Edit tour

Windows Analysis Report
http://feirao2025.com.br/consulta/

Overview

General Information

Sample URL:	http://feirao2025.com.br/consulta/
Analysis ID:	1636928
Infos:

Detection

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Yara detected JavaScript embedded in SVG

Creates files inside the system directory

Deletes files inside the Windows folder

Detected hidden input values containing email addresses (often used in phishing pages)

Detected non-DNS traffic on DNS port

HTML page contains hidden javascript code

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5684 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 4560 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1964,i,17579965863005368635,7691825881126637209,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2036 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7032 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://feirao2025.com.br/consulta/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_358	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security

HTML

Source	Rule	Description	Author	Strings
1.59..script.csv	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-13T09:25:16.602545+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.6	49843	172.217.18.2	443	TCP
2025-03-13T09:25:16.634102+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.6	49841	172.217.18.2	443	TCP
2025-03-13T09:25:16.888899+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.6	49845	172.217.18.2	443	TCP
2025-03-13T09:25:17.128966+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.6	49842	172.217.18.2	443	TCP
2025-03-13T09:25:35.260146+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.6	52484	69.173.156.139	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://feirao2025.com.br/consulta/

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: http://feirao2025.com.br/consulta/css/widget-spacer.min.css	Avira URL Cloud: Label: phishing
Source: http://feirao2025.com.br/consulta/js/frontend-modules.min.js	Avira URL Cloud: Label: phishing
Source: http://feirao2025.com.br/consulta/js/webpack.runtime.min.js	Avira URL Cloud: Label: phishing
Source: http://feirao2025.com.br/consulta/images/senff%401x.png	Avira URL Cloud: Label: phishing
Source: http://feirao2025.com.br/consulta/js/hooks.min.js	Avira URL Cloud: Label: phishing

Phishing

Yara detected JavaScript embedded in SVG

Source: Yara match	File source: 1.59..script.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_358, type: DROPPED

Source: https://www.facebook.com/dialog/share?href=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%3Futm_source%3Dfacebook%26utm_medium%3Dshare-bar-desktop%26utm_campaign%3Dmaterias&app_id=289255557788943

HTTP Parser: yoawhj@ktcw.net

HTTP Parser: Base64 decoded: {"w":1280,"h":1024,"aw":1280,"ah":984,"c":24}

Source: https://www.facebook.com/dialog/share?href=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%3Futm_source%3Dfacebook%26utm_medium%3Dshare-bar-desktop%26utm_campaign%3Dmaterias&app_id=289255557788943	HTTP Parser: <input type="password" .../> found
Source: https://www.facebook.com/	HTTP Parser: <input type="password" .../> found

Source: https://g1.globo.com/ce/ceara/noticia/2024/10/30/feirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml	HTTP Parser: No favicon
Source: https://g1.globo.com/ce/ceara/noticia/2024/10/30/feirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml	HTTP Parser: No favicon
Source: https://g1.globo.com/ce/ceara/noticia/2024/10/30/feirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml	HTTP Parser: No favicon
Source: https://g1.globo.com/ce/ceara/noticia/2024/10/30/feirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml	HTTP Parser: No favicon
Source: https://g1.globo.com/ce/ceara/noticia/2024/10/30/feirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml	HTTP Parser: No favicon
Source: https://g1.globo.com/ce/ceara/noticia/2024/10/30/feirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml	HTTP Parser: No favicon
Source: https://g1.globo.com/ce/ceara/noticia/2024/10/30/feirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml	HTTP Parser: No favicon
Source: https://g1.globo.com/ce/ceara/noticia/2024/10/30/feirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml	HTTP Parser: No favicon
Source: https://g1.globo.com/ce/ceara/noticia/2024/10/30/feirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml	HTTP Parser: No favicon
Source: https://g1.globo.com/ce/ceara/noticia/2024/10/30/feirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml	HTTP Parser: No favicon

Source: https://www.facebook.com/dialog/share?href=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%3Futm_source%3Dfacebook%26utm_medium%3Dshare-bar-desktop%26utm_campaign%3Dmaterias&app_id=289255557788943	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/dialog/share?href=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%3Futm_source%3Dfacebook%26utm_medium%3Dshare-bar-desktop%26utm_campaign%3Dmaterias&app_id=289255557788943	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/dialog/share?href=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%3Futm_source%3Dfacebook%26utm_medium%3Dshare-bar-desktop%26utm_campaign%3Dmaterias&app_id=289255557788943	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/	HTTP Parser: No <meta name="author".. found

Source: https://www.facebook.com/dialog/share?href=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%3Futm_source%3Dfacebook%26utm_medium%3Dshare-bar-desktop%26utm_campaign%3Dmaterias&app_id=289255557788943	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/dialog/share?href=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%3Futm_source%3Dfacebook%26utm_medium%3Dshare-bar-desktop%26utm_campaign%3Dmaterias&app_id=289255557788943	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/dialog/share?href=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%3Futm_source%3Dfacebook%26utm_medium%3Dshare-bar-desktop%26utm_campaign%3Dmaterias&app_id=289255557788943	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.6:52372 -> 162.159.36.2:53

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.6:49842 -> 172.217.18.2:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.6:49845 -> 172.217.18.2:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.6:49841 -> 172.217.18.2:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.6:49843 -> 172.217.18.2:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.6:52484 -> 69.173.156.139:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.3
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.3
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.37
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.193.96
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.193.96
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.193.96
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.193.96
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.193.96
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.193.96
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.193.96
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.193.96
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.193.96
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.193.96
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.193.96
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.240
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.240
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.240
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.240
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.240
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.240
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.240
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.240
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.240
Source: unknown	TCP traffic detected without corresponding DNS query: 89.149.192.240
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /v0.js HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v0/amp-social-share-0.1.js HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v0/amp-timeago-0.1.js HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v0/amp-fit-text-0.1.js HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v0/amp-bind-0.1.js HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v0/amp-lightbox-gallery-0.1.js HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_c631e406debd4c4fac98a09d48dc17d1/bastian-post/prod/g1/b1199110-9dd6-4669-8d97-06ff44c481ef/d66a7e07-f885-44b0-bb5b-aa660ba98be0.css HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_b922f1376f6c452e9bb337cc7d996a6e/codex/foundation/typefaces/opensans-light-normal.woff2 HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveOrigin: https://g1.globo.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_acd8438fd650434baa93efc372c066a1/libs/lib-pub-relay/g1/prod/lib-pub-relay-g1-latest.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_b922f1376f6c452e9bb337cc7d996a6e/codex/foundation/typefaces/opensans-bold-italic.woff2 HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveOrigin: https://g1.globo.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_b922f1376f6c452e9bb337cc7d996a6e/codex/foundation/typefaces/opensans-regular-normal.woff2 HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveOrigin: https://g1.globo.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_b922f1376f6c452e9bb337cc7d996a6e/codex/foundation/typefaces/opensans-semibold-normal.woff2 HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveOrigin: https://g1.globo.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_e1b09a2d222b4900a437a46914be81e5/api/stable/web/api.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x240/13056019.jpg HTTP/1.1Host: s04.video.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_b922f1376f6c452e9bb337cc7d996a6e/codex/foundation/typefaces/opensans-bold-normal.woff2 HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveOrigin: https://g1.globo.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webcomponent/index-1.4.4.js HTTP/1.1Host: novabarra.globo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v0/amp-carousel-0.1.js HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v0/amp-video-0.1.js HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/icons/sharebar/system/v2/system.svg HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/libs/jquery/1.8.3/jquery.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveOrigin: https://g1.globo.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/icons/sharebar/whatsapp/v2/whatsapp.svg HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_b002e0039b9f46a5a4a94ff667d31e2d/assets/dist/0ead4ce1fc6d68003dd6a94978581b97.js HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveOrigin: https://g1.globo.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/dict/m202503110101/gpt HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comX-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/icons/sharebar/fb/v2/fb.svg HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_89c6d9f49eec4e768bc6ccddcb31a34b/lgpd-lib/lgpd-lib.min.css HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/libs/clappr-plugins/login-screen/1.2.1/player-plugin-login-screen.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_05f06ca986b54d6e9c5df94927ccf7fc/libs/clappr-plugins/video-recommendation/v2.3.0-g1/video-recommendation-plugin.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202503060101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x240/13056019.jpg HTTP/1.1Host: s04.video.glbimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3ayr8htYmxdMM7KeCllulMCKYwM=/0x0:984x656/984x0/smart/filters:strip_icc()/i.s3.glbimg.com/v1/AUTH_59edd422c0c84a879bd37670ae4f538a/internal_photos/bs/2024/y/H/h3ilo7RXyspO4vw5LPCg/feirao.jpg HTTP/1.1Host: s2-g1.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /notify/v1/ua-sdk.min.js HTTP/1.1Host: aswpsdkus.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/icons/sharebar/system/v2/system.svg HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_b922f1376f6c452e9bb337cc7d996a6e/codex/foundation/typefaces/version/6408cb8fc43ff49841e181db/globotipo-variable.css HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/icons/sharebar/whatsapp/v2/whatsapp.svg HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/icons/sharebar/fb/v2/fb.svg HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f75bb4776e3c4683acd769d47144995f/viewport-play-plugin/v1.2.0/viewport-play-plugin.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_b002e0039b9f46a5a4a94ff667d31e2d/assets/dist/9f0a694b59158b5db6ccc730621756c7.css HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveOrigin: https://g1.globo.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012502032353000/ww.js HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/plainsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/globocom/rec/g1-maislidas-1h?responseFormat=legacyPublishing&perPage=6 HTTP/1.1Host: recomendacao.globo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3ayr8htYmxdMM7KeCllulMCKYwM=/0x0:984x656/984x0/smart/filters:strip_icc()/i.s3.glbimg.com/v1/AUTH_59edd422c0c84a879bd37670ae4f538a/internal_photos/bs/2024/y/H/h3ilo7RXyspO4vw5LPCg/feirao.jpg HTTP/1.1Host: s2-g1.glbimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f75bb4776e3c4683acd769d47144995f/detach-plugin/1.0.0/clapprDetachPlugin.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_b922f1376f6c452e9bb337cc7d996a6e/codex/foundation/fonts/5462f4c64759cc666538a326be3e6de1.woff2 HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveOrigin: https://g1.globo.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s3.glbimg.com/v1/AUTH_b922f1376f6c452e9bb337cc7d996a6e/codex/foundation/typefaces/version/6408cb8fc43ff49841e181db/globotipo-variable.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f75bb4776e3c4683acd769d47144995f/chartbeat-plugin/1.1.0/chartbeat-plugin.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/fonts/opensans/bold.woff2 HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveOrigin: https://g1.globo.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/fonts/opensans/regular.woff2 HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveOrigin: https://g1.globo.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/fonts/opensans/semibold.woff2 HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveOrigin: https://g1.globo.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/globocom/rec/g1-maislidas-1h?responseFormat=legacyPublishing&perPage=6 HTTP/1.1Host: recomendacao.globo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012502032353000/ww.js HTTP/1.1Host: cdn.ampproject.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f75bb4776e3c4683acd769d47144995f/bs-player-g1/1.9.2/bs-player.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f75bb4776e3c4683acd769d47144995f/player-assets/1.1.0/playerAssets.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f7772c2cb2fd4af2bb8929c0ae6fdba7/dsframework/build/mr_372581/client/bastian-202412d19d55d03416adeee5bc1885395dd379.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_c631e406debd4c4fac98a09d48dc17d1/bastian-post/prod/g1/b1199110-9dd6-4669-8d97-06ff44c481ef/d66a7e07-f885-44b0-bb5b-aa660ba98be0.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_89c6d9f49eec4e768bc6ccddcb31a34b/lgpd-lib/lgpd-lib.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_ba8e460c944543468c3c80cb9675751f/integracoes/chartbeat/v1.0.0/chartbeat.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id HTTP/1.1Host: horizon-track.globo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_e1b09a2d222b4900a437a46914be81e5/web/settings/stable/settings.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_acd8438fd650434baa93efc372c066a1/libs/lib-pub-external-tags/g1/prod/lib-pub-ext-tags-g1-latest.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/globocom/ab/G1-FEED-REGIONAIS-item?responseFormat=legacyPublishing&page=1&perPage=10&glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=&hsid=614de52b-b278-453e-aa45-00e13d9a956d&anchors.item=//g1.globo.com/ce/ceara/noticia/2024/10/30/feirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml HTTP/1.1Host: recomendacao.globo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f75bb4776e3c4683acd769d47144995f/feature-flag-client/2.6.1/featFlagClientInit.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bu/rt/js/glb%2Dpv%2Dmin.js HTTP/1.1Host: s.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f7d75b8ab8c8447292333ff06480419a/nav-cdn/client/2.2.3/fn-cdn-client.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id HTTP/1.1Host: horizon-track.globo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d
Source: global traffic	HTTP traffic detected: GET /choose?experiments=player-isolated-experiment-02 HTTP/1.1Host: ab.g.globoConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prod/topics.html HTTP/1.1Host: topics-privacy-sandbox.globo.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f7d75b8ab8c8447292333ff06480419a/nav-cdn/config/2.2.3/fn-config.min.json HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_acd8438fd650434baa93efc372c066a1/g1-prod/lib-pub-core/lib-pub-core-g1-latest.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/globocom/ab/G1-FEED-REGIONAIS-item?responseFormat=legacyPublishing&page=1&perPage=10&glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=&hsid=614de52b-b278-453e-aa45-00e13d9a956d&anchors.item=//g1.globo.com/ce/ceara/noticia/2024/10/30/feirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml HTTP/1.1Host: recomendacao.globo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d; glbExpIdToken=MlVM5ub5TVYPluTM9_x7f8xfDFwhAMBcUerzoE-LrnI=
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f7d75b8ab8c8447292333ff06480419a/nav-cdn/search/1.2.1/fn-search-desktop.min.css HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f7d75b8ab8c8447292333ff06480419a/nav-cdn/menu/1.3.2/fn-menu.min.css HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /choose?experiments=player-isolated-experiment-02 HTTP/1.1Host: ab.g.globoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prod/lib-topics-0.0.3.js HTTP/1.1Host: topics-privacy-sandbox.globo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://topics-privacy-sandbox.globo.com/prod/topics.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d; glbExpIdToken=MlVM5ub5TVYPluTM9_x7f8xfDFwhAMBcUerzoE-LrnI=
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f7d75b8ab8c8447292333ff06480419a/nav-cdn/header/1.2.2/fn-header-desktop.min.css HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bu/rt/js/glb-pv-min.js HTTP/1.1Host: s.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f7d75b8ab8c8447292333ff06480419a/nav-cdn/common/1.1.0/fn-common-spritesheet-icons.min.svg HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/libs/publicidade/1.2.2/publicidade.css HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/icons/sharebar/fb/v2/fb_inv.svg HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f7d75b8ab8c8447292333ff06480419a/nav-cdn/config/2.2.3/fn-config.min.json HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f75bb4776e3c4683acd769d47144995f/img/mais-lidas/arrow-trending.svg HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://s3.glbimg.com/v1/AUTH_b002e0039b9f46a5a4a94ff667d31e2d/assets/dist/9f0a694b59158b5db6ccc730621756c7.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dialog/share?href=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%3Futm_source%3Dfacebook%26utm_medium%3Dshare-bar-desktop%26utm_campaign%3Dmaterias&app_id=289255557788943 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_3ed1877db4dd4c6b9b8f505e9d4fab03/globoid-js/v1.17.8/globoid-js.min.js?loading-agent=global-webdeps HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_ba8e460c944543468c3c80cb9675751f/libs/horizon/1.10.0/globocom-horizon.min.js?loading-agent=global-webdeps HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=2740220746504818&correlator=83014267561356&eid=83321072%2C31065645%2C31084739%2C31087491&output=ldjh&gdfp_req=1&vrg=202503060101&ptt=17&impl=fif&gdpr=0&iu_parts=95377733%2Ctvg_G1%2CSua_Regiao%3ENordeste%3ECeara&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=1&didk=3223810205&dids=banner_materia1&adfs=4165219037&sfv=1-0-41&eri=1&sc=1&cookie_enabled=1&arp=1&abxe=1&dt=1741854312824&lmt=1741854312&adxs=691&adys=1297&biw=1263&bih=897&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&uas=1&url=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml&ref=http%3A%2F%2Ffeirao2025.com.br%2F&vis=2&psz=300x0&msz=300x0&fws=4&ohw=1263&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1741854286416&idt=8095&prev_scp=tvg_pos%3DMATERIA1%26gadv_id%3Ddbe34eb1f48dd41cb38e7d4f87c876d27e4e76921741854311499%26rc%3DMATERIA1_0&cust_params=ext-bsafety%3Dconteudo%2520seguro%26safe%3D%26ambient%3Dweb%26cor_pagina%3DC4170C%26ext-ctx-mc%3D179%252C259%252C130%252C93%252C342%252C78%252C167%252C132%252C335%252C330%26ext-ctx-csi%3D%26tipo_pagina%3Dmulti-content%26tvg_cma%3DG1%252CCE%252CCear%25C3%25A1%26tvg_pgName%3Dmateria%26tvg_pgStr%3Dg1%252Fce%252Fcear%25C3%25A1%26tvg_random%3D1%26tvg_temas%3Dcoca-cola%252Ccolgate%252Cblack-friday%252Cempreendedorismo%252CCEF%252Capple%252Cunilever%252Cheineken%252Cbbrasil%26tvg_topico%3Dconteudo%2520seguro%26tvg_url%3Dg1.globo.com%252Fce%252Fceara%252Fnoticia%252F2024%252F10%252F30%252Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%26as_obra%3D%26as_tempo%3D%26as_assun%3D%26as_canal%3D%26ext-canal%3D%26ext-obra%3D%26tvg_prop%3Duserneeds-conectar%26glb_id%3DMlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4%253D%26glb_tipo%3Danonimo%26pgv_id%3D99fe54f7-bdc5-4637-a228-7f1269994935%26ext-cont-iab%3D391%252C406%252C596%252C474%252C473%252C52%252C53%26permutive%3D%26permutive-id%3D%26ptime%3D1741854311496%26prmtvvid%3D%26prmtvwid%3D&adks=4201241263&frm=20&eoidce=1&td=1&egid=15604&tan=b1dea1bc-d0cf-4a73-9c88-8685d6912ebe&tdf=2 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Browsing-Topics: ();p=P0000000000000000000000000000000Sec-Ad-Auction-Fetch: ?1Origin: https://g1.globo.comX-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Acces
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=2740220746504818&correlator=270545373494417&eid=83321072%2C31065645%2C31084739%2C31087491&output=ldjh&gdfp_req=1&vrg=202503060101&ptt=17&impl=fif&gdpr=0&iu_parts=95377733%2CtouchPoint%2Cbottom%2Cg1%2CSua_Regiao%3ENordeste%3ECeara&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4&prev_iu_szs=320x50%7C80x35%7C1x1&fluid=height&ifi=2&didk=3423893964&dids=banner_touch_point_bottom&adfs=2236232667&sfv=1-0-41&eri=1&sc=1&cookie_enabled=1&arp=1&abxe=1&dt=1741854312832&lmt=1741854312&adxs=592&adys=897&biw=1263&bih=897&scr_x=0&scr_y=0&btvi=2&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&uas=1&url=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml&ref=http%3A%2F%2Ffeirao2025.com.br%2F&vis=2&psz=1263x-1&msz=1263x-1&fws=516&ohw=1263&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1741854286416&idt=8095&prev_scp=version%3Dv7.1.0%26gadv_id%3Ddbe34eb1f48dd41cb38e7d4f87c876d27e4e76921741854311506&cust_params=ext-bsafety%3Dconteudo%2520seguro%26safe%3D%26ambient%3Dweb%26cor_pagina%3DC4170C%26ext-ctx-mc%3D179%252C259%252C130%252C93%252C342%252C78%252C167%252C132%252C335%252C330%26ext-ctx-csi%3D%26tipo_pagina%3Dmulti-content%26tvg_cma%3DG1%252CCE%252CCear%25C3%25A1%26tvg_pgName%3Dmateria%26tvg_pgStr%3Dg1%252Fce%252Fcear%25C3%25A1%26tvg_random%3D1%26tvg_temas%3Dcoca-cola%252Ccolgate%252Cblack-friday%252Cempreendedorismo%252CCEF%252Capple%252Cunilever%252Cheineken%252Cbbrasil%26tvg_topico%3Dconteudo%2520seguro%26tvg_url%3Dg1.globo.com%252Fce%252Fceara%252Fnoticia%252F2024%252F10%252F30%252Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%26as_obra%3D%26as_tempo%3D%26as_assun%3D%26as_canal%3D%26ext-canal%3D%26ext-obra%3D%26tvg_prop%3Duserneeds-conectar%26glb_id%3DMlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4%253D%26glb_tipo%3Danonimo%26pgv_id%3D99fe54f7-bdc5-4637-a228-7f1269994935%26ext-cont-iab%3D391%252C406%252C596%252C474%252C473%252C52%252C53%26permutive%3D%26permutive-id%3D%26ptime%3D1741854311496%26prmtvvid%3D%26prmtvwid%3D&adks=2107626328&frm=20&eoidce=1&td=1&egid=15604&tan=b1dea1bc-d0cf-4a73-9c88-8685d6912ebf&tdf=2 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Browsing-Topics: ();p=P0000000000000000000000000000000Sec-Ad-Auction-Fetch: ?1Origin: https://g1.globo.comX-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: cors
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=2740220746504818&correlator=1109258093110326&eid=83321072%2C31065645%2C31084739%2C31087491&output=ldjh&gdfp_req=1&vrg=202503060101&ptt=17&impl=fif&gdpr=0&iu_parts=95377733%2CtouchPoint%2Csubcontent%2Cg1&enc_prev_ius=%2F0%2F1%2F2%2F3&prev_iu_szs=320x50%7C80x35&fluid=height&ifi=3&didk=1575591890&dids=banner_touch_point_subcontent&adfs=4111923688&sfv=1-0-41&eri=1&sc=1&cookie_enabled=1&arp=1&abxe=1&dt=1741854312836&lmt=1741854312&adxs=0&adys=7798&biw=1263&bih=897&scr_x=0&scr_y=0&btvi=3&ucis=3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&uas=1&url=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml&ref=http%3A%2F%2Ffeirao2025.com.br%2F&vis=2&psz=1263x7065&msz=0x0&fws=4&ohw=1263&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1741854286416&idt=8095&prev_scp=gadv_id%3Ddbe34eb1f48dd41cb38e7d4f87c876d27e4e76921741854311507&cust_params=ext-bsafety%3Dconteudo%2520seguro%26safe%3D%26ambient%3Dweb%26cor_pagina%3DC4170C%26ext-ctx-mc%3D179%252C259%252C130%252C93%252C342%252C78%252C167%252C132%252C335%252C330%26ext-ctx-csi%3D%26tipo_pagina%3Dmulti-content%26tvg_cma%3DG1%252CCE%252CCear%25C3%25A1%26tvg_pgName%3Dmateria%26tvg_pgStr%3Dg1%252Fce%252Fcear%25C3%25A1%26tvg_random%3D1%26tvg_temas%3Dcoca-cola%252Ccolgate%252Cblack-friday%252Cempreendedorismo%252CCEF%252Capple%252Cunilever%252Cheineken%252Cbbrasil%26tvg_topico%3Dconteudo%2520seguro%26tvg_url%3Dg1.globo.com%252Fce%252Fceara%252Fnoticia%252F2024%252F10%252F30%252Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%26as_obra%3D%26as_tempo%3D%26as_assun%3D%26as_canal%3D%26ext-canal%3D%26ext-obra%3D%26tvg_prop%3Duserneeds-conectar%26glb_id%3DMlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4%253D%26glb_tipo%3Danonimo%26pgv_id%3D99fe54f7-bdc5-4637-a228-7f1269994935%26ext-cont-iab%3D391%252C406%252C596%252C474%252C473%252C52%252C53%26permutive%3D%26permutive-id%3D%26ptime%3D1741854311496%26prmtvvid%3D%26prmtvwid%3D&adks=1817138505&frm=20&eoidce=1&td=1&egid=15604&tan=b1dea1bc-d0cf-4a73-9c88-8685d6912ec0&tdf=2 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Browsing-Topics: ();p=P0000000000000000000000000000000Sec-Ad-Auction-Fetch: ?1Origin: https://g1.globo.comX-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: active
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=2740220746504818&correlator=452573676608769&eid=83321072%2C31065645%2C31084739%2C31087491&output=ldjh&gdfp_req=1&vrg=202503060101&ptt=17&impl=fif&gdpr=0&iu_parts=95377733%2Ctvg_G1%2CSua_Regiao%3ENordeste%3ECeara&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=970x250%7C970x150%7C970x90%7C728x90&ifi=4&didk=1256737170&dids=banner_materia_topo&adfs=666852838&sfv=1-0-41&eri=1&sc=1&cookie_enabled=1&arp=1&abxe=1&dt=1741854312838&lmt=1741854312&adxs=147&adys=388&biw=1263&bih=897&scr_x=0&scr_y=0&btvi=0&ucis=4&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&uas=1&url=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml&ref=http%3A%2F%2Ffeirao2025.com.br%2F&vis=2&psz=1263x250&msz=1263x250&fws=516&ohw=1263&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1741854286416&idt=8095&prev_scp=tvg_pos%3DMATERIA_TOPO%26gadv_id%3Ddbe34eb1f48dd41cb38e7d4f87c876d27e4e76921741854311512%26rc%3DMATERIA_TOPO_0&cust_params=ext-bsafety%3Dconteudo%2520seguro%26safe%3D%26ambient%3Dweb%26cor_pagina%3DC4170C%26ext-ctx-mc%3D179%252C259%252C130%252C93%252C342%252C78%252C167%252C132%252C335%252C330%26ext-ctx-csi%3D%26tipo_pagina%3Dmulti-content%26tvg_cma%3DG1%252CCE%252CCear%25C3%25A1%26tvg_pgName%3Dmateria%26tvg_pgStr%3Dg1%252Fce%252Fcear%25C3%25A1%26tvg_random%3D1%26tvg_temas%3Dcoca-cola%252Ccolgate%252Cblack-friday%252Cempreendedorismo%252CCEF%252Capple%252Cunilever%252Cheineken%252Cbbrasil%26tvg_topico%3Dconteudo%2520seguro%26tvg_url%3Dg1.globo.com%252Fce%252Fceara%252Fnoticia%252F2024%252F10%252F30%252Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%26as_obra%3D%26as_tempo%3D%26as_assun%3D%26as_canal%3D%26ext-canal%3D%26ext-obra%3D%26tvg_prop%3Duserneeds-conectar%26glb_id%3DMlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4%253D%26glb_tipo%3Danonimo%26pgv_id%3D99fe54f7-bdc5-4637-a228-7f1269994935%26ext-cont-iab%3D391%252C406%252C596%252C474%252C473%252C52%252C53%26permutive%3D%26permutive-id%3D%26ptime%3D1741854311496%26prmtvvid%3D%26prmtvwid%3D&adks=1714235883&frm=20&eoidce=1&td=1&egid=15604&tan=b1dea1bc-d0cf-4a73-9c88-8685d6912ec1&tdf=2 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Browsing-Topics: ();p=P0000000000000000000000000000000Sec-Ad-Auction-Fetch: ?1Origin: https://g1.globo.comX-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: cors
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_da787d4f4e8d46e3ad76d5fa568fe786/globo-ab/4.7.4/globo-ab-sdk.min.js?loading-agent=global-webdeps HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/icons/sharebar/fb/v2/fb_inv.svg HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_da787d4f4e8d46e3ad76d5fa568fe786/globo-ab/3.4.0/globo-ab.min.js?loading-agent=global-webdeps HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f7d75b8ab8c8447292333ff06480419a/nav-cdn/common/1.1.0/fn-common-spritesheet-icons.min.svg HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f75bb4776e3c4683acd769d47144995f/img/mais-lidas/arrow-trending.svg HTTP/1.1Host: s3.glbimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v5/yG/l/0,cross/ecprsH-2uyq.css HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v5/yr/l/0,cross/yyIeyMPvw-1.css HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v5/yw/l/0,cross/vhGIWM88-nE.css HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/y_/r/sj8PHQXneay.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012502032353000/amp4ads-v0.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_da787d4f4e8d46e3ad76d5fa568fe786/globo-ab/globo-ab-v2.min.js?loading-agent=global-webdeps HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /notify/v1/ua-sdk.min.js HTTP/1.1Host: aswpsdkus.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9If-None-Match: "2a9997ccd5eb31af22685ef66ebefd56"If-Modified-Since: Thu, 20 Feb 2025 13:42:09 GMT
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstyIS4G8g8FfD39eSUDo1IK95loNV0c0-nfK5CrMVFJc3ZM05kcyiNCM304y24IQ1E8SHZgoXxXvoU5kFG_k4Zq1AZj0sZoyVLdaQKvUjs6X5OeOl6w7FhjQY2X_RkYgFbcwZeWmysTW1cFRb6bcm11IX2brgGPf5LTP9Kitcm0DSt366EPE9fUv8iWn7jNxEk0RYrYLP6G6FKyNKlroj3355TZZ3I8uNmFCsbOistjWDinHzwyenAJzGYux27PvYAYSe4pp-r0_IyhuccyVfEqxY5Kr6BynHGhO2vvjhZY8EnT39130YDUqQzgQt5mgZeZWkFA9DWbwZK9WZmcleN8b-mjQiYT7wg3uy8ty4x926sWCNC6Se790WtkMRFWKERKDq_gQ9j-QAQS3-pbSePXoWGoGp_op--jGzPC7dtjuzXZj4mliQzLYw&sai=AMfl-YTGMydpO103NZzV0wrfaDPMO-1FOWEJrIXwXcRV_tLO3PCVK6SFz4ewcpHZsDRHROaHsVXpOQTG2S--SDwEKsPEDTwSkf9wHzM-Qi260Rx8Jw8V_yPKzGE4nKa5RJtutlEwGCHf7FxWRMYkTMdA&sig=Cg0ArKJSzI5ebmNhE1fBEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /v1/resolve?glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4= HTTP/1.1Host: recusers.globo.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yC/r/CmvN4QRe53p.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4i7M54/yi/l/en_US/rGgSLU6R4k9.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yG/r/-mtchr8RxcM.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://static.xx.fbcdn.net/rsrc.php/v5/yG/l/0,cross/ecprsH-2uyq.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /security/hsts-pixel.gif HTTP/1.1Host: facebook.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: datr=a5bSZ-1iSJW6ZN4TLAg0mjsX
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yu/r/RsQzh35fG6W.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/clients/barra@apps.globoid/settings HTTP/1.1Host: web-api.globoid.globo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonsec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_da787d4f4e8d46e3ad76d5fa568fe786/globo-ab/3.0/globo-ab.min.js?loading-agent=global-webdeps HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_da787d4f4e8d46e3ad76d5fa568fe786/dmp/dmp.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_da787d4f4e8d46e3ad76d5fa568fe786/Delivery/lib-analytics%20(data%20loader)/lib-analytics.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_da787d4f4e8d46e3ad76d5fa568fe786/Delivery/libanalytics/prod/1.0.6/libanalytics.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/resolve?glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4= HTTP/1.1Host: recusers.globo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d; glbExpIdToken=MlVM5ub5TVYPluTM9_x7f8xfDFwhAMBcUerzoE-LrnI=; _scor_uid=2c90577e7e9e4725a2955069f4315d51; __gads=ID=82167e636951b853:T=1741854316:RT=1741854316:S=ALNI_MZWiGleJhv5CHhVnSYIfa9izTPuog; __gpi=UID=0000105cc8529e7a:T=1741854316:RT=1741854316:S=ALNI_Mbfhwp43IUKwbQeMDRSG5XD_mvldg; __eoi=ID=69552582229b5d31:T=1741854316:RT=1741854316:S=AA-AfjZ2FzCcEjGUqIxkQ4pru8uf
Source: global traffic	HTTP traffic detected: GET /cdn/fonts/opensans/bold.woff2 HTTP/1.1Host: s3.glbimg.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/fonts/opensans/semibold.woff2 HTTP/1.1Host: s3.glbimg.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/fonts/opensans/regular.woff2 HTTP/1.1Host: s3.glbimg.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yG/r/-mtchr8RxcM.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /security/hsts-pixel.gif HTTP/1.1Host: facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: datr=a5bSZ-1iSJW6ZN4TLAg0mjsX
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yZ/r/oE9ItwKvUoe.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yw/r/-GcXqsWzrBY.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yI/r/aPBPtdqb_Lg.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yS/r/ui2DkP-wt_7.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yF/r/WzNMjfKB7nj.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/y9/r/BTdUGzsTGVy.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/realms/globo.com/protocol/openid-connect/3p-cookies/step1.html HTTP/1.1Host: goidc.globo.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d; glbExpIdToken=MlVM5ub5TVYPluTM9_x7f8xfDFwhAMBcUerzoE-LrnI=; _scor_uid=2c90577e7e9e4725a2955069f4315d51; __gads=ID=82167e636951b853:T=1741854316:RT=1741854316:S=ALNI_MZWiGleJhv5CHhVnSYIfa9izTPuog; __gpi=UID=0000105cc8529e7a:T=1741854316:RT=1741854316:S=ALNI_Mbfhwp43IUKwbQeMDRSG5XD_mvldg; __eoi=ID=69552582229b5d31:T=1741854316:RT=1741854316:S=AA-AfjZ2FzCcEjGUqIxkQ4pru8uf
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_acd8438fd650434baa93efc372c066a1/libs/lib-double-verify/prod/lib-double-verify-latest.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/clients/barra@apps.globoid/settings HTTP/1.1Host: web-api.globoid.globo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d; glbExpIdToken=MlVM5ub5TVYPluTM9_x7f8xfDFwhAMBcUerzoE-LrnI=; _scor_uid=2c90577e7e9e4725a2955069f4315d51; __gads=ID=82167e636951b853:T=1741854316:RT=1741854316:S=ALNI_MZWiGleJhv5CHhVnSYIfa9izTPuog; __gpi=UID=0000105cc8529e7a:T=1741854316:RT=1741854316:S=ALNI_Mbfhwp43IUKwbQeMDRSG5XD_mvldg; __eoi=ID=69552582229b5d31:T=1741854316:RT=1741854316:S=AA-AfjZ2FzCcEjGUqIxkQ4pru8uf
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_acd8438fd650434baa93efc372c066a1/libs/liveramp/ats/prod/lib-liveramp-ats-latest.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_da787d4f4e8d46e3ad76d5fa568fe786/horizon-client/horizon-client-js.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f75bb4776e3c4683acd769d47144995f/tools/widget-launcher/1.8.0/widgetLauncherInit.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: usergate.globo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d; glbExpIdToken=MlVM5ub5TVYPluTM9_x7f8xfDFwhAMBcUerzoE-LrnI=; _scor_uid=2c90577e7e9e4725a2955069f4315d51; __gads=ID=82167e636951b853:T=1741854316:RT=1741854316:S=ALNI_MZWiGleJhv5CHhVnSYIfa9izTPuog; __gpi=UID=0000105cc8529e7a:T=1741854316:RT=1741854316:S=ALNI_Mbfhwp43IUKwbQeMDRSG5XD_mvldg; __eoi=ID=69552582229b5d31:T=1741854316:RT=1741854316:S=AA-AfjZ2FzCcEjGUqIxkQ4pru8uf
Source: global traffic	HTTP traffic detected: GET /pagead/ppub_config HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comX-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/fonts/opensans/light.woff2 HTTP/1.1Host: s3.glbimg.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/fonts/proximanova/regular.woff2 HTTP/1.1Host: s3.glbimg.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/fonts/proximanova/bold.woff2 HTTP/1.1Host: s3.glbimg.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yn/r/1O53o-MpfhJ.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yO/r/_tJ17sGyxOX.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yQ/r/53cBvwDy5lP.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yC/r/DNMvTOCHwVg.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_e1b09a2d222b4900a437a46914be81e5/web/player/stable/player.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/y1/r/C3C2yRzecHX.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/realms/globo.com/protocol/openid-connect/3p-cookies/step2.html HTTP/1.1Host: goidc.globo.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: GOIDC_3P_COOKIE_SAMESITE=supported; GOIDC_3P_COOKIE=supported; cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d; glbExpIdToken=MlVM5ub5TVYPluTM9_x7f8xfDFwhAMBcUerzoE-LrnI=; _scor_uid=2c90577e7e9e4725a2955069f4315d51; __gads=ID=82167e636951b853:T=1741854316:RT=1741854316:S=ALNI_MZWiGleJhv5CHhVnSYIfa9izTPuog; __gpi=UID=0000105cc8529e7a:T=1741854316:RT=1741854316:S=ALNI_Mbfhwp43IUKwbQeMDRSG5XD_mvldg; __eoi=ID=69552582229b5d31:T=1741854316:RT=1741854316:S=AA-AfjZ2FzCcEjGUqIxkQ4pru8uf
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4ihVQ4/yS/l/en_US/F0A_DxAvhUT.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: usergate.globo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d; glbExpIdToken=MlVM5ub5TVYPluTM9_x7f8xfDFwhAMBcUerzoE-LrnI=; _scor_uid=2c90577e7e9e4725a2955069f4315d51; __gads=ID=82167e636951b853:T=1741854316:RT=1741854316:S=ALNI_MZWiGleJhv5CHhVnSYIfa9izTPuog; __gpi=UID=0000105cc8529e7a:T=1741854316:RT=1741854316:S=ALNI_Mbfhwp43IUKwbQeMDRSG5XD_mvldg; __eoi=ID=69552582229b5d31:T=1741854316:RT=1741854316:S=AA-AfjZ2FzCcEjGUqIxkQ4pru8uf
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: usergate.globo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d; glbExpIdToken=MlVM5ub5TVYPluTM9_x7f8xfDFwhAMBcUerzoE-LrnI=; _scor_uid=2c90577e7e9e4725a2955069f4315d51; __gads=ID=82167e636951b853:T=1741854316:RT=1741854316:S=ALNI_MZWiGleJhv5CHhVnSYIfa9izTPuog; __gpi=UID=0000105cc8529e7a:T=1741854316:RT=1741854316:S=ALNI_Mbfhwp43IUKwbQeMDRSG5XD_mvldg; __eoi=ID=69552582229b5d31:T=1741854316:RT=1741854316:S=AA-AfjZ2FzCcEjGUqIxkQ4pru8uf
Source: global traffic	HTTP traffic detected: GET /prebid/11366_g1.js HTTP/1.1Host: ads.rubiconproject.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f7d75b8ab8c8447292333ff06480419a/nav-cdn/common/1.1.0/fn-common.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f7d75b8ab8c8447292333ff06480419a/nav-cdn/search/1.2.1/fn-search-desktop.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f7d75b8ab8c8447292333ff06480419a/nav-cdn/menu/1.3.2/fn-menu.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f7d75b8ab8c8447292333ff06480419a/nav-cdn/header/1.2.2/fn-header-desktop.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/fonts/proximanova/light.woff2 HTTP/1.1Host: s3.glbimg.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gl/ba/fonts/proximanova-semibold-limited-webfont.woff HTTP/1.1Host: s.glbimg.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /agrp/prod/model_person_country_code_US_person_region_code_47415f353234.json HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www.googleadservices.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.googleadservices.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/realms/globo.com/protocol/openid-connect/auth?client_id=barra%40apps.globoid&redirect_uri=https%3A%2F%2Fg1.globo.com%2Flogin-callback.ghtml&state=52acb0a7-bf11-4032-b37f-6c2482ce6d70&response_mode=fragment&response_type=code&scope=openid%20profile&nonce=837845c2-0d93-4b37-9340-faad43a65093&prompt=none&code_challenge=L1VYprzIFi38a9kkSOmi22Sy3G0TaWElgJoAA1ZpAIk&code_challenge_method=S256 HTTP/1.1Host: goidc.globo.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d; glbExpIdToken=MlVM5ub5TVYPluTM9_x7f8xfDFwhAMBcUerzoE-LrnI=; _scor_uid=2c90577e7e9e4725a2955069f4315d51; __gads=ID=82167e636951b853:T=1741854316:RT=1741854316:S=ALNI_MZWiGleJhv5CHhVnSYIfa9izTPuog; __gpi=UID=0000105cc8529e7a:T=1741854316:RT=1741854316:S=ALNI_Mbfhwp43IUKwbQeMDRSG5XD_mvldg; __eoi=ID=69552582229b5d31:T=1741854316:RT=1741854316:S=AA-AfjZ2FzCcEjGUqIxkQ4pru8uf
Source: global traffic	HTTP traffic detected: GET /data/manifest/ HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.facebook.com/dialog/share?href=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%3Futm_source%3Dfacebook%26utm_medium%3Dshare-bar-desktop%26utm_campaign%3Dmaterias&app_id=289255557788943Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: datr=a5bSZ-1iSJW6ZN4TLAg0mjsX
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yx/r/e9sqr8WnkCf.ico HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: usergate.globo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d; glbExpIdToken=MlVM5ub5TVYPluTM9_x7f8xfDFwhAMBcUerzoE-LrnI=; _scor_uid=2c90577e7e9e4725a2955069f4315d51; __gads=ID=82167e636951b853:T=1741854316:RT=1741854316:S=ALNI_MZWiGleJhv5CHhVnSYIfa9izTPuog; __gpi=UID=0000105cc8529e7a:T=1741854316:RT=1741854316:S=ALNI_Mbfhwp43IUKwbQeMDRSG5XD_mvldg; __eoi=ID=69552582229b5d31:T=1741854316:RT=1741854316:S=AA-AfjZ2FzCcEjGUqIxkQ4pru8uf
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: usergate.globo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d; glbExpIdToken=MlVM5ub5TVYPluTM9_x7f8xfDFwhAMBcUerzoE-LrnI=; _scor_uid=2c90577e7e9e4725a2955069f4315d51; __gads=ID=82167e636951b853:T=1741854316:RT=1741854316:S=ALNI_MZWiGleJhv5CHhVnSYIfa9izTPuog; __gpi=UID=0000105cc8529e7a:T=1741854316:RT=1741854316:S=ALNI_Mbfhwp43IUKwbQeMDRSG5XD_mvldg; __eoi=ID=69552582229b5d31:T=1741854316:RT=1741854316:S=AA-AfjZ2FzCcEjGUqIxkQ4pru8uf
Source: global traffic	HTTP traffic detected: GET /statics/marfeel-sdk.js?id=4560 HTTP/1.1Host: sdk.mrf.ioConnection: keep-aliveOrigin: https://g1.globo.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/identity/envelope?pid=13715 HTTP/1.1Host: api.rlcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"content-type: text/plainsec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data?outputformat=json&system=globo&pluginVersion=6.8.42-adapterless-js&requestNumber=0.9134558237263202&timemark=1741854330264 HTTP/1.1Host: a-fds.youborafds01.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/prebid/currency-file@1/latest.json?date=20250313 HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"content-type: text/plainsec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/api/fastlane.json?account_id=11366&site_id=296538&zone_id=2630970&size_id=2&alt_size_ids=55%2C57&gdpr=0&eid_pubcid.org=274fab14-1abb-4fd3-8831-fb3f06620808%5E1%5E%5E%5E%5E%5E&rf=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml&tg_i.domain=g1.globo.com&tg_i.page=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml&tg_i.ref=http%3A%2F%2Ffeirao2025.com.br%2F&tg_i.adunit=95377733_tvg_G1%2FSua_Regiao%3ENordeste%3ECeara&tg_i.aupname=%2F95377733.%26banner_vitrine%26tvg_pos%3Dvitrine&tg_i.pbadslot=%2F95377733%2Ftvg_G1%2FSua_Regiao%3ENordeste%3ECeara%23banner_vitrine&tk_flint=dmpbjs_v9.25.0&x_source.tid=e4f200d2-20d4-45ee-86b1-930fa468e7c9&l_pb_bid_id=774e1377b4b86b&p_screen_res=1280x1024&rp_secure=1&x_imp.ext.tid=e01eff92-e7a7-466d-8f02-9a0da16e4d57&rp_maxbids=1&p_gpid=%2F95377733%2Ftvg_G1%2FSua_Regiao%3ENordeste%3ECeara%23banner_vitrine&m_ch_ua=%22Chromium%22%7Cv%3D%22134%22%2C%22Not%3AA-Brand%22%7Cv%3D%2224%22%2C%22Google%20Chrome%22%7Cv%3D%22134%22&m_ch_full_ver=%22Chromium%22%7Cv%3D%22134%22%2C%22Not%3AA-Brand%22%7Cv%3D%2224%22%2C%22Google%20Chrome%22%7Cv%3D%22134%22&m_ch_mobile=%3F0&m_ch_platform=Windows&slots=1&rand=0.3852919067223015 HTTP/1.1Host: fastlane.rubiconproject.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"content-type: text/plainsec-ch-ua-mobile: ?0Accept: /*Sec-Browsing-Topics: ();p=P0000000000000000000000000000000Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yx/r/e9sqr8WnkCf.ico HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.well-known/aggregation-service/v1/public-keys HTTP/1.1Host: publickeyservice.msmt.gcp.privacysandboxservices.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/y0/r/eFZD1KABzRA.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_05f06ca986b54d6e9c5df94927ccf7fc/libs/globoid-js/prod/callback.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012502032353000/v0/amp-ad-exit-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: usergate.globo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d; glbExpIdToken=MlVM5ub5TVYPluTM9_x7f8xfDFwhAMBcUerzoE-LrnI=; _scor_uid=2c90577e7e9e4725a2955069f4315d51; __gads=ID=82167e636951b853:T=1741854316:RT=1741854316:S=ALNI_MZWiGleJhv5CHhVnSYIfa9izTPuog; __gpi=UID=0000105cc8529e7a:T=1741854316:RT=1741854316:S=ALNI_Mbfhwp43IUKwbQeMDRSG5XD_mvldg; __eoi=ID=69552582229b5d31:T=1741854316:RT=1741854316:S=AA-AfjZ2FzCcEjGUqIxkQ4pru8uf; pbjs_sharedId=274fab14-1abb-4fd3-8831-fb3f06620808; pbjs_sharedId_cst=kSylLAssaw%3D%3D
Source: global traffic	HTTP traffic detected: GET /gh/prebid/currency-file@1/latest.json?date=20250313 HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data?outputformat=json&system=globo&pluginVersion=6.8.42-adapterless-js&requestNumber=0.9134558237263202&timemark=1741854330264 HTTP/1.1Host: a-fds.youborafds01.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/y0/r/eFZD1KABzRA.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/api/fastlane.json?account_id=11366&site_id=296538&zone_id=2630970&size_id=2&alt_size_ids=55%2C57&gdpr=0&eid_pubcid.org=274fab14-1abb-4fd3-8831-fb3f06620808%5E1%5E%5E%5E%5E%5E&rf=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml&tg_i.domain=g1.globo.com&tg_i.page=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml&tg_i.ref=http%3A%2F%2Ffeirao2025.com.br%2F&tg_i.adunit=95377733_tvg_G1%2FSua_Regiao%3ENordeste%3ECeara&tg_i.aupname=%2F95377733.%26banner_vitrine%26tvg_pos%3Dvitrine&tg_i.pbadslot=%2F95377733%2Ftvg_G1%2FSua_Regiao%3ENordeste%3ECeara%23banner_vitrine&tk_flint=dmpbjs_v9.25.0&x_source.tid=e4f200d2-20d4-45ee-86b1-930fa468e7c9&l_pb_bid_id=774e1377b4b86b&p_screen_res=1280x1024&rp_secure=1&x_imp.ext.tid=e01eff92-e7a7-466d-8f02-9a0da16e4d57&rp_maxbids=1&p_gpid=%2F95377733%2Ftvg_G1%2FSua_Regiao%3ENordeste%3ECeara%23banner_vitrine&m_ch_ua=%22Chromium%22%7Cv%3D%22134%22%2C%22Not%3AA-Brand%22%7Cv%3D%2224%22%2C%22Google%20Chrome%22%7Cv%3D%22134%22&m_ch_full_ver=%22Chromium%22%7Cv%3D%22134%22%2C%22Not%3AA-Brand%22%7Cv%3D%2224%22%2C%22Google%20Chrome%22%7Cv%3D%22134%22&m_ch_mobile=%3F0&m_ch_platform=Windows&slots=1&rand=0.3852919067223015 HTTP/1.1Host: fastlane.rubiconproject.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: khaos=M8733IHZ-19-I255; audit=1\|yQuirGeEF6D7WmimUpBkwBw6pRdvJYWmgmQsb7lAyOgPLV/XgsTE4lQEnUhzGRLr8/Mnpyv6Pn+DaB6OEOlRU0cOsbp60MuBIo8tEQuGXfEijy0RC4Zd8dAPlTu0R9RN
Source: global traffic	HTTP traffic detected: GET /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookieP=ok; pid=2698729408217626943; sasd2=q=%24qc%3D1500016238%3B%24ql%3DMedium%3B%24qpc%3D94014%3B%24qt%3D152_2199_10841t%3B%24dma%3D807%3B%24qo%3D6&c=1&l&lo&lt=638774511347743103&o=1; sasd=%24qc%3D1500016238%3B%24ql%3DMedium%3B%24qpc%3D94014%3B%24qt%3D152_2199_10841t%3B%24dma%3D807%3B%24qo%3D6
Source: global traffic	HTTP traffic detected: GET /dvtp_src.js HTTP/1.1Host: cdn.doubleverify.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6eiKdHv8TSEHmd94Q1RWEKlMJ2s=/45x45/i.s3.glbimg.com/v1/AUTH_59edd422c0c84a879bd37670ae4f538a/internal_photos/bs/2023/z/U/bWHbEBS6a83B6zHM2aRw/logo-tvm-45x45.png HTTP/1.1Host: s2-g1.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ut/v3/prebid HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ingest.php HTTP/1.1Host: events.newsroom.biConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: 4560_u=a16acfea-0a25-47cf-829b-f8066ddb6f13; 4560_s=05dca907-a62c-40e7-9586-42686ec08ab0; 4560_lv=null; 4560_ut=0
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_f7772c2cb2fd4af2bb8929c0ae6fdba7/dsframework/build/mr_372581/client/bastian-202412ae144b43ba2096f9b70d297db450cfdf.rest.css HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvrkgikF8TQFrdIjUwjU6zz-S8tw5ShlcTb_UYfS37ZI4uj-qmTyPaPmCiHLqDeBSn5DRGicXszvvevyUI0unkQq1NwzaH8HIPL9oeSFT5MPV6-Qr8lgAqDL6JEBJFSgX71UFaV7wHzOkNqN6IyFd4mfFlP6P3vSYd1pGJVNeO5V4pF1R44x3E8FZdtHlFNQknN-fd6ARtX-QoyrEOHzTf0AaqW-oGKg4MbcX_Qfk1GFtX5dFxltUlCYvgOI8ieVWq1f6W2v15bQwjL1wmvIKfJmHwZqN14S28B51Z1riYPmYPXJVUnEXeTGvsjylOX14tCht2yDdL6UlRF--JveS9IbEjvHr3ymKbGRYmOle-7_r3OKXd9q8NdZIR7heU9zrumrP0arlyH8QIMgMMbxLH4KHWaZulGhQ4Rk5vSK_CCcYbqxuzyg6x6rCjl&sai=AMfl-YQxyZg18soGn8KbK9m6_7ig47pjoHJ1HqLtvF86xa3aL1GO0Xf5HdQv75XJWozCS8uDma7B1w9XPEDefta4vaK9c7AjRL4OCRXMrofRtqLhDr1FmDQYx-wBi8prHr764AQ8e8HFJkVGu8ixkjBD&sig=Cg0ArKJSzImDfmS5D_JgEAE&uach_m=%5BUACH%5D&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /statics/compass-multimedia-sdk.js?version=2056 HTTP/1.1Host: sdk.mrf.ioConnection: keep-aliveOrigin: https://g1.globo.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6eiKdHv8TSEHmd94Q1RWEKlMJ2s=/45x45/i.s3.glbimg.com/v1/AUTH_59edd422c0c84a879bd37670ae4f538a/internal_photos/bs/2023/z/U/bWHbEBS6a83B6zHM2aRw/logo-tvm-45x45.png HTTP/1.1Host: s2-g1.glbimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json/experiences?url=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml&clid=a16acfea-0a25-47cf-829b-f8066ddb6f13&fvst=1741854333&geo=__INJECT_GEO__&ptch=0&pgv=1&ppg=http%3A%2F%2Ffeirao2025.com.br%2F&pti=2024-10-30T10:15:54.505-03:00&ref=http%3A%2F%2Ffeirao2025.com.br%2F&sdu=3&sid=4560&uexp=AC_tzn5Qz-4SlK-5A1Aj8aDFw,l\|1\|m\|1\|w\|1\|d\|1\|ls\|3&useg=&utyp=0&v=2 HTTP/1.1Host: flowcards.mrf.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"mrf-lb-hash: https://g1.globo.com/ce/ceara/noticia/2024/10/30/feirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtmlsec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usync.html?gdpr=0 HTTP/1.1Host: eus.rubiconproject.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: khaos=M8733IHZ-19-I255; audit=1\|yQuirGeEF6D7WmimUpBkwBw6pRdvJYWmgmQsb7lAyOgPLV/XgsTE4lQEnUhzGRLr8/Mnpyv6Pn+DaB6OEOlRU0cOsbp60MuBIo8tEQuGXfEijy0RC4Zd8dAPlTu0R9RN
Source: global traffic	HTTP traffic detected: GET /dmp/async_usersync.html HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /data/rfv.php HTTP/1.1Host: events.newsroom.biConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: 4560_u=a16acfea-0a25-47cf-829b-f8066ddb6f13; 4560_s=05dca907-a62c-40e7-9586-42686ec08ab0; 4560_lv=null; 4560_ut=0
Source: global traffic	HTTP traffic detected: GET /statics/2ab35c62386ce87a4790.js HTTP/1.1Host: sdk.mrf.ioConnection: keep-aliveOrigin: https://g1.globo.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json/experiences?url=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml&clid=a16acfea-0a25-47cf-829b-f8066ddb6f13&fvst=1741854333&geo=__INJECT_GEO__&ptch=0&pgv=1&ppg=http%3A%2F%2Ffeirao2025.com.br%2F&pti=2024-10-30T10:15:54.505-03:00&ref=http%3A%2F%2Ffeirao2025.com.br%2F&sdu=3&sid=4560&uexp=AC_tzn5Qz-4SlK-5A1Aj8aDFw,l\|1\|m\|1\|w\|1\|d\|1\|ls\|3&useg=&utyp=0&v=2 HTTP/1.1Host: flowcards.mrf.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usync.js HTTP/1.1Host: eus.rubiconproject.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://eus.rubiconproject.com/usync.html?gdpr=0Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: khaos=M8733IHZ-19-I255; audit=1\|yQuirGeEF6D7WmimUpBkwBw6pRdvJYWmgmQsb7lAyOgPLV/XgsTE4lQEnUhzGRLr8/Mnpyv6Pn+DaB6OEOlRU0cOsbp60MuBIo8tEQuGXfEijy0RC4Zd8dAPlTu0R9RN
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /encrypted-signals/encrypted-tag-g.js HTTP/1.1Host: invstatic101.creativecdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /esp.js HTTP/1.1Host: oa.openxcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dv-measurements7453.js HTTP/1.1Host: cdn.doubleverify.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.facebook.com/dialog/share?href=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%3Futm_source%3Dfacebook%26utm_medium%3Dshare-bar-desktop%26utm_campaign%3Dmaterias&app_id=289255557788943Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: datr=a5bSZ-1iSJW6ZN4TLAg0mjsX
Source: global traffic	HTTP traffic detected: GET /khaos.json?gdpr=0 HTTP/1.1Host: token.rubiconproject.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://eus.rubiconproject.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: khaos=M8733IHZ-19-I255; audit=1\|yQuirGeEF6D7WmimUpBkwBw6pRdvJYWmgmQsb7lAyOgPLV/XgsTE4lQEnUhzGRLr8/Mnpyv6Pn+DaB6OEOlRU0cOsbp60MuBIo8tEQuGXfEijy0RC4Zd8dAPlTu0R9RN
Source: global traffic	HTTP traffic detected: GET /rtv/012502032353000/v0/amp-analytics-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=N9s950T9cAqz-_XeRKq66LDfTyD4aMUL53hQjX_1werW_TMJVYNulZgqaeYe_OaY4ZRtn_mCMYZKYjVgzLvc5Cm_8QA3iBEnM_8rk2XIEZ8.; uuid2=3096021124015996848
Source: global traffic	HTTP traffic detected: GET /token?pid=25470&gdpr=0 HTTP/1.1Host: token.rubiconproject.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: khaos=M8733IHZ-19-I255; audit_p=1\|yQuirGeEF6D7WmimUpBkwBw6pRdvJYWmgmQsb7lAyOid5SHrtNWE5GzcYbIalQOmmG7zb8n75T2AF7qA5WC/AMnP7mqLQgOLpmvllXEtYN4=; khaos_p=M8733IHZ-19-I255; audit=1\|yQuirGeEF6D7WmimUpBkwBw6pRdvJYWmgmQsb7lAyOid5SHrtNWE5GzcYbIalQOmmG7zb8n75T2AF7qA5WC/AMnP7mqLQgOLpmvllXEtYN4=
Source: global traffic	HTTP traffic detected: GET /cdn/libs/tv4/1.3.0/tv4.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v5/yh/l/0,cross/ze2gDvq5tcz.css HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/y1/r/4lCu2zih0ca.svg HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012502032353000/v0/amp-fit-text-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /khaos.json?gdpr=0 HTTP/1.1Host: token.rubiconproject.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: khaos=M8733IHZ-19-I255; audit=1\|yQuirGeEF6D7WmimUpBkwBw6pRdvJYWmgmQsb7lAyOid5SHrtNWE5GzcYbIalQOmmG7zb8n75T2AF7qA5WC/AMnP7mqLQgOLpmvllXEtYN4=
Source: global traffic	HTTP traffic detected: GET /visit.js?gdpr_consent=&flvr=0&ttmms=8732&ttfrms=34&brid=3&brver=134.0.0.0&bridua=3&bds=1&tstype=2&eparams=DC4FC%3Dl9EEADTbpTauTau8%60%5D8%3D%403%40%5D4%40%3ETau46Tau462C2Tau%3F%40E%3A4%3A2Taua_acTau%60_Taub_Tau76%3AC2%40%5C%3D%3A%3EA2%5C%3F%40%3E6%5C%4076C646%5C56D4%40%3FE%40D%5C56%5C2E6%5ChhA6C46%3FE%5C6%3E%5C5%3AG%3A52D%5C4%40%3F7%3AC2%5CA2DD%40%5C2%5CA2DD%40%5D89E%3E%3DU2%3F4r92%3A%3Fl9EEADTbpTauTau8%60%5D8%3D%403%40%5D4%40%3ETar9EEADTbpTauTau8%60%5D8%3D%403%40%5D4%40%3EU42%3FFC%3Dl9EEADTbpTauTau8%60%5D8%3D%403%40%5D4%40%3ETau46Tau462C2Tau%3F%40E%3A4%3A2Taua_acTau%60_Taub_Tau76%3AC2%40%5C%3D%3A%3EA2%5C%3F%40%3E6%5C%4076C646%5C56D4%40%3FE%40D%5C56%5C2E6%5ChhA6C46%3FE%5C6%3E%5C5%3AG%3A52D%5C4%40%3F7%3AC2%5CA2DD%40%5C2%5CA2DD%40%5D89E%3E%3D&srcurlD=0&aUrlD=0&ssl=https:&dfs=4483&ddur=17291&uid=1741854347065627&jsCallback=dvCallback_1741854347065842&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F134.0.0.0%20Safari%2F537.36&htmlmsging=1&chro=1&hist=1&winh=897&winw=1280&wouh=984&wouw=1280&scah=984&scaw=1280&jsver=7453&tgjsver=7453&lvvn=28&m1=96&refD=1&referrer=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml&fwc=0&fcl=1721&flt=0&fec=5311&fcifrms=14&brh=1&dvp_epl=644&noc=4&nav_pltfrm=Win32&ctx=27566431&cmp=DV896942&btreg=6939654394138509577222&btadsrv=6939654394138509577222&adsrv=104&unit=300x250&seltag=1&sadv=5365815067&ord=3725516310&litm=6939654394&scrt=138509577222&splc=/95377733/tvg_G1/Sua_Regiao%3ENordeste%3ECeara&adu=94882093&spos=MATERIA1&c1=multi-content&c2=web&c4=anonimo&c5=g1/ce/cear%C3%A1&gdpr=0&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&t2te=0&dvp_pubaap=0&dvp_uptbcid=1.9.0&dvp_rcp=2&dvp_htec=1&dvp_seem=2&dvp_tuk=1&dvp_sukv=227415434.01839992&ee_dp_sukv=227415434.01839992&dvp_tukv=225017708.7606276&ee_dp_tukv=225017708.7606276&dvp_tuid=629092532663&jurtd=1917400275 HTTP/1.1Host: tps.doubleverify.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012502032353000/v0/amp-form-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_cm&google_hm=TTg3MzNJSFotMTktSTI1NQ==&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn2u0-faXs3b9k9DTG2UGGEfhe7tLtI_ibRYfBkwPqWkS0PPwjK46j3fXke-fQ
Source: global traffic	HTTP traffic detected: GET /signals/pub.js HTTP/1.1Host: pub.doubleverify.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /encrypt HTTP/1.1Host: esp.rtbhouse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth-session/activity/g1/horizon-pageview?object=http%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml&Referrer=http%253A%252F%252Ffeirao2025.com.br%252F&tags=materia%252Cmulti-content%252Cce%252Fceara&client_version=0.3.11 HTTP/1.1Host: horizon.globo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d; glbExpIdToken=MlVM5ub5TVYPluTM9_x7f8xfDFwhAMBcUerzoE-LrnI=; _scor_uid=2c90577e7e9e4725a2955069f4315d51; __gads=ID=82167e636951b853:T=1741854316:RT=1741854316:S=ALNI_MZWiGleJhv5CHhVnSYIfa9izTPuog; __gpi=UID=0000105cc8529e7a:T=1741854316:RT=1741854316:S=ALNI_Mbfhwp43IUKwbQeMDRSG5XD_mvldg; __eoi=ID=69552582229b5d31:T=1741854316:RT=1741854316:S=AA-AfjZ2FzCcEjGUqIxkQ4pru8uf; pbjs_sharedId=274fab14-1abb-4fd3-8831-fb3f06620808; pbjs_sharedId_cst=kSylLAssaw%3D%3D; ___nrbic=%7B%22isNewUser%22%3Atrue%2C%22previousVisit%22%3A1741854333%2C%22currentVisitStarted%22%3A1741854333%2C%22sessionId%22%3A%2205dca907-a62c-40e7-9586-42686ec08ab0%22%2C%22sessionVars%22%3A%5B%5D%2C%22visitedInThisSession%22%3Atrue%2C%22pagesViewed%22%3A1%2C%22landingPage%22%3A%22https%3A//g1.globo.com/ce/ceara/noticia/2024/10/30/feirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%22%2C%22referrer%22%3A%22http%3A//feirao2025.com.br/%22%2C%22lpti%22%3A%222024-10-30T10%3A15%3A54.505-03%3A00%22%7D; ___nrbi=%7B%22firstVisit%22%3A1741854333%2C%22userId%22%3A%22a16acfea-0a25-47cf-829b-f8066ddb6f13%22%2C%22userVars%22%3A%5B%5D%2C%22futurePreviousVisit%22%3A1741854333%2C%22timesVisited%22%3A1%7D; compass_uid=a16acfea-0a25-47cf-829b-f8066ddb6f13; cto_bundle=yycwfF9zaUhHNjlYN3hNeXNHdEVRclJ0MkFuREw1eEVyNlVHVkRCazZFY1M0MjhnZXQzOGRwa1lpV2ZOalJva2J4SXdYM1dKbUo1eDRyTEglMkZLYmxuWXJZeHBTUWl0WSUyQnppYWJNc3JjWGYySmxHdzVCSVhwbmRKRHAxSWJmajd3cU4lMkJqVzRkMk01MjNNZndiRGt4M3JzWFRpM1ElM0QlM0Q
Source: global traffic	HTTP traffic detected: GET /schemas HTTP/1.1Host: horizon-schemas.globo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /security/hsts-pixel.gif HTTP/1.1Host: facebook.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: datr=a5bSZ-1iSJW6ZN4TLAg0mjsX; fr=0t4Iut1AgKA44xm9K..Bn0paL..AAA.0.0.Bn0paL.AWXgVmMsSIQ; sb=i5bSZ1sl12keJfTmbHsv5GYS
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yU/r/O7nelmd9XSI.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://static.xx.fbcdn.net/rsrc.php/v5/yw/l/0,cross/vhGIWM88-nE.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yh/r/qkqnWEiZRwq.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yD/r/P_lWL5nmGVY.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yX/r/R7paD7vUTA2.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yi/r/fcnDhCsH9cT.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yM/r/r-VZlh767G5.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yW/r/rhZUiD8hJ72.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/y1/r/4lCu2zih0ca.svg HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0&dcc=t HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lKvW-YckCcpEksXXXpLNM\|t
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2.0/pxid?k=cccecec5-8228-435e-81d1-33c4eccc78e6 HTTP/1.1Host: d39f98ec-9259-4f8b-896d-7ab58be1f900.prmutv.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"content-type: text/plainsec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__ccg=GOOD&__dyn=7xe6E5aQ1PyUbFp41twpUnwgU29zE6u7E3rw5ux60Vo1upE4W0OE3nwaq0yE7i0n24o5-0me1Fw5uw5Uwdq0Ho2eU5O09yyE25w8W0Lo6-0uS0lm0zo3jwea&__hs=20160.BP%3ADEFAULT.2.0...0&__hsi=7481207455534588347&__req=1&__rev=1020856402&__s=yqqhz0%3Ax2lw7f%3A40dggy&__spin_b=trunk&__spin_r=1020856402&__spin_t=1741854347&__user=0&dpr=1&jazoest=2989&lsd=AVp1wLhNzOc HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: datr=a5bSZ-1iSJW6ZN4TLAg0mjsX; fr=0t4Iut1AgKA44xm9K..Bn0paL..AAA.0.0.Bn0paL.AWXgVmMsSIQ; sb=i5bSZ1sl12keJfTmbHsv5GYS; wd=1280x926
Source: global traffic	HTTP traffic detected: GET /dvtag/signals/ids/pub.json?ctx=27566431&cmp=DV1036776&url=https%3A%2F%2Fg1.globo.com&ids=1&token=default HTTP/1.1Host: pub.doubleverify.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dvtag/signals/bsc/pub.json?ctx=27566431&cmp=DV1036776&url=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml&bsc=1&abs=1&token=default HTTP/1.1Host: pub.doubleverify.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /exchange/sync.php?p=dfp&gdpr=0&google_gid=CAESEBHGFyPwnTDgHTVxZA1EDQQ&google_cver=1 HTTP/1.1Host: pixel.rubiconproject.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: khaos=M8733IHZ-19-I255; khaos_p=M8733IHZ-19-I255; audit_p=1\|yQuirGeEF6D7WmimUpBkwBw6pRdvJYWmgmQsb7lAyOgIO/aCm+HpB2zcYbIalQOmmG7zb8n75T2AF7qA5WC/AMnP7mqLQgOLpmvllXEtYN4=; audit=1\|yQuirGeEF6D7WmimUpBkwBw6pRdvJYWmgmQsb7lAyOhysJvEkMKX6WzcYbIalQOmmG7zb8n75T2AF7qA5WC/AMnP7mqLQgOLpmvllXEtYN4=
Source: global traffic	HTTP traffic detected: GET /auth-session/activity/g1/horizon-pageview?object=http%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml&Referrer=http%253A%252F%252Ffeirao2025.com.br%252F&tags=materia%252Cmulti-content%252Cce%252Fceara&client_version=0.3.11 HTTP/1.1Host: horizon.globo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d; glbExpIdToken=MlVM5ub5TVYPluTM9_x7f8xfDFwhAMBcUerzoE-LrnI=; _scor_uid=2c90577e7e9e4725a2955069f4315d51; __gads=ID=82167e636951b853:T=1741854316:RT=1741854316:S=ALNI_MZWiGleJhv5CHhVnSYIfa9izTPuog; __gpi=UID=0000105cc8529e7a:T=1741854316:RT=1741854316:S=ALNI_Mbfhwp43IUKwbQeMDRSG5XD_mvldg; __eoi=ID=69552582229b5d31:T=1741854316:RT=1741854316:S=AA-AfjZ2FzCcEjGUqIxkQ4pru8uf; pbjs_sharedId=274fab14-1abb-4fd3-8831-fb3f06620808; pbjs_sharedId_cst=kSylLAssaw%3D%3D; ___nrbic=%7B%22isNewUser%22%3Atrue%2C%22previousVisit%22%3A1741854333%2C%22currentVisitStarted%22%3A1741854333%2C%22sessionId%22%3A%2205dca907-a62c-40e7-9586-42686ec08ab0%22%2C%22sessionVars%22%3A%5B%5D%2C%22visitedInThisSession%22%3Atrue%2C%22pagesViewed%22%3A1%2C%22landingPage%22%3A%22https%3A//g1.globo.com/ce/ceara/noticia/2024/10/30/feirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%22%2C%22referrer%22%3A%22http%3A//feirao2025.com.br/%22%2C%22lpti%22%3A%222024-10-30T10%3A15%3A54.505-03%3A00%22%7D; ___nrbi=%7B%22firstVisit%22%3A1741854333%2C%22userId%22%3A%22a16acfea-0a25-47cf-829b-f8066ddb6f13%22%2C%22userVars%22%3A%5B%5D%2C%22futurePreviousVisit%22%3A1741854333%2C%22timesVisited%22%3A1%7D; compass_uid=a16acfea-0a25-47cf-829b-f8066ddb6f13; cto_bundle=JnlwfV9zaUhHNjlYN3hNeXNHdEVRclJ0MkFtYndtT3JOS1UlMkZYWGYlMkJOaWpMdE0zVlFjeGo0RVYlMkJZZkdNJTJCellPdFNoTUtRaVZiMGtHTTVQR2R6QTR6dmQ2b0FDOG5Ya29UTW5va0kyMzBObk9JM0hDcE9tTSUyQlgyY2d4b1E2MFJXTzVQM1FYMEw3NiUyRlNHaXZ6ZjYyYnRDUjFCU3clM0QlM0Q; permutive-id=5cbb348c-3700-4415-b7db-7ae962870fbe
Source: global traffic	HTTP traffic detected: GET /v2.0/geoip?include=geo&include=isp&include=ip_hash&k=cccecec5-8228-435e-81d1-33c4eccc78e6 HTTP/1.1Host: api.permutive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /models/v2/d39f98ec-9259-4f8b-896d-7ab58be1f900-models.bin HTTP/1.1Host: cdn.permutive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://g1.globo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yU/r/O7nelmd9XSI.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yo/r/RYkEligVXKB.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yJ/r/TJc3tU-0fV-.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v4/yU/r/pNm5YDgJip6.js HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveOrigin: https://www.facebook.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /security/hsts-pixel.gif HTTP/1.1Host: facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: datr=a5bSZ-1iSJW6ZN4TLAg0mjsX; fr=0t4Iut1AgKA44xm9K..Bn0paL..AAA.0.0.Bn0paL.AWXgVmMsSIQ; sb=i5bSZ1sl12keJfTmbHsv5GYS; wd=1280x926
Source: global traffic	HTTP traffic detected: GET /schemas HTTP/1.1Host: horizon-schemas.globo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cookie-banner-consent-accepted=false; glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=; hsid=614de52b-b278-453e-aa45-00e13d9a956d; glbExpIdToken=MlVM5ub5TVYPluTM9_x7f8xfDFwhAMBcUerzoE-LrnI=; _scor_uid=2c90577e7e9e4725a2955069f4315d51; __gads=ID=82167e636951b853:T=1741854316:RT=1741854316:S=ALNI_MZWiGleJhv5CHhVnSYIfa9izTPuog; __gpi=UID=0000105cc8529e7a:T=1741854316:RT=1741854316:S=ALNI_Mbfhwp43IUKwbQeMDRSG5XD_mvldg; __eoi=ID=69552582229b5d31:T=1741854316:RT=1741854316:S=AA-AfjZ2FzCcEjGUqIxkQ4pru8uf; pbjs_sharedId=274fab14-1abb-4fd3-8831-fb3f06620808; pbjs_sharedId_cst=kSylLAssaw%3D%3D; ___nrbic=%7B%22isNewUser%22%3Atrue%2C%22previousVisit%22%3A1741854333%2C%22currentVisitStarted%22%3A1741854333%2C%22sessionId%22%3A%2205dca907-a62c-40e7-9586-42686ec08ab0%22%2C%22sessionVars%22%3A%5B%5D%2C%22visitedInThisSession%22%3Atrue%2C%22pagesViewed%22%3A1%2C%22landingPage%22%3A%22https%3A//g1.globo.com/ce/ceara/noticia/2024/10/30/feirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%22%2C%22referrer%22%3A%22http%3A//feirao2025.com.br/%22%2C%22lpti%22%3A%222024-10-30T10%3A15%3A54.505-03%3A00%22%7D; ___nrbi=%7B%22firstVisit%22%3A1741854333%2C%22userId%22%3A%22a16acfea-0a25-47cf-829b-f8066ddb6f13%22%2C%22userVars%22%3A%5B%5D%2C%22futurePreviousVisit%22%3A1741854333%2C%22timesVisited%22%3A1%7D; compass_uid=a16acfea-0a25-47cf-829b-f8066ddb6f13; cto_bundle=JnlwfV9zaUhHNjlYN3hNeXNHdEVRclJ0MkFtYndtT3JOS1UlMkZYWGYlMkJOaWpMdE0zVlFjeGo0RVYlMkJZZkdNJTJCellPdFNoTUtRaVZiMGtHTTVQR2R6QTR6dmQ2b0FDOG5Ya29UTW5va0kyMzBObk9JM0hDcE9tTSUyQlgyY2d4b1E2MFJXTzVQM1FYMEw3NiUyRlNHaXZ6ZjYyYnRDUjFCU3clM0QlM0Q; permutive-id=5cbb348c-3700-4415-b7db-7ae962870fbe
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0&dcc=t HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ad-id=A6lKvW-YckCcpEksXXXpLNM; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /dvtag/signals/ids/pub.json?ctx=27566431&cmp=DV1036776&url=https%3A%2F%2Fg1.globo.com&ids=1&token=default HTTP/1.1Host: pub.doubleverify.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dvtag/signals/bsc/pub.json?ctx=27566431&cmp=DV1036776&url=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml&bsc=1&abs=1&token=default HTTP/1.1Host: pub.doubleverify.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/lknv1pl7r0?ref=gtm HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_hm=TTg3MzNJSFotMTktSTI1NQ==&google_push=&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn2u0-faXs3b9k9DTG2UGGEfhe7tLtI_ibRYfBkwPqWkS0PPwjK46j3fXke-fQ
Source: global traffic	HTTP traffic detected: GET /v2.0/geoip?include=geo&include=isp&include=ip_hash&k=cccecec5-8228-435e-81d1-33c4eccc78e6 HTTP/1.1Host: api.permutive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /models/v2/d39f98ec-9259-4f8b-896d-7ab58be1f900-models.bin HTTP/1.1Host: cdn.permutive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/manifest/ HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: datr=a5bSZ-1iSJW6ZN4TLAg0mjsX; fr=0t4Iut1AgKA44xm9K..Bn0paL..AAA.0.0.Bn0paL.AWXgVmMsSIQ; sb=i5bSZ1sl12keJfTmbHsv5GYS; wd=1280x926
Source: global traffic	HTTP traffic detected: GET /track/cmb/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TDID=101001cd-9b70-45ed-bc84-e93cc80ee10c; TDCPM=CAEYBSgCMgsI1vThlO2E8T0QBTgB
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_da787d4f4e8d46e3ad76d5fa568fe786/horizon-client/horizon-common-hit.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tap.php?v=8981&nid=2307&put=101001cd-9b70-45ed-bc84-e93cc80ee10c&gdpr=0&gdpr_consent=&expires=30 HTTP/1.1Host: pixel.rubiconproject.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: khaos=M8733IHZ-19-I255; khaos_p=M8733IHZ-19-I255; audit_p=1\|yQuirGeEF6D7WmimUpBkwBw6pRdvJYWmgmQsb7lAyOgIO/aCm+HpB2zcYbIalQOmmG7zb8n75T2AF7qA5WC/AMnP7mqLQgOLpmvllXEtYN4=; audit=1\|yQuirGeEF6D7WmimUpBkwBw6pRdvJYWmgmQsb7lAyOhysJvEkMKX6WzcYbIalQOmmG7zb8n75T2AF7qA5WC/AMnP7mqLQgOLpmvllXEtYN4=; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /v1/AUTH_e1b09a2d222b4900a437a46914be81e5/static/vendor/libs/comScore-JS-6.3.1.181004.min.js HTTP/1.1Host: s3.glbimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://g1.globo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn2u0-faXs3b9k9DTG2UGGEfhe7tLtI_ibRYfBkwPqWkS0PPwjK46j3fXke-fQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_hm=TTg3MzNJSFotMTktSTI1NQ==&google_push=&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CO6MywE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn2u0-faXs3b9k9DTG2UGGEfhe7tLtI_ibRYfBkwPqWkS0PPwjK46j3fXke-fQ
Source: global traffic	HTTP traffic detected: GET /consulta/ HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/css/style.css HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/css/frontend.min.css HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/css/post-7.css HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/css/popup.min.css HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/css/widget-image.min.css HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/css/widget-heading.min.css HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/css/widget-text-editor.min.css HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/css/widget-icon-box.min.css HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/css/widget-spacer.min.css HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/css/post-68.css HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/images/assets_b212bb18f00a40869a6cd42f77cbeefc_9a4980a830614715b0daf89a874a953a.webp HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/images/image-7-1.png HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/images/senff%401x.png HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/js/webpack-pro.runtime.min.js HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/js/webpack.runtime.min.js HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/js/jquery.min.js HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/js/jquery-migrate.min.js HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/js/frontend-modules.min.js HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/js/hooks.min.js HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/js/i18n.min.js HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/js/frontend.min.js HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consulta/js/core.min.js HTTP/1.1Host: feirao2025.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://feirao2025.com.br/consulta/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_373.3.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/A4tfXiHOGrs/ equals www.facebook.com (Facebook)
Source: chromecache_295.3.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/CCT5pM3qiNk/ equals www.facebook.com (Facebook)
Source: chromecache_373.3.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Ga6vBwdwgUx/ equals www.facebook.com (Facebook)
Source: chromecache_295.3.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/MDzNl_j9yvg/ equals www.facebook.com (Facebook)
Source: chromecache_532.3.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/OKBVmODmb-W/ equals www.facebook.com (Facebook)
Source: chromecache_493.3.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/WRsJ32R7YJG/ equals www.facebook.com (Facebook)
Source: chromecache_295.3.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/aJoeSHn7XcN/ equals www.facebook.com (Facebook)
Source: chromecache_436.3.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_368.3.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Rk:function(){e=sb()},Nd:function(){d()}}};var cc=wa(["data-gtm-yt-inspected-"]),EG=["www.youtube.com","www.youtube-nocookie.com"],FG,GG=!1; equals www.youtube.com (Youtube)
Source: chromecache_445.3.dr	String found in binary or memory: __d("Chromedome",["fbt"],(function(a,b,c,d,e,f,g,h){function i(){if(document.domain==null)return null;var a=document.domain,b=/^intern\./.test(a);if(b)return null;b=/(^\|\.)facebook\.(com\|sg)$/.test(a);if(b)return"facebook";b=/(^\|\.)instagram\.com$/.test(a);if(b)return"instagram";b=/(^\|\.)threads\.(com\|net)$/.test(a);if(b)return"threads";b=/(^\|\.)messenger\.com$/.test(a);return b?"messenger":null}function j(a){if(a==="instagram")return h._(/BTDS/"This is a browser feature intended for developers. If someone told you to copy-paste something here to enable an Instagram feature or \"hack\" someone's account, it is a scam and will give them access to your Instagram account.");return a==="threads"?h._(/BTDS/"This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Threads feature or \"hack\" someone's account, it is a scam and will give them access to your Threads account."):h._(/BTDS/"This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Facebook feature or \"hack\" someone's account, it is a scam and will give them access to your Facebook account.")}function a(a){if(top!==window)return;a=i();if(a==null)return;var b=h._(/BTDS/"Stop!");a=j(a);var c=h._(/BTDS/"See {url} for more information.",[h._param("url","https://www.facebook.com/selfxss")]),d="font-family:helvetica; font-size:20px; ";[[b,d+"font-size:50px; font-weight:bold; color:red; -webkit-text-stroke:1px black;"],[a,d],[c,d],["",""]].map(function(a){window.setTimeout(console.log.bind(console,"\n%c"+a[0].toString(),a[1]))})}g.start=a}),226); equals www.facebook.com (Facebook)
Source: chromecache_368.3.dr	String found in binary or memory: if(!(f\|\|g\|\|k\|\|m.length\|\|n.length))return;var q={Vh:f,Th:g,Uh:k,Bi:m,Ci:n,pf:p,Rb:e},r=z.YT;if(r)return r.ready&&r.ready(d),e;var u=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){u&&u();d()};E(function(){for(var v=A.getElementsByTagName("script"),t=v.length,w=0;w<t;w++){var x=v[w].getAttribute("src");if(PG(x,"iframe_api")\|\|PG(x,"player_api"))return e}for(var y=A.getElementsByTagName("iframe"),B=y.length,C=0;C<B;C++)if(!GG&&NG(y[C],q.pf))return uc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_512.3.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(b){var c=typeof a.URL==="function"?a.URL:a.webkitURL;c=new c(b);c=c.hostname.endsWith(".facebook.com")&&c.pathname=="/signals/iwl.js";if(!c)throw new Error("Disallowed script URL");return b}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_512.3.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_512.3.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_434.3.dr, chromecache_394.3.dr, chromecache_530.3.dr, chromecache_329.3.dr, chromecache_381.3.dr	String found in binary or memory: return f}CG.K="internal.enableAutoEventOnTimer";var cc=wa(["data-gtm-yt-inspected-"]),EG=["www.youtube.com","www.youtube-nocookie.com"],FG,GG=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: feirao2025.com.br
Source: global traffic	DNS traffic detected: DNS query: cdn.utmify.com.br
Source: global traffic	DNS traffic detected: DNS query: g1.globo.com
Source: global traffic	DNS traffic detected: DNS query: s.glbimg.com
Source: global traffic	DNS traffic detected: DNS query: s2.glbimg.com
Source: global traffic	DNS traffic detected: DNS query: s3.glbimg.com
Source: global traffic	DNS traffic detected: DNS query: s03.video.glbimg.com
Source: global traffic	DNS traffic detected: DNS query: p.glbimg.com
Source: global traffic	DNS traffic detected: DNS query: cdn.ampproject.org
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: s04.video.glbimg.com
Source: global traffic	DNS traffic detected: DNS query: horizon-track.globo.com
Source: global traffic	DNS traffic detected: DNS query: horizon-schemas.globo.com
Source: global traffic	DNS traffic detected: DNS query: horizon.globo.com
Source: global traffic	DNS traffic detected: DNS query: globo-ab.globo.com
Source: global traffic	DNS traffic detected: DNS query: tags.tiqcdn.com
Source: global traffic	DNS traffic detected: DNS query: tags.globo.com
Source: global traffic	DNS traffic detected: DNS query: cocoon.globo.com
Source: global traffic	DNS traffic detected: DNS query: novabarra.globo.com
Source: global traffic	DNS traffic detected: DNS query: s2-g1.glbimg.com
Source: global traffic	DNS traffic detected: DNS query: aswpsdkus.com
Source: global traffic	DNS traffic detected: DNS query: recomendacao.globo.com
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: ab.g.globo
Source: global traffic	DNS traffic detected: DNS query: topics-privacy-sandbox.globo.com
Source: global traffic	DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: web-api.globoid.globo.com
Source: global traffic	DNS traffic detected: DNS query: recusers.globo.com
Source: global traffic	DNS traffic detected: DNS query: globo-mab.globo.com
Source: global traffic	DNS traffic detected: DNS query: facebook.com
Source: global traffic	DNS traffic detected: DNS query: goidc.globo.com
Source: global traffic	DNS traffic detected: DNS query: usergate.globo.com
Source: global traffic	DNS traffic detected: DNS query: ads.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: www.googletagservices.com
Source: global traffic	DNS traffic detected: DNS query: sdk.mrf.io
Source: global traffic	DNS traffic detected: DNS query: a-fds.youborafds01.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: gum.criteo.com
Source: global traffic	DNS traffic detected: DNS query: api.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: grid-bidder.criteo.com
Source: global traffic	DNS traffic detected: DNS query: prg.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: fastlane.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: publickeyservice.msmt.gcp.privacysandboxservices.com
Source: global traffic	DNS traffic detected: DNS query: events.newsroom.bi
Source: global traffic	DNS traffic detected: DNS query: cdn.doubleverify.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: trackid.globoid.globo.com
Source: global traffic	DNS traffic detected: DNS query: flowcards.mrf.io
Source: global traffic	DNS traffic detected: DNS query: acdn.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: eus.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: check.analytics.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: prebid-a.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: invstatic101.creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: static.criteo.net
Source: global traffic	DNS traffic detected: DNS query: oa.openxcdn.net
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: token.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: d39f98ec-9259-4f8b-896d-7ab58be1f900.edge.permutive.app
Source: global traffic	DNS traffic detected: DNS query: esp.rtbhouse.com
Source: global traffic	DNS traffic detected: DNS query: tps.doubleverify.com
Source: global traffic	DNS traffic detected: DNS query: aax-eu.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: pub.doubleverify.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: d39f98ec-9259-4f8b-896d-7ab58be1f900.prmutv.co
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: api.permutive.com
Source: global traffic	DNS traffic detected: DNS query: cdn.permutive.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: tpsc-ew1.doubleverify.com
Source: global traffic	DNS traffic detected: DNS query: vtrk.doubleverify.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com

Source: unknown

HTTP traffic detected: POST /ajax/browser_error_reports/?device_level=unknown&brsid=7481207318837921387&cpp=C3&cv=1020856402 HTTP/1.1Host: www.facebook.comConnection: keep-aliveContent-Length: 689Content-Type: application/reports+jsonOrigin: https://www.facebook.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: datr=a5bSZ-1iSJW6ZN4TLAg0mjsX

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1964,i,17579965863005368635,7691825881126637209,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2036 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://feirao2025.com.br/consulta/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1964,i,17579965863005368635,7691825881126637209,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2036 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	12 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
http://semantica.globo.com/base/Cidade_Sao_Paulo_SP	0%	Avira URL Cloud	safe
http://be.globo-mab.globoi.com	0%	Avira URL Cloud	safe
https://goidc.authentication.qa.globoi.com/auth/realms/globo.com/protocol/openid-connect/auth	0%	Avira URL Cloud	safe
https://i.s3.glbimg.com/v1/AUTH_59edd422c0c84a879bd37670ae4f538a/internal_photos/bs/2025/R/J/BxyE1xQ	0%	Avira URL Cloud	safe
http://127.0.0.1:8889/header/	0%	Avira URL Cloud	safe
http://feirao2025.com.br/consulta/css/widget-spacer.min.css	100%	Avira URL Cloud	phishing
http://feirao2025.com.br/consulta/js/frontend-modules.min.js	100%	Avira URL Cloud	phishing
http://feirao2025.com.br/consulta/js/webpack.runtime.min.js	100%	Avira URL Cloud	phishing
http://feirao2025.com.br/consulta/images/senff%401x.png	100%	Avira URL Cloud	phishing
http://feirao2025.com.br/consulta/js/hooks.min.js	100%	Avira URL Cloud	phishing
https://i.s3.glbimg.com/v1/AUTH_59edd422c0c84a879bd37670ae4f538a/internal_photos/bs/2025/b/B/rAsrWhS	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
securepubads.g.doubleclick.net	172.217.18.2	true	false	high
jsdelivr.map.fastly.net	151.101.65.229	true	false	high
platform.twitter.map.fastly.net	146.75.120.157	true	false	high
stats.g.doubleclick.net	142.251.168.154	true	false	high
lbingest.cl11.k8s.mrf.io	162.19.102.238	true	false	high
s-e.cache.gcp.cloud.globo	186.192.91.5	true	false	high
pxsrv.net	172.64.145.17	true	false	high
cm.g.doubleclick.net	216.58.206.34	true	false	high
ab.g.globo	35.199.95.156	true	false	high
facebook.com	157.240.0.35	true	false	high
gce-beacons.gcp.gvt2.com	35.201.100.119	true	false	high
www.google.com	142.250.186.132	true	false	high
s2cache.glbimg.com	186.192.91.9	true	false	high
publickeyservice-a.msmt-3.gcp.privacysandboxservices.com	34.49.23.1	true	false	high
cdn-content.ampproject.org	142.250.186.129	true	false	high
match.adsrvr.org	52.223.40.198	true	false	high
tags.globo.com	186.192.81.62	true	false	high
star-mini.c10r.facebook.com	157.240.252.35	true	false	high
aswpsdkus.com	34.160.158.95	true	false	high
e8960.b.akamaiedge.net	23.219.149.145	true	false	high
invstatic101.creativecdn.com	34.96.70.87	true	false	high
d39f98ec-9259-4f8b-896d-7ab58be1f900.prmutv.co	35.241.9.51	true	false	high
esp.rtbhouse.com	35.190.39.111	true	false	high
lbingest.cl13.k8s.mrf.io	91.134.60.128	true	false	high
trackid.globoid.globo.com	34.49.91.78	true	false	high
www3.l.google.com	142.250.186.110	true	false	high
googleads.g.doubleclick.net	142.250.181.226	true	false	high
web-api.globoid.globo.com	34.49.91.78	true	false	high
in-ftd-172.nl3.vip.prod.criteo.net	178.250.1.39	true	false	high
sb.scorecardresearch.com	18.244.18.38	true	false	high
prod.appnexus.map.fastly.net	151.101.193.108	true	false	high
pub.doubleverify.com.cdn.cloudflare.net	104.18.167.224	true	false	high
s.cache.gcp.cloud.globo	186.192.91.5	true	false	high
horizon-schemas.cache.aws.cloud.globo	186.192.81.117	true	false	high
td.doubleclick.net	142.250.185.98	true	false	high
a1241.dsct.akamai.net	2.19.11.8	true	false	high
img.video.globo.com	186.192.91.2	true	false	high
dzfq4ouujrxm8.cloudfront.net	13.33.187.60	true	false	high
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	high
cdn.utmify.com.br	104.26.10.205	true	false	high
flowcards.mrf.io.cdn.cloudflare.net	104.19.219.32	true	false	high
www.googletagservices.com	142.250.185.130	true	false	high
pixel.rubiconproject.net.akadns.net	69.173.144.165	true	false	high
recusers.globo.com	34.95.155.127	true	false	high
rpaas-globo-mab-gcp.rpaasv2-fe.tsuru.gcp.cloud.globo	35.198.52.213	true	false	high
beacons-handoff.gcp.gvt2.com	142.250.180.99	true	false	high
topics-privacy-sandbox.globo.com	34.95.246.234	true	false	high
oa.openxcdn.net	34.102.146.192	true	false	high
rpaas-globo-ab-gcp.rpaasv2-fe.tsuru.gcp.cloud.globo	34.95.229.88	true	false	high
in-ftd-170.nl3.vip.prod.criteo.com	178.250.1.38	true	false	high
tagged-by.rubiconproject.net.akadns.net	69.173.156.139	true	false	high
e8960.e2.akamaiedge.net	23.199.222.204	true	false	high
scontent.xx.fbcdn.net	157.240.251.9	true	false	high
recomendacao.globo.com	35.198.42.85	true	false	high
tpsc-ew1.doubleverify.com	130.211.44.5	true	false	high
novabarra.globo.com	34.36.128.68	true	false	high
api.rlcdn.com	34.120.133.55	true	false	high
a-fds.youborafds01.com	89.149.212.54	true	false	high
goidc.globo.com	34.36.80.210	true	false	high
d39f98ec-9259-4f8b-896d-7ab58be1f900.edge.permutive.app	104.18.35.13	true	false	high
usergate.globo.com	35.198.44.170	true	false	high
api.permutive.com	34.107.254.252	true	false	high
feirao2025.com.br	104.21.74.120	true	false	unknown
check.analytics.rlcdn.com	18.173.205.77	true	false	high
s.amazon-adsystem.com	98.82.157.137	true	false	high
aax-eu.amazon-adsystem.com	52.95.122.74	true	false	high
cdn.permutive.com	104.17.109.19	true	false	high
horizon-track-oci-prod.rpaasv2-fe.tsuru.oci.cloud.globo	64.181.162.16	true	false	unknown
beacons.gvt2.com	142.250.180.67	true	false	high
g1.cache.gcp.cloud.globo	34.73.87.38	true	false	high
sdk.mrf.io.cdn.cloudflare.net	104.19.219.32	true	false	high
cocoon.globo.com	35.244.153.86	true	false	high
gum.nl3.vip.prod.criteo.com	178.250.1.11	true	false	high
horizon-track-useast1c-prod.rpaasv2-fe.tsuru.gcp.cloud.globo	35.207.39.46	true	false	high
analytics.google.com	142.250.185.110	true	false	high
ib.anycast.adnxs.com	37.252.171.53	true	false	high
fe.s3.gcp.cloud.globo	186.192.83.2	true	false	high
prebid-a.rubiconproject.net.akadns.net	3.127.205.242	true	false	high
s3.glbimg.com	unknown	unknown	false	high
static.ads-twitter.com	unknown	unknown	false	high
eus.rubiconproject.com	unknown	unknown	false	high
s04.video.glbimg.com	unknown	unknown	false	high
fastlane.rubiconproject.com	unknown	unknown	false	high
horizon-schemas.globo.com	unknown	unknown	false	high
token.rubiconproject.com	unknown	unknown	false	high
s03.video.glbimg.com	unknown	unknown	false	high
static.criteo.net	unknown	unknown	false	high
acdn.adnxs.com	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
sdk.mrf.io	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
tps.doubleverify.com	unknown	unknown	false	high
globo-ab.globo.com	unknown	unknown	false	high
grid-bidder.criteo.com	unknown	unknown	false	high
horizon-track.globo.com	unknown	unknown	false	high
cdn.doubleverify.com	unknown	unknown	false	high
tags.tiqcdn.com	unknown	unknown	false	high
s2.glbimg.com	unknown	unknown	false	high
s.glbimg.com	unknown	unknown	false	high
globo-mab.globo.com	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
https://s3.glbimg.com/v1/AUTH_f75bb4776e3c4683acd769d47144995f/player-assets/1.1.0/playerAssets.min.js	false		high
https://goidc.globo.com/auth/realms/globo.com/protocol/openid-connect/3p-cookies/step2.html	false		high
https://s3.glbimg.com/v1/AUTH_e1b09a2d222b4900a437a46914be81e5/static/vendor/libs/comScore-JS-6.3.1.181004.min.js	false		high
https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2740220746504818&correlator=83014267561356&eid=83321072%2C31065645%2C31084739%2C31087491&output=ldjh&gdfp_req=1&vrg=202503060101&ptt=17&impl=fif&gdpr=0&iu_parts=95377733%2Ctvg_G1%2CSua_Regiao%3ENordeste%3ECeara&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=1&didk=3223810205&dids=banner_materia1&adfs=4165219037&sfv=1-0-41&eri=1&sc=1&cookie_enabled=1&arp=1&abxe=1&dt=1741854312824&lmt=1741854312&adxs=691&adys=1297&biw=1263&bih=897&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&uas=1&url=https%3A%2F%2Fg1.globo.com%2Fce%2Fceara%2Fnoticia%2F2024%2F10%2F30%2Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml&ref=http%3A%2F%2Ffeirao2025.com.br%2F&vis=2&psz=300x0&msz=300x0&fws=4&ohw=1263&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1741854286416&idt=8095&prev_scp=tvg_pos%3DMATERIA1%26gadv_id%3Ddbe34eb1f48dd41cb38e7d4f87c876d27e4e76921741854311499%26rc%3DMATERIA1_0&cust_params=ext-bsafety%3Dconteudo%2520seguro%26safe%3D%26ambient%3Dweb%26cor_pagina%3DC4170C%26ext-ctx-mc%3D179%252C259%252C130%252C93%252C342%252C78%252C167%252C132%252C335%252C330%26ext-ctx-csi%3D%26tipo_pagina%3Dmulti-content%26tvg_cma%3DG1%252CCE%252CCear%25C3%25A1%26tvg_pgName%3Dmateria%26tvg_pgStr%3Dg1%252Fce%252Fcear%25C3%25A1%26tvg_random%3D1%26tvg_temas%3Dcoca-cola%252Ccolgate%252Cblack-friday%252Cempreendedorismo%252CCEF%252Capple%252Cunilever%252Cheineken%252Cbbrasil%26tvg_topico%3Dconteudo%2520seguro%26tvg_url%3Dg1.globo.com%252Fce%252Fceara%252Fnoticia%252F2024%252F10%252F30%252Ffeirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml%26as_obra%3D%26as_tempo%3D%26as_assun%3D%26as_canal%3D%26ext-canal%3D%26ext-obra%3D%26tvg_prop%3Duserneeds-conectar%26glb_id%3DMlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4%253D%26glb_tipo%3Danonimo%26pgv_id%3D99fe54f7-bdc5-4637-a228-7f1269994935%26ext-cont-iab%3D391%252C406%252C596%252C474%252C473%252C52%252C53%26permutive%3D%26permutive-id%3D%26ptime%3D1741854311496%26prmtvvid%3D%26prmtvwid%3D&adks=4201241263&frm=20&eoidce=1&td=1&egid=15604&tan=b1dea1bc-d0cf-4a73-9c88-8685d6912ebe&tdf=2	false		high
https://s3.glbimg.com/v1/AUTH_f7d75b8ab8c8447292333ff06480419a/nav-cdn/menu/1.3.2/fn-menu.min.js	false		high
https://api.permutive.com/v2.0/batch/events?enrich=false&sdkp=true&k=cccecec5-8228-435e-81d1-33c4eccc78e6	false		high
https://s3.glbimg.com/v1/AUTH_acd8438fd650434baa93efc372c066a1/libs/liveramp/ats/prod/lib-liveramp-ats-latest.js	false		high
https://static.xx.fbcdn.net/rsrc.php/v4/yC/r/CmvN4QRe53p.js	false		high
http://feirao2025.com.br/consulta/css/widget-spacer.min.css	true	Avira URL Cloud: phishing	unknown
https://horizon-schemas.globo.com/schemas	false		high
https://s3.glbimg.com/cdn/fonts/proximanova/bold.woff2	false		high
https://www.googletagservices.com/agrp/prod/model_person_country_code_US_person_region_code_47415f353234.json	false		high
https://sdk.mrf.io/statics/compass-multimedia-sdk.js?version=2056	false		high
https://a-fds.youborafds01.com/data?outputformat=json&system=globo&pluginVersion=6.8.42-adapterless-js&requestNumber=0.9134558237263202&timemark=1741854330264	false		high
https://cdn.ampproject.org/v0/amp-video-0.1.js	false		high
https://api.permutive.com/adv/v4/segment?k=cccecec5-8228-435e-81d1-33c4eccc78e6	false		high
https://recomendacao.globo.com/v3/globocom/ab/G1-FEED-REGIONAIS-item?responseFormat=legacyPublishing&page=1&perPage=10&glb_uid=MlVM5ub5TVYPluTM9_x7f6zFUuQJWnnzgexbttJfje4=&hsid=614de52b-b278-453e-aa45-00e13d9a956d&anchors.item=//g1.globo.com/ce/ceara/noticia/2024/10/30/feirao-limpa-nome-oferece-descontos-de-ate-99percent-em-dividas-confira-passo-a-passo.ghtml	false		high
https://s3.glbimg.com/v1/AUTH_da787d4f4e8d46e3ad76d5fa568fe786/globo-ab/globo-ab-v2.min.js?loading-agent=global-webdeps	false		high
https://aax-eu.amazon-adsystem.com/s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0	false		high
https://securepubads.g.doubleclick.net/pagead/managed/dict/m202503110101/gpt	false		high
https://oa.openxcdn.net/esp.js	false		high
https://s3.glbimg.com/v1/AUTH_f75bb4776e3c4683acd769d47144995f/viewport-play-plugin/v1.2.0/viewport-play-plugin.min.js	false		high
https://horizon-track.globo.com/event/g1	false		high
https://cdn.ampproject.org/v0/amp-fit-text-0.1.js	false		high
https://static.xx.fbcdn.net/rsrc.php/v4/yG/r/-mtchr8RxcM.png	false		high
http://feirao2025.com.br/consulta/js/hooks.min.js	true	Avira URL Cloud: phishing	unknown
https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T&gdpr=0	false		high
https://s3.glbimg.com/cdn/icons/sharebar/fb/v2/fb_inv.svg	false		high
https://s3.glbimg.com/v1/AUTH_f75bb4776e3c4683acd769d47144995f/detach-plugin/1.0.0/clapprDetachPlugin.min.js	false		high
https://pub.doubleverify.com/signals/pub.js	false		high
https://s3.glbimg.com/v1/AUTH_b922f1376f6c452e9bb337cc7d996a6e/codex/foundation/typefaces/opensans-bold-italic.woff2	false		high
https://s3.glbimg.com/v1/AUTH_b922f1376f6c452e9bb337cc7d996a6e/codex/foundation/typefaces/version/6408cb8fc43ff49841e181db/globotipo-variable.css	false		high
https://s3.glbimg.com/cdn/libs/clappr-plugins/login-screen/1.2.1/player-plugin-login-screen.min.js	false		high
https://s3.glbimg.com/v1/AUTH_f7d75b8ab8c8447292333ff06480419a/nav-cdn/config/2.2.3/fn-config.min.json	false		high
https://cm.g.doubleclick.net/pixel?google_nid=rp&google_hm=TTg3MzNJSFotMTktSTI1NQ==&google_push=&gdpr=0	false		high
http://feirao2025.com.br/consulta/js/webpack.runtime.min.js	true	Avira URL Cloud: phishing	unknown
https://static.xx.fbcdn.net/rsrc.php/v5/yG/l/0,cross/ecprsH-2uyq.css	false		high
https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7481207318837921387&cpp=C3&cv=1020856402	false		high
https://match.adsrvr.org/track/cmb/rubicon?gdpr=0	false		high
http://feirao2025.com.br/consulta/js/frontend-modules.min.js	true	Avira URL Cloud: phishing	unknown
http://feirao2025.com.br/consulta/images/senff%401x.png	true	Avira URL Cloud: phishing	unknown
https://s2-g1.glbimg.com/3ayr8htYmxdMM7KeCllulMCKYwM=/0x0:984x656/984x0/smart/filters:strip_icc()/i.s3.glbimg.com/v1/AUTH_59edd422c0c84a879bd37670ae4f538a/internal_photos/bs/2024/y/H/h3ilo7RXyspO4vw5LPCg/feirao.jpg	false		high
https://trackid.globoid.globo.com/v1/devices/events/web	false		high
https://s3.glbimg.com/v1/AUTH_b922f1376f6c452e9bb337cc7d996a6e/codex/foundation/fonts/5462f4c64759cc666538a326be3e6de1.woff2	false		high
https://static.xx.fbcdn.net/rsrc.php/v4/yQ/r/53cBvwDy5lP.js	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://s2-g1.glbimg.com/q6Q425Ys5I3jbIg8uEXz8pbFnm0=/188x106/top/smart/filters:max_age(3600)/https:	chromecache_410.3.dr, chromecache_296.3.dr	false		high
https://s2-g1.glbimg.com/QMSPKYVoOP5O-WCwbXXlGi3ilLg=/810x456/top/smart/filters:max_age(3600)/https:	chromecache_410.3.dr, chromecache_296.3.dr	false		high
https://g1.globo.com/mt/mato-grosso/video/video-mulher-se-agarra-a-para-brisa-de-carro-em-movimento-	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://www.googletagservices.com/agrp/	chromecache_475.3.dr, chromecache_464.3.dr	false		high
https://s2-g1.glbimg.com/EKpEbKWwq0ygacOZZ10dmnePFcE=/570x620/top/smart/https://i.s3.glbimg.com/v1/A	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://g1.globo.com/ce/ceara/noticia/2025/03/12/empresas-de-internet-suspendem-atividades-em-meio-a	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://s2-g1.glbimg.com/PkR5tVYqmj3hjtru69afn0QqofI=/94x94/top/smart/filters:max_age(3600)/https://	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://g1.globo.com/mg/minas-gerais/mg2/video/corpo-de-jovem-de-21-anos-e-encontrado-enterrado-em-c	chromecache_410.3.dr, chromecache_296.3.dr	false		high
https://s2-g1.glbimg.com/Nzh8abUe4jor47X2Eb4YIHa_li8=/106x108/top/smart/https://i.s3.glbimg.com/v1/A	chromecache_304.3.dr, chromecache_404.3.dr	false		high
http://semantica.globo.com/base/Cidade_Sao_Paulo_SP	chromecache_380.3.dr	false	Avira URL Cloud: safe	unknown
https://s2-g1.glbimg.com/slZv8tiNtynEr913h3foG-Gzps4=/456x810/top/smart/https://i.s3.glbimg.com/v1/A	chromecache_410.3.dr, chromecache_296.3.dr	false		high
https://s3.glbimg.com/v1/AUTH_acd8438fd650434baa93efc372c066a1/libs/liveramp/ats/prod/lib-liveramp-a	chromecache_361.3.dr	false		high
https://www.internalfb.com/intern/invariant/	chromecache_373.3.dr	false		high
https://goidc.authentication.qa.globoi.com/auth/realms/globo.com/protocol/openid-connect/auth	chromecache_502.3.dr	false	Avira URL Cloud: safe	unknown
https://s2-g1.glbimg.com/Rqkn6EB41U1V4zPr0cKeZeASBJo=/304x540/top/smart/https://i.s3.glbimg.com/v1/A	chromecache_410.3.dr, chromecache_296.3.dr	false		high
https://pub.doubleverify.com/signals/pub.js#ctx=27566431&cmp=DV1036776	chromecache_324.3.dr	false		high
https://s2-g1.glbimg.com/zmGUiV4Bdno8yiPjONPu1sfJPPg=/570x620/top/smart/https://i.s3.glbimg.com/v1/A	chromecache_410.3.dr, chromecache_296.3.dr	false		high
https://s2-g1.glbimg.com/HnGRdT_25tJbMe0Lq5bKkExAGTs=/94x94/top/smart/https://i.s3.glbimg.com/v1/AUT	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://s2-g1.glbimg.com/QoE96XLVWUYWGE35KB_tP58umpA=/540x304/top/smart/https://i.s3.glbimg.com/v1/A	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://s2-g1.glbimg.com/n-j1c5EObHDFR9AV1s6spp_0wbE=/1080x608/top/smart/https://i.s3.glbimg.com/v1/	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://s2-g1.glbimg.com/oYLlvUgh2z3nC_iHR4XhZl7VOpg=/188x106/top/smart/filters:max_age(3600)/https:	chromecache_410.3.dr, chromecache_296.3.dr	false		high
https://s2-g1.glbimg.com/am7mv_h5U9HNJb2QUnFiIQpaaTw=/106x108/top/smart/https://i.s3.glbimg.com/v1/A	chromecache_410.3.dr, chromecache_296.3.dr	false		high
https://s2-g1.glbimg.com/5-bcbFiQXNdNB7wTmYw97bcto-E=/94x94/top/smart/https://i.s3.glbimg.com/v1/AUT	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://openjsf.org/	chromecache_475.3.dr	false		high
http://127.0.0.1:8889/header/	chromecache_527.3.dr, chromecache_366.3.dr	false	Avira URL Cloud: safe	unknown
https://s2-g1.glbimg.com/628kHUUtGMPS8nPKrPeibdHe1HM=/608x1080/top/smart/https://i.s3.glbimg.com/v1/	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://s2-g1.glbimg.com/G-DmAb0p2Ac3xaH70_aULH_hYTQ=/94x94/top/smart/https://i.s3.glbimg.com/v1/AUT	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://s2-g1.glbimg.com/ZIRuqIzerT1S4zDfc31cvN6pvIQ=/304x540/top/smart/https://i.s3.glbimg.com/v1/A	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://s2-g1.glbimg.com/1MANFIyQqV5egjvJQqcpbyfkRis=/1080x608/top/smart/filters:max_age(3600)/https	chromecache_410.3.dr, chromecache_296.3.dr	false		high
https://s2-g1.glbimg.com/m1IaDOPqfi1xxWIvkzOFGnscHek=/106x108/top/smart/https://i.s3.glbimg.com/v1/A	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://s2-g1.glbimg.com/FKyj_F1yLzDNxL5RhUaH4a1FZEs=/188x106/top/smart/https://i.s3.glbimg.com/v1/A	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://securepubads.g.doubleclick.net/pagead/js/cocar.js	chromecache_293.3.dr	false		high
https://s2-g1.glbimg.com/Dcv6tavjfISxsqYrJPMFRVljKfY=/94x94/top/smart/https://i.s3.glbimg.com/v1/AUT	chromecache_304.3.dr, chromecache_404.3.dr	false		high
http://underscorejs.org/LICENSE	chromecache_475.3.dr	false		high
https://s01.video.glbimg.com/deo/vi/51/49/13414951	chromecache_410.3.dr, chromecache_296.3.dr	false		high
http://be.globo-mab.globoi.com	chromecache_491.3.dr	false	Avira URL Cloud: safe	unknown
https://s3.glbimg.com/v1/AUTH_acd8438fd650434baa93efc372c066a1/libs/lib-double-verify/prod/lib-doubl	chromecache_361.3.dr	false		high
https://s2-g1.glbimg.com/b1XoDBihquKk1UoWHnis5jQOV7I=/456x810/top/smart/https://i.s3.glbimg.com/v1/A	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://s2-g1.glbimg.com/GqW87RlZs7kjbF5bs3kAMJawysc=/188x106/top/smart/https://i.s3.glbimg.com/v1/A	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://npms.io/search?q=ponyfill.	chromecache_475.3.dr	false		high
https://s2-g1.glbimg.com/TYlLUnr9Gt-c2qhAmyLdjSVq7i8=/570x620/top/smart/https://i.s3.glbimg.com/v1/A	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://gum.criteo.com/sid/json?origin=prebid	chromecache_518.3.dr	false		high
https://s2-g1.glbimg.com/PS4M4GdznlN8P_YVlKjXU6f1Nx4=/1080x1920/top/smart/https://i.s3.glbimg.com/v1	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://s3.glbimg.com/v1/AUTH_f7d75b8ab8c8447292333ff06480419a/nav-cdn/header/	chromecache_366.3.dr	false		high
https://www.clarity.ms/tag/	chromecache_381.3.dr	false		high
https://github.com/google/safevalues/issues	chromecache_293.3.dr	false		high
https://s2-g1.glbimg.com/d83PA3PuxeaSwIwGuudmaUvscKA=/570x620/top/smart/https://i.s3.glbimg.com/v1/A	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://i.s3.glbimg.com/v1/AUTH_59edd422c0c84a879bd37670ae4f538a/internal_photos/bs/2025/R/J/BxyE1xQ	chromecache_304.3.dr, chromecache_404.3.dr	false	Avira URL Cloud: safe	unknown
https://www.rtbhouse.com/	chromecache_508.3.dr	false		high
https://s2-g1.glbimg.com/_9D1ckEC7MiXrtHurNjCKWmHFUI=/188x106/top/smart/filters:max_age(3600)/https:	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://s2-g1.glbimg.com/UUnz_xAsLj98GCF0BrFfecyvFD8=/1080x1920/top/smart/filters:max_age(3600)/http	chromecache_410.3.dr, chromecache_296.3.dr	false		high
https://s2-g1.glbimg.com/nwDwGP9D9WEnuKcFjLomn89qKEw=/1080x1920/top/smart/filters:max_age(3600)/http	chromecache_304.3.dr, chromecache_404.3.dr	false		high
https://s3.glbimg.com/v1/AUTH_05f06ca986b54d6e9c5df94927ccf7fc/libs/globoid-js/1.3.1/globoid-js.min.	chromecache_502.3.dr	false		high
https://i.s3.glbimg.com/v1/AUTH_59edd422c0c84a879bd37670ae4f538a/internal_photos/bs/2025/b/B/rAsrWhS	chromecache_410.3.dr, chromecache_296.3.dr	false	Avira URL Cloud: safe	unknown
https://s2-g1.glbimg.com/dRbZp8NDlF8QO_mRwhvQrmBdFpM=/1080x1920/top/smart/https://i.s3.glbimg.com/v1	chromecache_304.3.dr, chromecache_404.3.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
37.252.171.149	unknown	European Union	29990	ASN-APPNEXUS	false
104.26.10.205	cdn.utmify.com.br	United States	13335	CLOUDFLARENETUS	false
104.19.219.32	flowcards.mrf.io.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
34.96.70.87	invstatic101.creativecdn.com	United States	15169	GOOGLEUS	false
157.240.252.13	unknown	United States	32934	FACEBOOKUS	false
37.252.171.53	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
35.190.39.111	esp.rtbhouse.com	United States	15169	GOOGLEUS	false
157.240.0.35	facebook.com	United States	32934	FACEBOOKUS	false
172.217.18.2	securepubads.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.95.246.234	topics-privacy-sandbox.globo.com	United States	15169	GOOGLEUS	false
178.250.1.11	gum.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
69.173.156.139	tagged-by.rubiconproject.net.akadns.net	United States	26667	RUBICONPROJECTUS	false
186.192.91.5	s-e.cache.gcp.cloud.globo	Brazil	28604	GloboComunicacaoeParticipacoesSABR	false
35.199.95.156	ab.g.globo	United States	15169	GOOGLEUS	false
64.181.162.16	horizon-track-oci-prod.rpaasv2-fe.tsuru.oci.cloud.globo	United States	15227	LUMOSUS	false
91.134.60.128	lbingest.cl13.k8s.mrf.io	France	16276	OVHFR	false
186.192.91.9	s2cache.glbimg.com	Brazil	28604	GloboComunicacaoeParticipacoesSABR	false
216.58.206.34	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
89.149.192.240	unknown	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
178.250.1.39	in-ftd-172.nl3.vip.prod.criteo.net	France	44788	ASN-CRITEO-EUROPEFR	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
157.240.252.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
185.89.210.46	unknown	Germany	29990	ASN-APPNEXUS	false
34.120.133.55	api.rlcdn.com	United States	15169	GOOGLEUS	false
172.217.16.129	unknown	United States	15169	GOOGLEUS	false
130.211.44.5	tpsc-ew1.doubleverify.com	United States	15169	GOOGLEUS	false
142.251.168.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
35.207.39.46	horizon-track-useast1c-prod.rpaasv2-fe.tsuru.gcp.cloud.globo	United States	19527	GOOGLE-2US	false
23.219.149.145	e8960.b.akamaiedge.net	United States	22047	VTRBANDAANCHASACL	false
142.250.186.129	cdn-content.ampproject.org	United States	15169	GOOGLEUS	false
104.17.108.19	unknown	United States	13335	CLOUDFLARENETUS	false
178.250.1.38	in-ftd-170.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
34.36.128.68	novabarra.globo.com	United States	2686	ATGS-MMD-ASUS	false
104.18.35.13	d39f98ec-9259-4f8b-896d-7ab58be1f900.edge.permutive.app	United States	13335	CLOUDFLARENETUS	false
35.198.42.85	recomendacao.globo.com	United States	15169	GOOGLEUS	false
186.192.91.2	img.video.globo.com	Brazil	28604	GloboComunicacaoeParticipacoesSABR	false
35.198.52.213	rpaas-globo-mab-gcp.rpaasv2-fe.tsuru.gcp.cloud.globo	United States	15169	GOOGLEUS	false
151.101.193.108	prod.appnexus.map.fastly.net	United States	54113	FASTLYUS	false
104.18.167.224	pub.doubleverify.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
67.220.228.203	unknown	United States	18450	WEBNXUS	false
172.64.145.17	pxsrv.net	United States	13335	CLOUDFLARENETUS	false
13.33.187.60	dzfq4ouujrxm8.cloudfront.net	United States	16509	AMAZON-02US	false
186.192.81.62	tags.globo.com	Brazil	28604	GloboComunicacaoeParticipacoesSABR	false
35.198.44.170	usergate.globo.com	United States	15169	GOOGLEUS	false
104.17.109.19	cdn.permutive.com	United States	13335	CLOUDFLARENETUS	false
142.250.184.226	unknown	United States	15169	GOOGLEUS	false
186.192.83.2	fe.s3.gcp.cloud.globo	Brazil	28604	GloboComunicacaoeParticipacoesSABR	false
69.173.144.165	pixel.rubiconproject.net.akadns.net	United States	26667	RUBICONPROJECTUS	false
34.49.23.1	publickeyservice-a.msmt-3.gcp.privacysandboxservices.com	United States	2686	ATGS-MMD-ASUS	false
3.127.205.242	prebid-a.rubiconproject.net.akadns.net	United States	16509	AMAZON-02US	false
34.95.229.88	rpaas-globo-ab-gcp.rpaasv2-fe.tsuru.gcp.cloud.globo	United States	15169	GOOGLEUS	false
18.244.18.38	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
34.36.80.210	goidc.globo.com	United States	2686	ATGS-MMD-ASUS	false
146.75.120.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
157.240.253.35	unknown	United States	32934	FACEBOOKUS	false
52.223.40.198	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
34.73.87.38	g1.cache.gcp.cloud.globo	United States	15169	GOOGLEUS	false
34.49.91.78	trackid.globoid.globo.com	United States	2686	ATGS-MMD-ASUS	false
162.19.102.238	lbingest.cl11.k8s.mrf.io	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
18.173.205.77	check.analytics.rlcdn.com	United States	3	MIT-GATEWAYSUS	false
69.173.144.138	unknown	United States	26667	RUBICONPROJECTUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
186.192.81.117	horizon-schemas.cache.aws.cloud.globo	Brazil	28604	GloboComunicacaoeParticipacoesSABR	false
35.241.9.51	d39f98ec-9259-4f8b-896d-7ab58be1f900.prmutv.co	United States	15169	GOOGLEUS	false
104.21.74.120	feirao2025.com.br	United States	13335	CLOUDFLARENETUS	false
34.107.254.252	api.permutive.com	United States	15169	GOOGLEUS	false
52.95.122.74	aax-eu.amazon-adsystem.com	United States	16509	AMAZON-02US	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
216.58.206.65	unknown	United States	15169	GOOGLEUS	false
157.240.251.9	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
35.244.153.86	cocoon.globo.com	United States	15169	GOOGLEUS	false
34.95.155.127	recusers.globo.com	United States	15169	GOOGLEUS	false
172.67.202.126	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.185.130	www.googletagservices.com	United States	15169	GOOGLEUS	false
34.102.146.192	oa.openxcdn.net	United States	15169	GOOGLEUS	false
34.160.158.95	aswpsdkus.com	United States	2686	ATGS-MMD-ASUS	false
23.199.222.204	e8960.e2.akamaiedge.net	United States	16625	AKAMAI-ASUS	false
89.149.193.96	unknown	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
89.149.212.53	unknown	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
2.19.11.8	a1241.dsct.akamai.net	European Union	719	ELISA-ASHelsinkiFinlandEU	false
89.149.212.54	a-fds.youborafds01.com	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1636928
Start date and time:	2025-03-13 09:23:37 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://feirao2025.com.br/consulta/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@35/494@260/83
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65483)
Category:	downloaded
Size (bytes):	93636
Entropy (8bit):	5.292860855150671
Encrypted:	false
SSDEEP:	1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ
MD5:	3576A6E73C9DCCDBBC4A2CF8FF544AD7
SHA1:	06E872300088B9BA8A08427D28ED0EFCDF9C6FF5
SHA-256:	61C6CAEBD23921741FB5FFE6603F16634FCA9840C2BF56AC8201E9264D6DACCF
SHA-512:	27D41F6CFB8596A183D8261509AEB39FCFFB3C48199C6A4CE6AB45381660C2E8E30E71B9C39163C78E98CEABC887F391B2D723EE5B92B6FBC81E48AC422E522B
Malicious:	false
Reputation:	low
URL:	https://s3.glbimg.com/cdn/libs/jquery/1.8.3/jquery.min.js
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /.(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t,

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://feirao2025.com.br/consulta/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 291

Windows Analysis Report
http://feirao2025.com.br/consulta/