVlqbm5hZlBzNUJtZ05SUFRMUlVkbVZsVStzV09saThId1pVYmF2TDhtMHJTSmdjbDlYNFRUbWtDR00rMVlqdz09IiwibWFjIjoiOGMxZDI2ZDFiZmMxMGE0MTBiMDY0MTg3YzE5MDU3NWVkZDVkZDMwNjRmNWZmZGVhNGIxNmM5ZWQ2Y2EwNDBjMSJ9; __ana_uid=1-pmzbd5jt-l7qqg22v; __ana_utm={"utm_source":"SMS","utm_campaign":"Carrinho Abandonado 1"}; recommendationLoaded=true; _tt_enable_cookie=1; _ttp=572dfe12-535b-4dbf-aa4f-4c4f93b961e5; _ga=GA1.2.165655034.1662501463; _gid=GA1.2.1040485019.1662501463; _gat=1; _ga=GA1.3.165655034.1662501463; _gid=GA1.3.1040485019.1662501463; _gat_bubbTracker=1; _gat_checkout=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:49 GMT
content-type: application/json
x-protected-by: Sqreen
access-control-allow-origin: *
set-cookie: XSRF-TOKEN=eyJpdiI6Im5mZmxVdkFxNVhoaExvSkZvRUlsUGc9PSIsInZhbHVlIjoiZlp4VVBHbjNwRjA1OUY3UkhadWtmWUVIenMwT1BPUkpZSVc0Z1p5cG1WZkhoOUx3TWFKVVJcL2xTUyszQ2dmMTBDVzVicHBTNWo4NE56YWFjMldaZElRPT0iLCJtYWMiOiI5NGI5NTRjYThiNTQ2N2MwNGYyNmI3NDZjOGNiMWI2MzQxNjg1NjNmMzViMTZjNDk5MzQ2MjBmODc2ZWQ3NzJhIn0%3D; expires=Wed, 07-Sep-2022 00:57:49 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6IkpWREpmN0MycHdyd09iN2lhbnByUkE9PSIsInZhbHVlIjoidGlBWlJvM0JOaUZrXC9hMURoQVhOdWdYQWxPWnJNRkZ5K0pmeXUydzdDNURlYVdQMGxPaHg4U2JsY2FKR2VlWWhQeTJ3Z3p4d09cL3IxXC9cL1VsWGN0SllBPT0iLCJtYWMiOiI4YjA0ZTg5YzMyYTA0ZTNjY2QyNjUzNzM4NzZlNjgxNWIxM2UzOWU3OGI5OWU1MzNkYWRhYTNhMjA3OTY4NTgwIn0%3D; expires=Wed, 07-Sep-2022 00:57:49 GMT; Max-Age=10800; path=/; httponly
x-newrelic-app-data: PxQFWFVWCgcJR1hQAQgPU1UCBxFORDQHUjZKA1ZLVVFHDFYPbU5yARBfWA86TFtSQhBPDUVVUhQGRFtDTBAKB0dAFFIWCAQCA1UVUR9QC1ZTDhtMV08aBVJdVFEGBwRWVgEDBldUVUAcBFkOS11p
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
seguro.marazul-tech.com/e/t
200 OK 492 B URL HTTP/2 seguro.marazul-tech.com/e/t
IP
ASN #266444 3L CLOUD INTERNET SERVICES LTDA - EPP
Hash b0c23906993cfc1f8e4ca44d47c624ab
9044df80958d8c3f2f38c78ef076ab4193f5332f
1f60c75e97a623521a81f1aab986cf7320cdd3a3b87111dcf2a62e744fa7d722
Analyzer Verdict Alert fortinet Phishing
POST /e/t HTTP/1.1
Host: seguro.marazul-tech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg8EVFRXARAJVldbDwQGVVU=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI5MzUyNDkiLCJhcCI6IjExMzQxNzA4MjMiLCJpZCI6IjhiMmZlNjkxOTQwMmRlYjUiLCJ0ciI6Ijk5NTQwNmFlMDkxZjcyMDAyZmZiYjc0YjZjNGMzNTU0IiwidGkiOjE2NjI1MDE0NjM1MTh9fQ==
traceparent: 00-995406ae091f72002ffbb74b6c4c3554-8b2fe6919402deb5-01
tracestate: 2935249@nr=0-1-2935249-1134170823-8b2fe6919402deb5----1662501463518
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 369
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/checkout/payment?utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10
Cookie: XSRF-TOKEN=eyJpdiI6IlJRRTVTK0ZcL09Gc0VKdzQ0cGphMWt3PT0iLCJ2YWx1ZSI6IjIxVXBiYkhIYmpxUWJHM0g0V0Y0WWlnM3ZzT1huKzVvT1RXVDRLb3lxRHlzS05keWkrOHVwemEzZ2tYTEhtS0JUZ0lwajBScXdvMmlhMkltWlZ6a3ZnPT0iLCJtYWMiOiI0NWUwODgxZDI1NDJkZWNkNmQ0NzM1MDk5ZTEyMWJkNmM3NjU1MjBlNzJkNjk4OTI4YzNlZDNjZTc5NTM1ODVkIn0%3D; bubbstore_checkout=eyJpdiI6IkZ0NG13UmJwOE9DRDRrSFhJM0ZFTlE9PSIsInZhbHVlIjoiWDZtVmRtK0dtWHV2Yk5BbnhTempldExTU1Qya2RDNXNUeWNXRlJJNmhtUWlwamNyTGR3a1FhT3ZMYnY1QU5CY3NsRjA5SFdwSkF5SzZaMTlJWGFGZnc9PSIsIm1hYyI6IjVlNjRiNmM1YTE4NjBlM2E2YmU4NDczMDExZjkwYjZmMjkyM2JkN2ViYzNiMTYzYTZkMGI1MTY1ZmFiZDc0YTAifQ%3D%3D; marazul-tech_cart=eyJpdiI6IjdtSDBGaUlUUXpIOVhnVkdjRlAxWFE9PSIsInZhbHVlIjoiNldtRm1ib0U2OGdLY1wvMFwvaitoQVhaTVlqbm5hZlBzNUJtZ05SUFRMUlVkbVZsVStzV09saThId1pVYmF2TDhtMHJTSmdjbDlYNFRUbWtDR00rMVlqdz09IiwibWFjIjoiOGMxZDI2ZDFiZmMxMGE0MTBiMDY0MTg3YzE5MDU3NWVkZDVkZDMwNjRmNWZmZGVhNGIxNmM5ZWQ2Y2EwNDBjMSJ9; __ana_uid=1-pmzbd5jt-l7qqg22v; __ana_utm={"utm_source":"SMS","utm_campaign":"Carrinho Abandonado 1"}; recommendationLoaded=true; _tt_enable_cookie=1; _ttp=572dfe12-535b-4dbf-aa4f-4c4f93b961e5; _ga=GA1.2.165655034.1662501463; _gid=GA1.2.1040485019.1662501463; _gat=1; _ga=GA1.3.165655034.1662501463; _gid=GA1.3.1040485019.1662501463; _gat_bubbTracker=1; _gat_checkout=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:49 GMT
content-type: text/html; charset=UTF-8
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6IlBiNEZubndGZEk0K0N5UDNtdFAzcUE9PSIsInZhbHVlIjoiYklIRHl0SG9mMUZkUHJOQ3hFZm84RUZRbzlYMnNLK01VMU1VNHh0YTA2Vk40aW90VjUxRkY5ZHhoWDBWMTE3TG4xWmxHSzRtTHdkc2RCTUFON0E5amc9PSIsIm1hYyI6ImU4MWEyMGU5NTBlMmZlNmY4YTA1NmI2ODFhYWQ4MTY1NmU4N2QwYmZkNWVjMzAyNGIxODcwNTNhOGFmMWQxYzEifQ%3D%3D; expires=Wed, 07-Sep-2022 00:57:49 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6ImZDVVVEYlRTNzVHSklpbDlaYmRVZWc9PSIsInZhbHVlIjoiN3pYdzEwTzg5RzBUc0dIZERLTVVaanpWZzBCakYyUVBRQ01BYzFxd1djMkluc3dtcVFwSTllN0NWc2d0SEQ5ZVdWNUNyR2hWcnE2cDBRRUZUbmtsaXc9PSIsIm1hYyI6IjU5NzIwNGE1OWE1MzA1OGE1YmQ1ZGFlMDZlZjc1ZGVlZWJiZjllOGQ0ODAxZWQ0YTk2MzBhNGVjOGZkOTM5NzAifQ%3D%3D; expires=Wed, 07-Sep-2022 00:57:49 GMT; Max-Age=10800; path=/; httponly
x-newrelic-app-data: PxQFWFVWCgcJR1hQAQgPU1UCBxFORDQHUjZKA1ZLVVFHDFYPbU5yARBfWA86THlDQDg9KkNFRzo4clldFhQMDlwHShFkZGRTVABKIl4PRxALWlsEFCNMQVEHCgtZVhVKVB8GA1JWU04ATAtQCgoHHh5UFUMIA1BbUAUCV1UHCVADVlAAFR1RBwhCU24=
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-223946953-1&cid=165655034.1662501463&jid=860615467&_u=IEBAAEASAAAAAC~&z=758303138
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-223946953-1&cid=165655034.1662501463&jid=860615467&_u=IEBAAEASAAAAAC~&z=758303138
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-223946953-1&cid=165655034.1662501463&jid=860615467&_u=IEBAAEASAAAAAC~&z=758303138 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Sep 2022 21:57:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f53ebd30fa3351f320ca2c8764734ff1
9205e35b1cef1602414af2350ba6205f4129234c
d486cc21bbc47eac5718644e1b280d12a5a4bc92ec97a0e88f184bf6422cb6f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=4844011979027226&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465476&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=4844011979027226&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465476&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=4844011979027226&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465476&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Tue, 06 Sep 2022 21:57:51 GMT
expires: Tue, 06 Sep 2022 21:57:51 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=390733156029393&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465478&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=390733156029393&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465478&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=390733156029393&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465478&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Tue, 06 Sep 2022 21:57:51 GMT
expires: Tue, 06 Sep 2022 21:57:51 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=396677952527107&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465506&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_0pyonipkc&tm=1&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=396677952527107&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465506&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_0pyonipkc&tm=1&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=396677952527107&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465506&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_0pyonipkc&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
date: Tue, 06 Sep 2022 21:57:51 GMT
expires: Tue, 06 Sep 2022 21:57:51 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=3230749553845220&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465486&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=3230749553845220&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465486&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=3230749553845220&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465486&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
date: Tue, 06 Sep 2022 21:57:51 GMT
expires: Tue, 06 Sep 2022 21:57:51 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1077799112828374&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465489&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=1077799112828374&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465489&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=1077799112828374&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465489&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
date: Tue, 06 Sep 2022 21:57:51 GMT
expires: Tue, 06 Sep 2022 21:57:51 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=396677952527107&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465491&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=396677952527107&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465491&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=396677952527107&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465491&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
date: Tue, 06 Sep 2022 21:57:51 GMT
expires: Tue, 06 Sep 2022 21:57:51 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=4844011979027226&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465492&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_7ktvisqk2&tm=1&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=4844011979027226&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465492&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_7ktvisqk2&tm=1&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=4844011979027226&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465492&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_7ktvisqk2&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
date: Tue, 06 Sep 2022 21:57:51 GMT
expires: Tue, 06 Sep 2022 21:57:51 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=390733156029393&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465495&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_i8l4fsp2x&tm=1&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=390733156029393&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465495&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_i8l4fsp2x&tm=1&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=390733156029393&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465495&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_i8l4fsp2x&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
date: Tue, 06 Sep 2022 21:57:51 GMT
expires: Tue, 06 Sep 2022 21:57:51 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=4879508188843032&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465497&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_vrpdknzos&tm=1&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=4879508188843032&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465497&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_vrpdknzos&tm=1&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=4879508188843032&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465497&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_vrpdknzos&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
date: Tue, 06 Sep 2022 21:57:51 GMT
expires: Tue, 06 Sep 2022 21:57:51 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=2509278342537416&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465499&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_t06ntg8jc&tm=1&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=2509278342537416&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465499&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_t06ntg8jc&tm=1&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=2509278342537416&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465499&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_t06ntg8jc&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
date: Tue, 06 Sep 2022 21:57:51 GMT
expires: Tue, 06 Sep 2022 21:57:51 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
seguro.marazul-tech.com/e/t
200 OK 64 B URL HTTP/2 seguro.marazul-tech.com/e/t
IP
ASN #266444 3L CLOUD INTERNET SERVICES LTDA - EPP
Hash 962f856c45d98c03563c29987a40115a
34ace4bb8368ba5591acd940424ace5ac57f6a75
106b464495f5af69690e3941d75482902ffc2148bee861e0e7080042db990309
Analyzer Verdict Alert fortinet Phishing
POST /e/t HTTP/1.1
Host: seguro.marazul-tech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg8EVFRXARAJVldbDwQGVVU=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI5MzUyNDkiLCJhcCI6IjExMzQxNzA4MjMiLCJpZCI6ImE1M2I5YTczODY5OGNkMTQiLCJ0ciI6ImQyNThlYTM2YmY3ZmQ4ZmU5ZWU1Y2E2Njg4Nzc0NGI2IiwidGkiOjE2NjI1MDE0NjIwODR9fQ==
traceparent: 00-d258ea36bf7fd8fe9ee5ca66887744b6-a53b9a738698cd14-01
tracestate: 2935249@nr=0-1-2935249-1134170823-a53b9a738698cd14----1662501462084
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 365
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/checkout/payment?utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10
Cookie: XSRF-TOKEN=eyJpdiI6ImJteFBaS0pvb1BsblpXM0JaXC83RWZnPT0iLCJ2YWx1ZSI6IktXNlJMOFRja3M0dWFlOUFGWDN3MThvXC9iRzBpVkZuVkN6WTFTNTZ3cHZaTWl2SFArRk5LTXZKMlZoN3VCOUZkMytKaFRyNGxcL05ZOTNWR1Z5UExXOEE9PSIsIm1hYyI6ImQ1ZThhOTBmODI2ZWFjOTI4NDJiNjY2OTIzYjY1ZDUwMDk5ZTk2M2QxYzg3YmU1MjBiZGE1OTMwNGNiYzA5ZDIifQ%3D%3D; bubbstore_checkout=eyJpdiI6ImdhXC8wbUk3RHJSZk9wcCtYNWNadWRnPT0iLCJ2YWx1ZSI6IkdoVDc0cjFaZzc2Y01oUUxYbU9wTGQ4RUZIN1RvZGF3bkt0N29MYUs3aUduUGN1NGUxR0h3TzMzMHVrbzBhZnlOcWlHSnBUZEtyeHJIbzFlMXdLZ05RPT0iLCJtYWMiOiJmYzFmNmY4NjgyMDlhNTQzMzI5YWI3YjUxZTVkNmNjZTFlMWNlNDBkOTc4ZTNlNjI5NTI3ODQ2NDk2MzQ0NmQ5In0%3D; marazul-tech_cart=eyJpdiI6IjdtSDBGaUlUUXpIOVhnVkdjRlAxWFE9PSIsInZhbHVlIjoiNldtRm1ib0U2OGdLY1wvMFwvaitoQVhaTVlqbm5hZlBzNUJtZ05SUFRMUlVkbVZsVStzV09saThId1pVYmF2TDhtMHJTSmdjbDlYNFRUbWtDR00rMVlqdz09IiwibWFjIjoiOGMxZDI2ZDFiZmMxMGE0MTBiMDY0MTg3YzE5MDU3NWVkZDVkZDMwNjRmNWZmZGVhNGIxNmM5ZWQ2Y2EwNDBjMSJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:48 GMT
content-type: text/html; charset=UTF-8
x-protected-by: Sqreen
set-cookie: XSRF-TOKEN=eyJpdiI6IjdXRWlFcHdZM3V4XC9meHNOVzZ4aW1RPT0iLCJ2YWx1ZSI6Ik1KTTE1Y09ZT2hFTVNpTnhHUlJPeHIrdmluWGdmeGIwRGVWQ1oyc21oUVg5dExmWVN6U3RodlJLUFdHbXdiVEczZHlWMU9uRnAyU29WWWNFRDZHWExRPT0iLCJtYWMiOiI3MjdlM2RiMzljY2Q0NzQ5MTY0OWM5NjdmZDY4MDViM2UzMjBjMjQ5NDUxNWI3ODc0MWJiZWQ5Mjk5ZTk1NWQxIn0%3D; expires=Wed, 07-Sep-2022 00:57:48 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6Img4SW50Q0Vrb3Y2bmMxUUFNM3JrWmc9PSIsInZhbHVlIjoiTEZ0cnhWTDZ3N0VqNmJONE9rWnlsWHZ0VVZyR3A5Z3UxUUFNRjdqK0VZaTBcL3gzaUxwYllhcmozWDhyZkNQa29QQ3FKa0czaXV0NDczbnFudHlUU0R3PT0iLCJtYWMiOiI4N2U3OGIyZTI5YTFmM2ZmMDc0MGRiZGFkMDA1ZjRmMjQyNmY4ZDllMGYxYzBlODI1YjA5MzE5OTUxMDk2MGU5In0%3D; expires=Wed, 07-Sep-2022 00:57:48 GMT; Max-Age=10800; path=/; httponly
x-newrelic-app-data: PxQFWFVWCgcJR1hQAQgPU1UCBxFORDQHUjZKA1ZLVVFHDFYPbU5yARBfWA86THlDQDg9KkNFRzo4clldFhQMDlwHShFkZGRTVABKIl4PRxALWlsEFCNMQVEHCgtZVhVKVB8GA1JWU04ATAtSDQ0MHh5UFUMCAgNRUVRWUQMHDVdUBVYAFR1RBwhCU24=
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1077799112828374&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465503&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_ifz0zzt0k&tm=1&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=1077799112828374&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465503&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_ifz0zzt0k&tm=1&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=1077799112828374&ev=AddPaymentInfo&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465503&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=1&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=AddPaymentInfo_ifz0zzt0k&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
date: Tue, 06 Sep 2022 21:57:51 GMT
expires: Tue, 06 Sep 2022 21:57:51 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=4879508188843032&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465481&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=4879508188843032&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465481&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=4879508188843032&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465481&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Tue, 06 Sep 2022 21:57:51 GMT
expires: Tue, 06 Sep 2022 21:57:51 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=2509278342537416&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465482&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET
200 OK 172 kB URL HTTP/2 www.facebook.com/tr/?id=2509278342537416&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465482&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET
IP
File type gzip compressed data, from Unix\012- data
Size 172 kB (171820 bytes)
Hash 80ec05b8fa5a34b5e6e6380292e70633
0c5f3dc4df84874e930626f11cb226f02d5493c5
dbb8969489c133616dbf45ef752ecfd580c6d46162a76ac1cd257b551044d474
GET /tr/?id=2509278342537416&ev=PageView&dl=https%3A%2F%2Fseguro.marazul-tech.com%2Fcheckout%2Fpayment%3Futm_source%3DSMS%26utm_campaign%3DCarrinho%2BAbandonado%2B1%26forceCheckout%3D1%26skipToCheckout%3D1%26customerToken%3De57f9af0-2dd3-11ed-baf7-099e9db14e28%26promocode%3DDESCONTO10&rl=&if=false&ts=1662501465482&cd[content_ids]=%5B%227728646979820%22%5D&cd[content_type]=product_group&cd[value]=125.91&cd[currency]=BRL&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=29&fbp=fb.1.1662501465475.1360213033&it=1662501462996&coo=false&eid=PageView_1k73gnpql&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Tue, 06 Sep 2022 21:57:51 GMT
expires: Tue, 06 Sep 2022 21:57:51 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
js-agent.newrelic.com/nr-spa-1216.min.js
200 OK 18 kB URL HTTP/2 js-agent.newrelic.com/nr-spa-1216.min.js
IP
File type ASCII text, with very long lines (32010)
Hash 6561a2403142205f966207d61576f1a6
1310e72f494e12ab63a4280fc1600a2c89dc9bb8
0e496fcab0b9120938373e271fa6631b7da17adf33f8a490637467c170a3e37a
GET /nr-spa-1216.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TAwVDFAylU9PwNPPW/eXC4UyIMC8EQ1d6JNW9Q+uXGnPmL1fuimq9M3lAe733gCMeKNDiCQX1YM=
x-amz-request-id: SYTECJR5CMD8NJ8E
last-modified: Thu, 14 Apr 2022 16:45:57 GMT
etag: "63e2df852d15ab21d7ff8fc4363222e8"
x-amz-version-id: UU.F5jvoumAjQChriwTQHbisCFw_OInU
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Sep 2022 21:57:51 GMT
via: 1.1 varnish
x-served-by: cache-bma1651-BMA
x-cache: HIT
x-cache-hits: 320
x-timer: S1662501472.552938,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 18216
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 6b816c34bb646f1ce3acc0434c0bdc46
f89aca6669e300e3f1ae1334688013605058d2f0
a8a4add8a7a7b3365c1dcaf1ac9427c77051cb5445400c574101661a37f1e0b3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3421
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 21:57:51 GMT
Last-Modified: Tue, 06 Sep 2022 21:00:50 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
api.mercadopago.com/v1/device_sessions/anonymous_device_session
200 OK 0 B URL HTTP/2 api.mercadopago.com/v1/device_sessions/anonymous_device_session
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/device_sessions/anonymous_device_session HTTP/1.1
Host: api.mercadopago.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://seguro.marazul-tech.com/
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:52 GMT
content-type: application/json; charset=utf-8
content-length: 0
access-control-allow-origin: https://seguro.marazul-tech.com
access-control-allow-methods: PUT, GET, POST, DELETE, OPTIONS
access-control-allow-headers: content-type
access-control-max-age: 86400
x-request-id: f35debda-e56e-4efd-b552-42dabd6f2837
x-trace-digest-keys: x-source-ip,x-trace-source,x-request-id,x-trace-digest-77,x-trace-digest-keys,x-trace-existing-keys
x-source-ip: 91.90.42.154
x-b3-spanid: 60f983cc71288c7a
x-b3-traceid: 60f983cc71288c7a
x-trace-source: fury_app
x-trace-digest-77: njWuUcov5uC0hoX6O5k7ZSSWduesrazZfXg8oEkgjiuXsTExoV/fHYVezeTOj33F
x-b3-sampled: 0
x-trace-existing-keys: x-b3-sampled,x-b3-spanid,x-b3-traceid
access-control-allow-credentials: true
vary: Accept,Accept-Encoding
cache-control: max-age=0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=16070400; includeSubDomains; preload
timing-allow-origin: *
X-Firefox-Spdy: h2
api.mercadopago.com/v1/device_sessions/anonymous_device_session
200 OK 337 B URL HTTP/2 api.mercadopago.com/v1/device_sessions/anonymous_device_session
IP
File type JSON data\012- , ASCII text, with very long lines (337), with no line terminators
Hash 09e7be93a736316b400ea091a4c96170
e2e001ef3f38afbe067215141a2f3d62b5185baa
fc102bb6d671cbd31c3250845208e7d358b6451e19d27566b2ee0486c69ae915
POST /v1/device_sessions/anonymous_device_session HTTP/1.1
Host: api.mercadopago.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Content-Length: 98
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:52 GMT
content-type: application/json; charset=utf-8
content-length: 337
access-control-allow-origin: https://seguro.marazul-tech.com
x-request-id: 98ffefe3-2b28-4403-8b9e-b2a51573ee24
x-trace-digest-86: QVrOYv2GyKCHEWcKQhJ7QHgYzmWp4M+gUy6u5le/Sca5kDHlC7PApLtV+RpkTXHy
x-trace-digest-keys: x-source-ip,x-trace-source,x-request-id,x-trace-digest-86,x-trace-digest-keys,x-trace-existing-keys
x-source-ip: 91.90.42.154
x-b3-spanid: f731d9c1aed9be1e
x-b3-traceid: f731d9c1aed9be1e
x-trace-source: fury_app
x-b3-sampled: 0
x-trace-existing-keys: x-b3-sampled,x-b3-spanid,x-b3-traceid
access-control-allow-credentials: true
vary: Accept,Accept-Encoding
cache-control: max-age=0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=16070400; includeSubDomains; preload
access-control-allow-headers: Content-Type
access-control-allow-methods: PUT, GET, POST, DELETE, OPTIONS
access-control-max-age: 86400
timing-allow-origin: *
X-Firefox-Spdy: h2
www.mercadolivre.com/jms/mlb/lgz/background/session/armor.ef828bf457633778b006539b8787985507567cf7a7ed92a1ea4d89a432aaf85c37ef9563818661e7620e9f2f12504801fa2dff3a76b5aab024b6ca40ac34da08020a0ffd5d4f0d31c0a8009357e3690d1938d457b70994eae484361f5a8f4e23.db51ddacac3765acbb19202a132c85fb?background=armor.ef828bf457633778b006539b8787985507567cf7a7ed92a1ea4d89a432aaf85c37ef9563818661e7620e9f2f12504801fa2dff3a76b5aab024b6ca40ac34da08020a0ffd5d4f0d31c0a8009357e3690d1938d457b70994eae484361f5a8f4e23.db51ddacac3765acbb19202a132c85fb&message=eyJhZF9ibG9jayI6ZmFsc2UsImNhbnZhcyI6IjdiZTAwMmIyODcyMDYzYTM0ZTQzZjM0YmYxYjNkMzc0IiwiY29ubmVjdGlvbiI6bnVsbCwiY29va2llX2VuYWJsZWQiOnRydWUsImRldmljZV9tZW1vcnkiOjAsImRvX25vdF90cmFjayI6InVuc3BlY2lmaWVkIiwiZXRhZyI6IjZjNWZiMmEyLTU1YTYtNDdmMC1hMjUxLWQ0NGM5NTc4NzA0NC0xNjYyNTAxNDY4ODczIiwiZm9udHMiOnsib3MiOjI5MTQsIm90aGVyX29zIjoiW1wie1xcXCJQYWxhdGlubyBMaW5vdHlwZVxcXCIgOjJ9XCIsXCJ7XFxcIlVSVyBHb3RoaWMgTFxcXCIgOjB9XCIsXCJ7XFxcIlVSVyBCb29rbWFuIExcXFwiIDowfVwiLFwie1xcXCJVUlcgUGFsbGFkaW8gTFxcXCIgOjB9XCIsXCJ7XFxcIk5pbWJ1cyBTYW5zIExcXFwiIDowfVwiLFwie1xcXCJCb29rbWFuIE9sZHN0eWxlXFxcIiA6NX1cIixcIntcXFwiSGVsdmV0aWNhXFxcIiA6M31cIixcIntcXFwiQ291cmllclxcXCIgOjN9XCIsXCJ7XFxcIkJpdHN0cmVhbSBWZXJhIFNhbnNcXFwiIDozfVwiLFwie1xcXCJCaXRzdHJlYW0gVmVyYSBTYW5zIE1vbm9cXFwiIDozfVwiLFwie1xcXCJCaXRzdHJlYW0gVmVyYSBTZXJpZlxcXCIgOjN9XCIsXCJ7XFxcIk5ldyBDZW50dXJ5IFNjaG9vbGJvb2tcXFwiIDozfVwiLFwie1xcXCJOaW1idXMgTW9ub1xcXCIgOjB9XCIsXCJ7XFxcIkNlbnR1cnkgU2Nob29sYm9vayBMXFxcIiA6MH1cIixcIntcXFwiVVJXIENoYW5jZXJ5IExcXFwiIDowfVwiLFwie1xcXCJEZWphVnUgU2FucyBNb25vXFxcIiA6MH1cIixcIntcXFwiRGVqYVZ1IFNhbnNcXFwiIDowfVwiLFwie1xcXCJEZWphVnUgU2VyaWZcXFwiIDowfVwiXSIsIm5vdF9vcyI6MjkxNH0sImhhcmR3YXJlX2NvbmN1cnJlbmN5IjoxNiwiaGlzdG9yeSI6MSwiaW5jb2duaXRvIjpmYWxzZSwianNfdHlwZSI6ImpzX2hhc2giLCJsYW5nIjoiZW4tVVMiLCJsYW5ndWFnZXMiOlsiZW4tVVMiLCJlbiJdLCJsaXRlcmFsX2NvbG9ycyI6MTc5NjQwNDIyMCwibG9jYWxfc3RvcmFnZSI6dHJ1ZSwibG9naW5fZGV0ZWN0aW9uIjp7Imdvb2dsZSI6ZmFsc2V9LCJtYXRoX251bWJlciI6MTEwMjMuMzg3NDA2MTUwOTQsIm9wZW5fZGF0YWJhc2UiOmZhbHNlLCJwaXhlbF9yYXRpbyI6MSwicGxhdGZvcm0iOiJMaW51eCB4ODZfNjQiLCJ3ZWJnbCI6bnVsbCwicGx1Z2lucyI6e30sInJlc29sdXRpb24iOiIxMDI0eDEyODB4MjQiLCJzY3JlZW4iOnsib3JpZW50YXRpb24iOjAsInR5cGUiOiJsYW5kc2NhcGUtcHJpbWFyeSIsImF2YWlsX2hlaWdodCI6MTAwMiwiYXZhaWxfbGVmdCI6MCwiYXZhaWxfdG9wIjowLCJhdmFpbF93aWR0aCI6MTI4MH0sInNlc3Npb25fc3RvcmFnZSI6dHJ1ZSwidGltZSI6eyJjYW52YXMiOjQyLCJ3ZWJnbCI6MiwidXNlcmZvbnRzIjo4MywiYnJvd3NlcnBsdWdpbnMiOjEsInBsdWdpbnMiOjAsImluc3RhbGxlZGZvbnRzIjo2MSwiaGFzaCI6MjE1LCJ0b3RhbCI6MjE1fSwidGltZV9iYXNlZF9mcCI6bnVsbCwidGltZV96b25lX25hbWUiOiJVVEMiLCJ0aW1lX3pvbmVfb2Zmc2V0IjowLCJ0b3VjaF9wb2ludHMiOjAsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2Ojk2LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvOTYuMCIsInZlbmRvciI6IiIsIndpbmRvd19zaXplIjp7ImlubmVyIjoiOTM5eDEyODAiLCJvdXRlciI6IjEwMjR4MTI4MCJ9LCJ3ZWJkcml2ZXIiOmZhbHNlLCJpbnN0YWxsZWRfZm9udHMiOlsiUGFsYXRpbm8iLCJUaW1lcyJdLCJpbnN0YWxsZWRfcGx1Z2lucyI6W10sImxpZ2h0X3ZlcnNpb24iOmZhbHNlLCJyZWZlcmVyIjpudWxsLCJ3ZWJjYW0iOmZhbHNlLCJoYXNfc2Vzc2lvbl9pZCI6dHJ1ZX0%3D
200 OK 172 B URL HTTP/2 www.mercadolivre.com/jms/mlb/lgz/background/session/armor.ef828bf457633778b006539b8787985507567cf7a7ed92a1ea4d89a432aaf85c37ef9563818661e7620e9f2f12504801fa2dff3a76b5aab024b6ca40ac34da08020a0ffd5d4f0d31c0a8009357e3690d1938d457b70994eae484361f5a8f4e23.db51ddacac3765acbb19202a132c85fb?background=armor.ef828bf457633778b006539b8787985507567cf7a7ed92a1ea4d89a432aaf85c37ef9563818661e7620e9f2f12504801fa2dff3a76b5aab024b6ca40ac34da08020a0ffd5d4f0d31c0a8009357e3690d1938d457b70994eae484361f5a8f4e23.db51ddacac3765acbb19202a132c85fb&message=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%3D
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash db2f9b6a0c6d813afb18d379ed9f45d1
a565b8ce9697e1dc2c59afad6dec24f43fd4c0d3
0d7b9e5d32c25629ace526d56901989d79d290bf7d8835ecdc11a3fae052a164
GET /jms/mlb/lgz/background/session/armor.ef828bf457633778b006539b8787985507567cf7a7ed92a1ea4d89a432aaf85c37ef9563818661e7620e9f2f12504801fa2dff3a76b5aab024b6ca40ac34da08020a0ffd5d4f0d31c0a8009357e3690d1938d457b70994eae484361f5a8f4e23.db51ddacac3765acbb19202a132c85fb?background=armor.ef828bf457633778b006539b8787985507567cf7a7ed92a1ea4d89a432aaf85c37ef9563818661e7620e9f2f12504801fa2dff3a76b5aab024b6ca40ac34da08020a0ffd5d4f0d31c0a8009357e3690d1938d457b70994eae484361f5a8f4e23.db51ddacac3765acbb19202a132c85fb&message=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%3D HTTP/1.1
Host: www.mercadolivre.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 06 Sep 2022 21:57:52 GMT
server: Tengine
set-cookie: _d2id=11df42de-c116-484d-845b-aca3f3257570-n; Path=/; Domain=.mercadolivre.com; Expires=Wed, 06 Sep 2023 21:57:52 GMT
cache-control: max-age=0, private, no-store, no-cache, must-revalidate
x-transaction-name: save_js_profiling
content-encoding: gzip
x-envoy-upstream-service-time: 3
x-envoy-decorator-operation: production.auth-device-profiles-frontend.melifrontends.com
x-request-id: 11df42de-c116-484d-845b-aca3f3257570
x-request-device-id: 11df42de-c116-484d-845b-aca3f3257570
x-d2id: 11df42de-c116-484d-845b-aca3f3257570
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-cache: Miss from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: k4knG7rwROLQLbDD_1vStjHDb7peGYYJvGT6UBWRrrqDKDGb3iIGMA==
X-Firefox-Spdy: h2
bam.nr-data.net/events/1/NRJS-1173a7bb9742e987ab2?a=926985131&v=1216.487a282&to=NlQEYUJSDBFUBkdZWQ8eJ1ZEWg0MGgZbVVUKXhNBHkMDG1gAXUQ%3D&rst=7328&ck=1&ref=https://seguro.marazul-tech.com/checkout/payment
200 OK 24 B URL HTTP/1.1 bam.nr-data.net/events/1/NRJS-1173a7bb9742e987ab2?a=926985131&v=1216.487a282&to=NlQEYUJSDBFUBkdZWQ8eJ1ZEWg0MGgZbVVUKXhNBHkMDG1gAXUQ%3D&rst=7328&ck=1&ref=https://seguro.marazul-tech.com/checkout/payment
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash bc32ed98d624acb4008f986349a20d26
2d3df8c11d2168ce2c27e0937421d11d85016361
0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /events/1/NRJS-1173a7bb9742e987ab2?a=926985131&v=1216.487a282&to=NlQEYUJSDBFUBkdZWQ8eJ1ZEWg0MGgZbVVUKXhNBHkMDG1gAXUQ%3D&rst=7328&ck=1&ref=https://seguro.marazul-tech.com/checkout/payment HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 1493
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 21:57:53 GMT
Content-Type: image/gif
Content-Length: 24
Connection: keep-alive
CF-Ray: 746a767bfaf7b506-OSL
Access-Control-Allow-Origin: https://seguro.marazul-tech.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Vary: Accept-Encoding
Server: cloudflare
www.mercadolivre.com/jms/mlb/lgz/background/session/armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e?background=armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e&message=eyJhZF9ibG9jayI6ZmFsc2UsImNhbnZhcyI6IjdiZTAwMmIyODcyMDYzYTM0ZTQzZjM0YmYxYjNkMzc0IiwiY29ubmVjdGlvbiI6bnVsbCwiY29va2llX2VuYWJsZWQiOnRydWUsImRldmljZV9tZW1vcnkiOjAsImRvX25vdF90cmFjayI6InVuc3BlY2lmaWVkIiwiZXRhZyI6IjZjNWZiMmEyLTU1YTYtNDdmMC1hMjUxLWQ0NGM5NTc4NzA0NC0xNjYyNTAxNDY4ODczIiwiZm9udHMiOnsib3MiOjI5MTQsIm90aGVyX29zIjoiW1wie1xcXCJQYWxhdGlubyBMaW5vdHlwZVxcXCIgOjJ9XCIsXCJ7XFxcIlVSVyBHb3RoaWMgTFxcXCIgOjB9XCIsXCJ7XFxcIlVSVyBCb29rbWFuIExcXFwiIDowfVwiLFwie1xcXCJVUlcgUGFsbGFkaW8gTFxcXCIgOjB9XCIsXCJ7XFxcIk5pbWJ1cyBTYW5zIExcXFwiIDowfVwiLFwie1xcXCJCb29rbWFuIE9sZHN0eWxlXFxcIiA6NX1cIixcIntcXFwiSGVsdmV0aWNhXFxcIiA6M31cIixcIntcXFwiQ291cmllclxcXCIgOjN9XCIsXCJ7XFxcIkJpdHN0cmVhbSBWZXJhIFNhbnNcXFwiIDozfVwiLFwie1xcXCJCaXRzdHJlYW0gVmVyYSBTYW5zIE1vbm9cXFwiIDozfVwiLFwie1xcXCJCaXRzdHJlYW0gVmVyYSBTZXJpZlxcXCIgOjN9XCIsXCJ7XFxcIk5ldyBDZW50dXJ5IFNjaG9vbGJvb2tcXFwiIDozfVwiLFwie1xcXCJOaW1idXMgTW9ub1xcXCIgOjB9XCIsXCJ7XFxcIkNlbnR1cnkgU2Nob29sYm9vayBMXFxcIiA6MH1cIixcIntcXFwiVVJXIENoYW5jZXJ5IExcXFwiIDowfVwiLFwie1xcXCJEZWphVnUgU2FucyBNb25vXFxcIiA6MH1cIixcIntcXFwiRGVqYVZ1IFNhbnNcXFwiIDowfVwiLFwie1xcXCJEZWphVnUgU2VyaWZcXFwiIDowfVwiXSIsIm5vdF9vcyI6MjkxNH0sImhhcmR3YXJlX2NvbmN1cnJlbmN5IjoxNiwiaGlzdG9yeSI6MSwiaW5jb2duaXRvIjpmYWxzZSwianNfdHlwZSI6ImpzX2hhc2giLCJsYW5nIjoiZW4tVVMiLCJsYW5ndWFnZXMiOlsiZW4tVVMiLCJlbiJdLCJsaXRlcmFsX2NvbG9ycyI6MTc5NjQwNDIyMCwibG9jYWxfc3RvcmFnZSI6dHJ1ZSwibG9naW5fZGV0ZWN0aW9uIjp7Imdvb2dsZSI6ZmFsc2V9LCJtYXRoX251bWJlciI6MTEwMjMuMzg3NDA2MTUwOTQsIm9wZW5fZGF0YWJhc2UiOmZhbHNlLCJwaXhlbF9yYXRpbyI6MSwicGxhdGZvcm0iOiJMaW51eCB4ODZfNjQiLCJ3ZWJnbCI6bnVsbCwicGx1Z2lucyI6e30sInJlc29sdXRpb24iOiIxMDI0eDEyODB4MjQiLCJzY3JlZW4iOnsib3JpZW50YXRpb24iOjAsInR5cGUiOiJsYW5kc2NhcGUtcHJpbWFyeSIsImF2YWlsX2hlaWdodCI6MTAwMiwiYXZhaWxfbGVmdCI6MCwiYXZhaWxfdG9wIjowLCJhdmFpbF93aWR0aCI6MTI4MH0sInNlc3Npb25fc3RvcmFnZSI6dHJ1ZSwidGltZSI6eyJjYW52YXMiOjQyLCJ3ZWJnbCI6MiwidXNlcmZvbnRzIjo4MywiYnJvd3NlcnBsdWdpbnMiOjEsInBsdWdpbnMiOjAsImluc3RhbGxlZGZvbnRzIjo2MSwiaGFzaCI6MjE1LCJ0b3RhbCI6MjE1fSwidGltZV9iYXNlZF9mcCI6bnVsbCwidGltZV96b25lX25hbWUiOiJVVEMiLCJ0aW1lX3pvbmVfb2Zmc2V0IjowLCJ0b3VjaF9wb2ludHMiOjAsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2Ojk2LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvOTYuMCIsInZlbmRvciI6IiIsIndpbmRvd19zaXplIjp7ImlubmVyIjoiOTM5eDEyODAiLCJvdXRlciI6IjEwMjR4MTI4MCJ9LCJ3ZWJkcml2ZXIiOmZhbHNlLCJpbnN0YWxsZWRfZm9udHMiOlsiUGFsYXRpbm8iLCJUaW1lcyJdLCJpbnN0YWxsZWRfcGx1Z2lucyI6W10sImxpZ2h0X3ZlcnNpb24iOmZhbHNlLCJyZWZlcmVyIjpudWxsLCJ3ZWJjYW0iOmZhbHNlLCJoYXNfc2Vzc2lvbl9pZCI6dHJ1ZX0%3D
200 OK 0 B URL HTTP/2 www.mercadolivre.com/jms/mlb/lgz/background/session/armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e?background=armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e&message=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%3D
IP
GET /jms/mlb/lgz/background/session/armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e?background=armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e&message=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%3D HTTP/1.1
Host: www.mercadolivre.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 06 Sep 2022 21:57:52 GMT
server: Tengine
set-cookie: _d2id=3757e97d-dc3b-4ed3-a1d9-6eb29d2c5d49-n; Path=/; Domain=.mercadolivre.com; Expires=Wed, 06 Sep 2023 21:57:52 GMT
cache-control: max-age=0, private, no-store, no-cache, must-revalidate
x-transaction-name: save_js_profiling
content-encoding: gzip
x-envoy-upstream-service-time: 2
x-envoy-decorator-operation: production.auth-device-profiles-frontend.melifrontends.com
x-request-id: 3757e97d-dc3b-4ed3-a1d9-6eb29d2c5d49
x-request-device-id: 3757e97d-dc3b-4ed3-a1d9-6eb29d2c5d49
x-d2id: 3757e97d-dc3b-4ed3-a1d9-6eb29d2c5d49
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-cache: Miss from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YsD47ag5rOCsEZa9DnP48Ix0b9_LbUbALxLCyT13CApj2r9sYb3SpQ==
X-Firefox-Spdy: h2
api.mercadopago.com/v1/device_sessions/web_device
200 OK 0 B URL HTTP/2 api.mercadopago.com/v1/device_sessions/web_device
IP
POST /v1/device_sessions/web_device HTTP/1.1
Host: api.mercadopago.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Content-Length: 48
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:48 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://seguro.marazul-tech.com
x-request-id: df1d37d8-804e-4881-9fac-4b063796da95
x-trace-digest-75: z/DhQl7fScmoWWyClDwOqndnKn8NHs4o2kBYVnSL6Xn+pmPFSO/URdn8PTrUnyWr
x-trace-digest-keys: x-source-ip,x-trace-source,x-request-id,x-trace-digest-75,x-trace-digest-keys,x-trace-existing-keys
x-source-ip: 91.90.42.154
x-b3-spanid: 77bb4e9dddca4064
x-b3-traceid: 77bb4e9dddca4064
x-trace-source: fury_app
x-b3-sampled: 0
x-trace-existing-keys: x-b3-sampled,x-b3-spanid,x-b3-traceid
access-control-allow-credentials: true
vary: Accept-Encoding, Accept,Accept-Encoding
cache-control: max-age=0
set-cookie: profile=1662501468320;Path=/;Max-Age=220752000;HttpOnly;SameSite=none;Secure
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=16070400; includeSubDomains; preload
access-control-allow-headers: Content-Type
access-control-allow-methods: PUT, GET, POST, DELETE, OPTIONS
access-control-max-age: 86400
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
github.bubbstore.com/svg/card-amex.svg
200 OK 0 B URL HTTP/2 github.bubbstore.com/svg/card-amex.svg
IP
GET /svg/card-amex.svg HTTP/1.1
Host: github.bubbstore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:47 GMT
content-type: image/svg+xml
x-origin-cache: HIT
last-modified: Thu, 17 Jun 2021 16:55:43 GMT
access-control-allow-origin: *
etag: W/"60cb7e8f-5f3"
expires: Tue, 06 Sep 2022 22:07:47 GMT
cache-control: max-age=691200
x-proxy-cache: HIT
x-github-request-id: AAB8:2160:856806:8B85AA:6306A3B0
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1661379505.582717,VS0,VE119
vary: Accept-Encoding
x-fastly-request-id: 58c96376bd8c1c9cdf37899bd5ed75c51efa8705
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l2Ziq3DRvjzxJk%2B41mst65BygbqXTC1bw45lEOuJ27kBgaGDb1cmOs6fsA9kIO8%2FJ7g6E4E8lKMOqOpy1ffUmHmdDRHaW1rCg16kfzgZuWm81iZXchShR4GqC%2FiScMeMlp03PXw2eQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 746a765bca0db4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.mercadolibre.com/jms/lgz/background?dps=armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e
200 OK 0 B URL HTTP/2 www.mercadolibre.com/jms/lgz/background?dps=armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e
IP
GET /jms/lgz/background?dps=armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e HTTP/1.1
Host: www.mercadolibre.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Tue, 06 Sep 2022 21:57:52 GMT
server: Tengine
set-cookie: _d2id=fd956d83-a4fd-466b-aa1d-3e2c023d7350-n; Path=/; Domain=.mercadolibre.com; Expires=Wed, 06 Sep 2023 21:57:52 GMT
access-control-allow-origin: *
x-transaction-name: cross_domain_profiler
content-encoding: gzip
x-envoy-upstream-service-time: 4
x-envoy-decorator-operation: production.auth-device-profiles-frontend.melifrontends.com
x-request-id: fd956d83-a4fd-466b-aa1d-3e2c023d7350
x-request-device-id: fd956d83-a4fd-466b-aa1d-3e2c023d7350
x-d2id: fd956d83-a4fd-466b-aa1d-3e2c023d7350
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-cache: Miss from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6OUI5GPf2wjRGV59WJtGAikhszJy_V5vsk40o6K-qPzcj-J6KlCQjQ==
X-Firefox-Spdy: h2
seguro.marazul-tech.com/cart/payment
200 OK 0 B URL HTTP/2 seguro.marazul-tech.com/cart/payment
IP
ASN #266444 3L CLOUD INTERNET SERVICES LTDA - EPP
Analyzer Verdict Alert fortinet Phishing
PUT /cart/payment HTTP/1.1
Host: seguro.marazul-tech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg8EVFRXARAJVldbDwQGVVU=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI5MzUyNDkiLCJhcCI6IjExMzQxNzA4MjMiLCJpZCI6IjBkYmIxMDgyOTRmYjMyNjYiLCJ0ciI6Ijg1OGYwYjQ1NzE2ZGNkMjFmOTEzMDlkY2JlMWZkMjdmIiwidGkiOjE2NjI1MDE0NjIxMzN9fQ==
traceparent: 00-858f0b45716dcd21f91309dcbe1fd27f-0dbb108294fb3266-01
tracestate: 2935249@nr=0-1-2935249-1134170823-0dbb108294fb3266----1662501462133
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 85
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/checkout/payment?utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10
Cookie: XSRF-TOKEN=eyJpdiI6ImJteFBaS0pvb1BsblpXM0JaXC83RWZnPT0iLCJ2YWx1ZSI6IktXNlJMOFRja3M0dWFlOUFGWDN3MThvXC9iRzBpVkZuVkN6WTFTNTZ3cHZaTWl2SFArRk5LTXZKMlZoN3VCOUZkMytKaFRyNGxcL05ZOTNWR1Z5UExXOEE9PSIsIm1hYyI6ImQ1ZThhOTBmODI2ZWFjOTI4NDJiNjY2OTIzYjY1ZDUwMDk5ZTk2M2QxYzg3YmU1MjBiZGE1OTMwNGNiYzA5ZDIifQ%3D%3D; bubbstore_checkout=eyJpdiI6ImdhXC8wbUk3RHJSZk9wcCtYNWNadWRnPT0iLCJ2YWx1ZSI6IkdoVDc0cjFaZzc2Y01oUUxYbU9wTGQ4RUZIN1RvZGF3bkt0N29MYUs3aUduUGN1NGUxR0h3TzMzMHVrbzBhZnlOcWlHSnBUZEtyeHJIbzFlMXdLZ05RPT0iLCJtYWMiOiJmYzFmNmY4NjgyMDlhNTQzMzI5YWI3YjUxZTVkNmNjZTFlMWNlNDBkOTc4ZTNlNjI5NTI3ODQ2NDk2MzQ0NmQ5In0%3D; marazul-tech_cart=eyJpdiI6IjdtSDBGaUlUUXpIOVhnVkdjRlAxWFE9PSIsInZhbHVlIjoiNldtRm1ib0U2OGdLY1wvMFwvaitoQVhaTVlqbm5hZlBzNUJtZ05SUFRMUlVkbVZsVStzV09saThId1pVYmF2TDhtMHJTSmdjbDlYNFRUbWtDR00rMVlqdz09IiwibWFjIjoiOGMxZDI2ZDFiZmMxMGE0MTBiMDY0MTg3YzE5MDU3NWVkZDVkZDMwNjRmNWZmZGVhNGIxNmM5ZWQ2Y2EwNDBjMSJ9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:48 GMT
content-type: application/json
x-protected-by: Sqreen
access-control-allow-origin: *
set-cookie: XSRF-TOKEN=eyJpdiI6IlJRRTVTK0ZcL09Gc0VKdzQ0cGphMWt3PT0iLCJ2YWx1ZSI6IjIxVXBiYkhIYmpxUWJHM0g0V0Y0WWlnM3ZzT1huKzVvT1RXVDRLb3lxRHlzS05keWkrOHVwemEzZ2tYTEhtS0JUZ0lwajBScXdvMmlhMkltWlZ6a3ZnPT0iLCJtYWMiOiI0NWUwODgxZDI1NDJkZWNkNmQ0NzM1MDk5ZTEyMWJkNmM3NjU1MjBlNzJkNjk4OTI4YzNlZDNjZTc5NTM1ODVkIn0%3D; expires=Wed, 07-Sep-2022 00:57:48 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6IkZ0NG13UmJwOE9DRDRrSFhJM0ZFTlE9PSIsInZhbHVlIjoiWDZtVmRtK0dtWHV2Yk5BbnhTempldExTU1Qya2RDNXNUeWNXRlJJNmhtUWlwamNyTGR3a1FhT3ZMYnY1QU5CY3NsRjA5SFdwSkF5SzZaMTlJWGFGZnc9PSIsIm1hYyI6IjVlNjRiNmM1YTE4NjBlM2E2YmU4NDczMDExZjkwYjZmMjkyM2JkN2ViYzNiMTYzYTZkMGI1MTY1ZmFiZDc0YTAifQ%3D%3D; expires=Wed, 07-Sep-2022 00:57:48 GMT; Max-Age=10800; path=/; httponly
x-newrelic-app-data: PxQFWFVWCgcJR1hQAQgPU1UCBxFORDQHUjZKA1ZLVVFHDFYPbU5yARBfWA86TFtSQhBPF0dVVhIBYVdKDwMNFhJOCEwICAQCA0kJTwJRAFpQGhpQSkFcBwdVUlNWAgcFXFIHAgEDQU5WA1QRXWU=
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
www.mercadolibre.com/jms/lgz/background/session/armor.ef828bf457633778b006539b8787985507567cf7a7ed92a1ea4d89a432aaf85c37ef9563818661e7620e9f2f12504801fa2dff3a76b5aab024b6ca40ac34da08020a0ffd5d4f0d31c0a8009357e3690d1938d457b70994eae484361f5a8f4e23.db51ddacac3765acbb19202a132c85fb?background=armor.ef828bf457633778b006539b8787985507567cf7a7ed92a1ea4d89a432aaf85c37ef9563818661e7620e9f2f12504801fa2dff3a76b5aab024b6ca40ac34da08020a0ffd5d4f0d31c0a8009357e3690d1938d457b70994eae484361f5a8f4e23.db51ddacac3765acbb19202a132c85fb&message=eyJqc190eXBlIjoianNfY29va2llIiwidmFsdWUiOiJ4In0%3D
200 OK 0 B URL HTTP/2 www.mercadolibre.com/jms/lgz/background/session/armor.ef828bf457633778b006539b8787985507567cf7a7ed92a1ea4d89a432aaf85c37ef9563818661e7620e9f2f12504801fa2dff3a76b5aab024b6ca40ac34da08020a0ffd5d4f0d31c0a8009357e3690d1938d457b70994eae484361f5a8f4e23.db51ddacac3765acbb19202a132c85fb?background=armor.ef828bf457633778b006539b8787985507567cf7a7ed92a1ea4d89a432aaf85c37ef9563818661e7620e9f2f12504801fa2dff3a76b5aab024b6ca40ac34da08020a0ffd5d4f0d31c0a8009357e3690d1938d457b70994eae484361f5a8f4e23.db51ddacac3765acbb19202a132c85fb&message=eyJqc190eXBlIjoianNfY29va2llIiwidmFsdWUiOiJ4In0%3D
IP
GET /jms/lgz/background/session/armor.ef828bf457633778b006539b8787985507567cf7a7ed92a1ea4d89a432aaf85c37ef9563818661e7620e9f2f12504801fa2dff3a76b5aab024b6ca40ac34da08020a0ffd5d4f0d31c0a8009357e3690d1938d457b70994eae484361f5a8f4e23.db51ddacac3765acbb19202a132c85fb?background=armor.ef828bf457633778b006539b8787985507567cf7a7ed92a1ea4d89a432aaf85c37ef9563818661e7620e9f2f12504801fa2dff3a76b5aab024b6ca40ac34da08020a0ffd5d4f0d31c0a8009357e3690d1938d457b70994eae484361f5a8f4e23.db51ddacac3765acbb19202a132c85fb&message=eyJqc190eXBlIjoianNfY29va2llIiwidmFsdWUiOiJ4In0%3D HTTP/1.1
Host: www.mercadolibre.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 06 Sep 2022 21:57:52 GMT
server: Tengine
cache-control: max-age=0, private, no-store, no-cache, must-revalidate
x-transaction-name: save_js_profiling
set-cookie: _d2id=0b1fed8b-a8da-49b7-bad3-1a7085e00ada-n; Path=/; Domain=.mercadolibre.com; Expires=Wed, 06 Sep 2023 21:57:52 GMT
dsid=5474e48d-1c86-4f0d-894c-af1b201734c3-1662501472097;Path=/;Max-Age=220752000;HttpOnly;Domain=.mercadolibre.com;SameSite=none;Secure
edsid=b016967c-585d-4122-9ed3-b5c081abe050-1662501472097;Path=/;Max-Age=220752000;HttpOnly;Domain=.mercadolibre.com;SameSite=none;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 10
x-envoy-decorator-operation: production.auth-device-profiles-frontend.melifrontends.com
x-request-id: 0b1fed8b-a8da-49b7-bad3-1a7085e00ada
x-request-device-id: 0b1fed8b-a8da-49b7-bad3-1a7085e00ada
x-d2id: 0b1fed8b-a8da-49b7-bad3-1a7085e00ada
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-cache: Miss from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: s81sIoN03w803k4LJXy4ir0CN6ak_m4SJ8VB1K-4xxtXdRQ6_tR3Mw==
X-Firefox-Spdy: h2
www.mercadolibre.com/jms/lgz/background/session/armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e?background=armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e&message=eyJqc190eXBlIjoianNfY29va2llIiwidmFsdWUiOiJ4In0%3D
200 OK 0 B URL HTTP/2 www.mercadolibre.com/jms/lgz/background/session/armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e?background=armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e&message=eyJqc190eXBlIjoianNfY29va2llIiwidmFsdWUiOiJ4In0%3D
IP
GET /jms/lgz/background/session/armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e?background=armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e&message=eyJqc190eXBlIjoianNfY29va2llIiwidmFsdWUiOiJ4In0%3D HTTP/1.1
Host: www.mercadolibre.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 06 Sep 2022 21:57:52 GMT
server: Tengine
cache-control: max-age=0, private, no-store, no-cache, must-revalidate
x-transaction-name: save_js_profiling
set-cookie: _d2id=c42617ac-228c-4d29-bada-f0caafce9325-n; Path=/; Domain=.mercadolibre.com; Expires=Wed, 06 Sep 2023 21:57:52 GMT
dsid=0988e264-33b9-42a9-9c59-1e137f193266-1662501472127;Path=/;Max-Age=220752000;HttpOnly;Domain=.mercadolibre.com;SameSite=none;Secure
edsid=a421b61e-ec1f-4e1a-934e-92a4bacfecc9-1662501472127;Path=/;Max-Age=220752000;HttpOnly;Domain=.mercadolibre.com;SameSite=none;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 32
x-envoy-decorator-operation: production.auth-device-profiles-frontend.melifrontends.com
x-request-id: c42617ac-228c-4d29-bada-f0caafce9325
x-request-device-id: c42617ac-228c-4d29-bada-f0caafce9325
x-d2id: c42617ac-228c-4d29-bada-f0caafce9325
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-cache: Miss from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Qo2k2vE5q1ldoGlEHGTAA2LLEd4Y5ojC2EGuzuuAFez6GHFWR_yHkw==
X-Firefox-Spdy: h2
github.bubbstore.com/svg/card-visa.svg
200 OK 0 B URL HTTP/2 github.bubbstore.com/svg/card-visa.svg
IP
GET /svg/card-visa.svg HTTP/1.1
Host: github.bubbstore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:47 GMT
content-type: image/svg+xml
x-origin-cache: HIT
last-modified: Thu, 17 Jun 2021 16:55:43 GMT
access-control-allow-origin: *
etag: W/"60cb7e8f-1288"
expires: Tue, 06 Sep 2022 22:07:47 GMT
cache-control: max-age=691200
x-proxy-cache: MISS
x-github-request-id: 84D6:76B5:648E7D:692BA6:62EA7A7B
via: 1.1 varnish
x-served-by: cache-bma1683-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1659533947.116294,VS0,VE111
vary: Accept-Encoding
x-fastly-request-id: de52283287c6ca651e1d2a45cea6f5f85f686675
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h%2FXkJalFzqcCeD78v7FtM8mff4uvAUAqfBKSeJsFqi6F5UUX6995TKIR6%2FndDdHraT77n69YKoUMsl%2FpeqiVJ2zGCNkC401ZoYpap2ac%2B0sb6iBrOELzWpD%2Fb0uyLetntCuqlziZkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 746a765bca04b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.yampi.io/ana/ana.min.js?t=1662508800000
200 OK 0 B URL HTTP/2 cdn.yampi.io/ana/ana.min.js?t=1662508800000
IP
GET /ana/ana.min.js?t=1662508800000 HTTP/1.1
Host: cdn.yampi.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:47 GMT
content-type: application/javascript
x-amz-id-2: uu1Cit7W4/zJw0yIYCNsZf6hiqR54ydtWcjbBp+2TnIb8mnesOqzCrJsTWeyDhossY9Bjbaq3yk=
x-amz-request-id: 8DGNYJEQZHB3SZ5W
last-modified: Sun, 26 Jun 2022 23:28:17 GMT
x-amz-version-id: QVByH4DoJS5uOcK0PZ6NhcCV1oJEdR5U
etag: W/"e7cabc20ce5d56c20d8c4577a36e2525"
cf-cache-status: HIT
age: 3966
expires: Wed, 06 Sep 2023 21:57:47 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 746a765e499db4f7-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/events.js?sdkid=C5OA7O5O3VNUQLVLPI4G&lib=ttq
200 OK 0 B URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=C5OA7O5O3VNUQLVLPI4G&lib=ttq
IP
ASN #20940 Akamai International B.V.
GET /i18n/pixel/events.js?sdkid=C5OA7O5O3VNUQLVLPI4G&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20220906215748E2FEA3041CA01E740189
x-tt-trace-host: 014c3d3a48b720cad047ee4725ef00c61e1ac589af1e61ca0f723803db67722fc10324db103b17b787a6fb5ed7730299fe2e3e28872001f51d3a20eae0e6294fc6a166743c87f5ffba8bc97810b8b6595ba0d12abce768292c5f6cec57bbd0a3fa
content-encoding: gzip
x-origin-response-time: 15,23.220.107.19
x-akamai-request-id: d9e5fe64.52b2fb82
expires: Tue, 06 Sep 2022 21:57:48 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 06 Sep 2022 21:57:48 GMT
x-cache: TCP_MISS from a104-84-152-231.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
vary: Accept-Encoding
x-cache-remote: TCP_MISS from a23-220-107-19.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=100, origin; dur=15, inner; dur=3
x-parent-response-time: 114,104.84.152.231
X-Firefox-Spdy: h2
seguro.marazul-tech.com/cart/payment
200 OK 0 B URL HTTP/2 seguro.marazul-tech.com/cart/payment
IP
ASN #266444 3L CLOUD INTERNET SERVICES LTDA - EPP
Analyzer Verdict Alert fortinet Phishing
PUT /cart/payment HTTP/1.1
Host: seguro.marazul-tech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg8EVFRXARAJVldbDwQGVVU=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI5MzUyNDkiLCJhcCI6IjExMzQxNzA4MjMiLCJpZCI6IjY3N2E4NzJlMTQwOTA2MWYiLCJ0ciI6IjUxMThkOGYxZjVjYmYwNWFlOTI2YTZiNDRmNDc0NjM4IiwidGkiOjE2NjI1MDE0NjM1MTB9fQ==
traceparent: 00-5118d8f1f5cbf05ae926a6b44f474638-677a872e1409061f-01
tracestate: 2935249@nr=0-1-2935249-1134170823-677a872e1409061f----1662501463510
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 85
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/checkout/payment?utm_source=SMS&utm_campaign=Carrinho+Abandonado+1&forceCheckout=1&skipToCheckout=1&customerToken=e57f9af0-2dd3-11ed-baf7-099e9db14e28&promocode=DESCONTO10
Cookie: XSRF-TOKEN=eyJpdiI6IlJRRTVTK0ZcL09Gc0VKdzQ0cGphMWt3PT0iLCJ2YWx1ZSI6IjIxVXBiYkhIYmpxUWJHM0g0V0Y0WWlnM3ZzT1huKzVvT1RXVDRLb3lxRHlzS05keWkrOHVwemEzZ2tYTEhtS0JUZ0lwajBScXdvMmlhMkltWlZ6a3ZnPT0iLCJtYWMiOiI0NWUwODgxZDI1NDJkZWNkNmQ0NzM1MDk5ZTEyMWJkNmM3NjU1MjBlNzJkNjk4OTI4YzNlZDNjZTc5NTM1ODVkIn0%3D; bubbstore_checkout=eyJpdiI6IkZ0NG13UmJwOE9DRDRrSFhJM0ZFTlE9PSIsInZhbHVlIjoiWDZtVmRtK0dtWHV2Yk5BbnhTempldExTU1Qya2RDNXNUeWNXRlJJNmhtUWlwamNyTGR3a1FhT3ZMYnY1QU5CY3NsRjA5SFdwSkF5SzZaMTlJWGFGZnc9PSIsIm1hYyI6IjVlNjRiNmM1YTE4NjBlM2E2YmU4NDczMDExZjkwYjZmMjkyM2JkN2ViYzNiMTYzYTZkMGI1MTY1ZmFiZDc0YTAifQ%3D%3D; marazul-tech_cart=eyJpdiI6IjdtSDBGaUlUUXpIOVhnVkdjRlAxWFE9PSIsInZhbHVlIjoiNldtRm1ib0U2OGdLY1wvMFwvaitoQVhaTVlqbm5hZlBzNUJtZ05SUFRMUlVkbVZsVStzV09saThId1pVYmF2TDhtMHJTSmdjbDlYNFRUbWtDR00rMVlqdz09IiwibWFjIjoiOGMxZDI2ZDFiZmMxMGE0MTBiMDY0MTg3YzE5MDU3NWVkZDVkZDMwNjRmNWZmZGVhNGIxNmM5ZWQ2Y2EwNDBjMSJ9; __ana_uid=1-pmzbd5jt-l7qqg22v; __ana_utm={"utm_source":"SMS","utm_campaign":"Carrinho Abandonado 1"}; recommendationLoaded=true; _tt_enable_cookie=1; _ttp=572dfe12-535b-4dbf-aa4f-4c4f93b961e5; _ga=GA1.2.165655034.1662501463; _gid=GA1.2.1040485019.1662501463; _gat=1; _ga=GA1.3.165655034.1662501463; _gid=GA1.3.1040485019.1662501463; _gat_bubbTracker=1; _gat_checkout=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:49 GMT
content-type: application/json
x-protected-by: Sqreen
access-control-allow-origin: *
set-cookie: XSRF-TOKEN=eyJpdiI6ImxaQWI2a29mUjZqWno3WktROGhKWEE9PSIsInZhbHVlIjoiUStRelV6a1VwaHJ1bm5xUjdLWVR2WjZiU1pcL1lSVTV1NFRscUlQUjZ1Tkt2c0ZkVnRVV2xIYWpRNEhwZVFYQWlHUlVEUE91Q1VnSVF5R05hbUdsRFFnPT0iLCJtYWMiOiJmNDkxZmYwMjIwN2FlZjIyYWJjZTYxMWUyNGJhYmZhZWJhMjQ3ODBmOTEwYWQ0ZTk3ZWQ3MjE1MGM5NTFkYmE4In0%3D; expires=Wed, 07-Sep-2022 00:57:49 GMT; Max-Age=10800; path=/
bubbstore_checkout=eyJpdiI6IlMxclVSOHcrd2VpaWhxT2Y4bTRhMUE9PSIsInZhbHVlIjoiaVBKUU5sOGlzQTRWaUk0SlcyU2ZaN2dTOHFMTUp4RDlrUHNlVnNrNmtiQVNxTEhHcThoaElqV1RoRDhCMWpWZUVWbUFSeUMwZmtcL1lTcVdjNjRPZVBBPT0iLCJtYWMiOiI2MTc5MjQ0OGM0YmE2NDU1YzcwY2RjNzcxOWQzMWEyN2Q3OTBjYzU3NmI2ZmY0YmQ1OTZmZjUwZWM1OTMyZDkxIn0%3D; expires=Wed, 07-Sep-2022 00:57:49 GMT; Max-Age=10800; path=/; httponly
x-newrelic-app-data: PxQFWFVWCgcJR1hQAQgPU1UCBxFORDQHUjZKA1ZLVVFHDFYPbU5yARBfWA86TFtSQhBPF0dVVhIBYVdKDwMNFhJOCEwICAQCA0kJTwJSBVVXGhpQSkFcAgkFVAcOCVNUUVIOBwADQU5WA1QRXWU=
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-gocache-cachestatus: BYPASS
server: gocache
content-encoding: gzip
X-Firefox-Spdy: h2
api.mercadopago.com/v1/devices/widgets?referer=https%3A//seguro.marazul-tech.com
200 OK 0 B URL HTTP/2 api.mercadopago.com/v1/devices/widgets?referer=https%3A//seguro.marazul-tech.com
IP
POST /v1/devices/widgets?referer=https%3A//seguro.marazul-tech.com HTTP/1.1
Host: api.mercadopago.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 45
Origin: https://seguro.marazul-tech.com
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:48 GMT
content-type: application/json
cache-control: max-age=0, private, no-store, no-cache, must-revalidate
x-transaction-name: public_get_session_widget
access-control-allow-origin: https://seguro.marazul-tech.com
access-control-allow-credentials: true
set-cookie: profile=1662501468303;Path=/;Max-Age=220752000;HttpOnly;SameSite=none;Secure
content-encoding: gzip
x-content-type-options: nosniff
x-request-id: 95a60307-2774-418c-b436-01eaca8cc525
x-xss-protection: 1; mode=block
strict-transport-security: max-age=16070400; includeSubDomains; preload
access-control-allow-headers: Content-Type
access-control-allow-methods: PUT, GET, POST, DELETE, OPTIONS
access-control-max-age: 86400
timing-allow-origin: *
X-Firefox-Spdy: h2
fonts.dooki.com.br/fa/4.7.0/fa.css
200 OK 0 B URL HTTP/2 fonts.dooki.com.br/fa/4.7.0/fa.css
IP
GET /fa/4.7.0/fa.css HTTP/1.1
Host: fonts.dooki.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 21:57:47 GMT
content-type: text/css
x-amz-id-2: gGNPVnAVZsqONOCg389UDgsIhA1ObjBdpsJMkqSZGddyTo93S8XPm4wvAm36dYfVkX+Cf24ZYFI=
x-amz-request-id: G8BNNJCT1K1R1RT8
last-modified: Sat, 10 Nov 2018 14:21:37 GMT
x-amz-version-id: null
etag: W/"36688de682a76454417c56541b1cf51e"
cf-cache-status: HIT
expires: Wed, 14 Sep 2022 21:57:47 GMT
cache-control: public, max-age=691200
vary: Accept-Encoding
server: cloudflare
cf-ray: 746a765aad01b50c-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.mercadolibre.com/jms/lgz/background?dps=armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e
200 OK 0 B URL HTTP/2 www.mercadolibre.com/jms/lgz/background?dps=armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e
IP
GET /jms/lgz/background?dps=armor.0ccc8c740b3340e29e389c1fe62276d5995557aae648e56fc45500cee6d5d977522eb45a644a6a01b1e50b76b84e059e29b7de37f423985d6f7f4a1efd5fcc36d8087cb6ffb9dfb6ebad86e146524f9c1f6755459f6c4acb17c1b7edc14fb1da.765ccc309d78f35d9f1103242be0132e HTTP/1.1
Host: www.mercadolibre.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
date: Tue, 06 Sep 2022 21:57:52 GMT
server: Tengine
set-cookie: _d2id=9383620b-8dcc-4366-826f-03f99344fe1f-n; Path=/; Domain=.mercadolibre.com; Expires=Wed, 06 Sep 2023 21:57:52 GMT
access-control-allow-origin: *
x-transaction-name: cross_domain_profiler
content-encoding: gzip
x-envoy-upstream-service-time: 5
x-envoy-decorator-operation: production.auth-device-profiles-frontend.melifrontends.com
x-request-id: 9383620b-8dcc-4366-826f-03f99344fe1f
x-request-device-id: 9383620b-8dcc-4366-826f-03f99344fe1f
x-d2id: 9383620b-8dcc-4366-826f-03f99344fe1f
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
x-cache: Miss from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HYIsKwTfmhUefzz8iXFcrV2ATLT0jhD9PLgeR42wlApFdiYYK0Li1g==
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/identify.js
200 OK 0 B URL HTTP/2 analytics.tiktok.com/i18n/pixel/identify.js
IP
ASN #20940 Akamai International B.V.
GET /i18n/pixel/identify.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://seguro.marazul-tech.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20220906215748E6A0FA5C03C457757C38
x-tt-trace-host: 014c3d3a48b720cad047ee4725ef00c61e1ac589af1e61ca0f723803db67722fc10324db103b17b787a6fb5ed7730299fe5adfdfe38c3c4023ba1d8312853b59b517d38d93040c8472ce9c6d9b701eb2c4e58267895117468fa232cfd7a1b04e66
content-encoding: gzip
x-origin-response-time: 7,23.220.107.19
x-akamai-request-id: d9e60e48.52b2fc8a
expires: Tue, 06 Sep 2022 21:57:48 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 06 Sep 2022 21:57:48 GMT
x-cache: TCP_MISS from a104-84-152-231.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
vary: Accept-Encoding
x-cache-remote: TCP_MISS from a23-220-107-19.deploy.akamaitechnologies.com (AkamaiGHost/10.9.3-43949849) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=103, origin; dur=7, inner; dur=2
x-parent-response-time: 110,104.84.152.231
X-Firefox-Spdy: h2
170.82.173.30
142.250.74.163
31.13.72.36
93.184.220.29
104.18.0.53
23.36.79.33