| revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc |  151.101.2.184 | 200 OK | 14 kB |
URL User Request GET HTTP/2revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc IP151.101.2.184:443
CertificateIssuerCertainly Subjectrevistadelahorro.com Fingerprint56:DC:96:36:94:0A:12:50:4F:7F:43:8D:48:77:8A:C7:EC:CD:54:3B ValidityWed, 25 Dec 2024 15:17:45 GMT - Fri, 24 Jan 2025 15:17:44 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (7869) Hash25e72cfec3eccaee6a66aca6abffba32 9b3aa11089bc8fe866222fbef154883b857ea056 51ea11e74a63b5263434ffbcd929f9fed904d164619659d3c774797be2f5cd62
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc HTTP/1.1
Host: revistadelahorro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-page: F_57289_572167_2032213_2313133
x-index: 0
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin, <https://images.funnelish.com>; rel=preconnect; crossorigin, <https://img.youtube.com>; rel=preconnect; crossorigin
x-country: no
x-step-type: 2
via: 1.1 varnish, 1.1 varnish
content-type: text/html; charset=UTF-8
content-encoding: gzip
accept-ranges: bytes
age: 0
date: Fri, 27 Dec 2024 13:57:11 GMT
x-served-by: cache-hel1410022-HEL, cache-hel1410025-HEL
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1735307831.202501,VS0,VE399
vary: X-Country, Accept-Encoding
set-cookie: x-country_code=NO;
x-geo-city=oslo;
x-geo-latitude=59.930;
x-geo-longitude=10.730;
X-ResourcesToken=1735315031_0x5c46627673cecb4bc320898f9c1935ee1c67ad81; Path=/; SameSite=None; Secure
X-Page=F_57289_572167_2032213_2313133; Path=/; SameSite=None; Secure
content-length: 14005
X-Firefox-Spdy: h2
|
|
| revistadelahorro.com/core.min.js | 151.101.2.184 | 200 OK | 26 kB |
URL GET HTTP/2revistadelahorro.com/core.min.js IP151.101.2.184:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerCertainly Subjectrevistadelahorro.com Fingerprint56:DC:96:36:94:0A:12:50:4F:7F:43:8D:48:77:8A:C7:EC:CD:54:3B ValidityWed, 25 Dec 2024 15:17:45 GMT - Fri, 24 Jan 2025 15:17:44 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65382) Hash3174264bdc7a3930707b1e87eccd7a31 30851fef4118000b06d364eb2903249152fed782 e6b56c5b5a94c34b53b5a8334701acf419dd227f80ec03a0f955d10bc925456d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /core.min.js HTTP/1.1
Host: revistadelahorro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc
Cookie: x-country_code=NO; x-geo-city=oslo; x-geo-latitude=59.930; x-geo-longitude=10.730; X-ResourcesToken=1735315031_0x5c46627673cecb4bc320898f9c1935ee1c67ad81; X-Page=F_57289_572167_2032213_2313133
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Jul 2024 03:31:14 GMT
cache-control: no-store
via: 1.1 varnish, 1.1 varnish
content-type: text/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
age: 572803
date: Fri, 27 Dec 2024 13:57:11 GMT
x-served-by: cache-hel1410022-HEL, cache-hel1410025-HEL
x-cache: MISS, HIT
x-cache-hits: 0, 0
x-timer: S1735307832.815200,VS0,VE1
vary: Accept-Encoding
set-cookie: x-country_code=NO;
x-geo-city=oslo;
x-geo-latitude=59.930;
x-geo-longitude=10.730;
content-length: 25997
X-Firefox-Spdy: h2
|
|
| hbmukp.mcgo2.com/conv.js |  18.197.219.199 | 200 OK | 384 B |
IP18.197.219.199:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerLet's Encrypt Subject*.mcgo2.com FingerprintAE:D1:EC:0A:DC:65:75:D2:B2:9E:B2:BA:07:06:E0:0C:43:60:26:23 ValidityTue, 29 Oct 2024 03:58:25 GMT - Mon, 27 Jan 2025 03:58:24 GMT
File typeJavaScript source, ASCII text, with very long lines (583), with no line terminators Hash62af41dadaa47bbcb6e5023d2d22590e f70240b49ba450123149a4e18df63c685a1c2d4e f9931812d25e3bcb27648bbc605313b5bc97a80ac4279a4a453a192eb4c766c1
GET /conv.js HTTP/1.1
Host: hbmukp.mcgo2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 27 Dec 2024 13:57:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 384
server: nginx
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
x-robots-tag: noindex, nofollow, noarchive
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| revistadelahorro.com/core.min.css | 151.101.2.184 | 200 OK | 9.8 kB |
URL GET HTTP/2revistadelahorro.com/core.min.css IP151.101.2.184:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerCertainly Subjectrevistadelahorro.com Fingerprint56:DC:96:36:94:0A:12:50:4F:7F:43:8D:48:77:8A:C7:EC:CD:54:3B ValidityWed, 25 Dec 2024 15:17:45 GMT - Fri, 24 Jan 2025 15:17:44 GMT
File typeUnicode text, UTF-8 text, with very long lines (49857), with no line terminators Hash7f9180796df155434c8127c311116594 c6f6efa6a104d202b777b58edbe23ae8bd2104dc a0a05c21853e95f250a516ecdd8b2e15cf8168e39a292ca4b402701c099a708b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /core.min.css HTTP/1.1
Host: revistadelahorro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc
Cookie: x-country_code=NO; x-geo-city=oslo; x-geo-latitude=59.930; x-geo-longitude=10.730; X-ResourcesToken=1735315031_0x5c46627673cecb4bc320898f9c1935ee1c67ad81; X-Page=F_57289_572167_2032213_2313133
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
via: 1.1 varnish, 1.1 varnish
cache-control: no-store
last-modified: Wed, 30 Oct 2024 22:03:16 GMT
content-encoding: gzip
accept-ranges: bytes
age: 0
date: Fri, 27 Dec 2024 13:57:11 GMT
x-served-by: cache-hel1410024-HEL, cache-hel1410025-HEL
x-cache: MISS, HIT
x-cache-hits: 0, 0
x-timer: S1735307832.815776,VS0,VE122
vary: Accept-Encoding
set-cookie: x-country_code=NO;
x-geo-city=oslo;
x-geo-latitude=59.930;
x-geo-longitude=10.730;
content-length: 9837
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2 | 216.58.207.227 | 200 OK | 22 kB |
URL GET HTTP/2fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2 IP216.58.207.227:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 22504, version 1.0 Hash1c6c65523675abc6fcd78e804325bd77 898d9808304dc157f5dcb18ca169ec6e2b96b3d7 08664859baab5ed98f0bf818ed77e38464ff1826dc6406d5ecbd651409afbd92
GET /s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://revistadelahorro.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22504
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 20 Dec 2024 19:03:37 GMT
expires: Sat, 20 Dec 2025 19:03:37 GMT
cache-control: public, max-age=31536000
age: 586415
last-modified: Tue, 02 May 2023 15:12:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 19 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18596, version 1.0 Hashc83e4437a53d7f849f9d32df3d6b68f3 fabea5ad92ed3e2431659b02e7624df30d0c6bbc d9bada3a44bb2ffa66dec5cc781cafc9ef17ed876cd9b0c5f7ef18228b63cebb
GET /s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://revistadelahorro.com
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 20 Dec 2024 19:03:05 GMT
expires: Sat, 20 Dec 2025 19:03:05 GMT
cache-control: public, max-age=31536000
age: 586447
last-modified: Thu, 01 Aug 2024 20:41:21 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 18 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18536, version 1.0 Hash8eff0b8045fd1959e117f85654ae7770 227fee13ceb7c410b5c0bb8000258b6643cb6255 89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571
GET /s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://revistadelahorro.com
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18536
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 20 Dec 2024 19:08:18 GMT
expires: Sat, 20 Dec 2025 19:08:18 GMT
cache-control: public, max-age=31536000
age: 586134
last-modified: Thu, 01 Aug 2024 20:41:24 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| img.funnelish.com/57289/572167/1732539544-Progetto%20senza%20titolo%20-%202024-11-25T135858.989.png | 151.101.130.132 | 200 OK | 3.0 kB |
URL GET HTTP/2img.funnelish.com/57289/572167/1732539544-Progetto%20senza%20titolo%20-%202024-11-25T135858.989.png IP151.101.130.132:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerLet's Encrypt Subjectimg.funnelish.com Fingerprint56:53:5C:62:1F:86:E7:E6:20:78:93:89:4C:AC:77:9B:F4:32:39:22 ValidityMon, 23 Dec 2024 19:47:40 GMT - Sun, 23 Mar 2025 19:47:39 GMT
File typeRIFF (little-endian) data, Web/P image Hashb6ebf790c084b74d6165467a71bb7ad7 c72117f830a5398842c9d4b4facb075555465a44 93f3c01909e53f4a3809ce2727ce90dfd4289c8af1def2992f0b9b846739a50c
GET /57289/572167/1732539544-Progetto%20senza%20titolo%20-%202024-11-25T135858.989.png HTTP/1.1
Host: img.funnelish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://revistadelahorro.com
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=31536000
content-type: image/webp
etag: "P2XAQLMSr4bRiOYsm3jXV521HhFAX9p58pbDo0QxM0o"
fastly-io-info: ifsz=5126 idim=256x53 ifmt=png ofsz=2970 odim=256x53 ofmt=webp
fastly-io-served-by: img04-europe-west1
fastly-stats: io=1
server: UploadServer
x-goog-generation: 1732539544337392
x-goog-hash: crc32c=g/6HVA==, md5=NZ5urPi4sU0o7fbZYgVQIw==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 5126
x-guploader-uploadid: AFiumC4-7hhDkt3ROB-qXAnti1ZhnN3oapkB6uumoyIshNTEI_meQU7k7WKytwr5yQsE2ibvSz9M9LE
accept-ranges: bytes
age: 0
date: Fri, 27 Dec 2024 13:57:12 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1735307832.311375,VS0,VE228
vary: Accept
content-length: 2970
X-Firefox-Spdy: h2
|
|
| img.funnelish.com/57289/572167/1734086703-RISPARMIODACASA%20%2822%29.png | 151.101.130.132 | 200 OK | 16 kB |
URL GET HTTP/2img.funnelish.com/57289/572167/1734086703-RISPARMIODACASA%20%2822%29.png IP151.101.130.132:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerLet's Encrypt Subjectimg.funnelish.com Fingerprint56:53:5C:62:1F:86:E7:E6:20:78:93:89:4C:AC:77:9B:F4:32:39:22 ValidityMon, 23 Dec 2024 19:47:40 GMT - Sun, 23 Mar 2025 19:47:39 GMT
File typeRIFF (little-endian) data, Web/P image Hashd6cf1c88c4c8a03e744c9cefd79dfd3e 36c5eb93ee3b4240d0fb2521431a84f021610940 f83699da40be8d8f2ba2c0ed8bd2427d8031cd2ac881a1fc039e62d38154c611
GET /57289/572167/1734086703-RISPARMIODACASA%20%2822%29.png HTTP/1.1
Host: img.funnelish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://revistadelahorro.com
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=31536000
content-type: image/webp
etag: "mPfo/+dR9tb9tiFvLiwwKVS2jriYO8TlE0/nRcU0NkU"
fastly-io-info: ifsz=33946 idim=500x150 ifmt=png ofsz=16496 odim=500x150 ofmt=webp
fastly-io-served-by: img03-europe-west1
fastly-stats: io=1
server: UploadServer
x-goog-generation: 1734086703392217
x-goog-hash: crc32c=Vrmq9g==, md5=wFsOe/OafDAzqcV8VwRHzQ==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 33946
x-guploader-uploadid: AFiumC5RqSF7sRfN5r43Wm9VECgUZRViHVb6i_-O3PgDh6b5fXJAbwu2JQhkIhz7UpelunAFE9c4NB4
accept-ranges: bytes
age: 0
date: Fri, 27 Dec 2024 13:57:12 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1735307832.287231,VS0,VE448
vary: Accept
content-length: 16496
X-Firefox-Spdy: h2
|
|
| img.funnelish.com/57289/572167/1735138948-D_NQ_NP_785594-MLU74967778721_032024-O.webp?auto=compress,format&fit=clip&w=60&h=60 | 151.101.130.132 | 200 OK | 19 kB |
URL GET HTTP/2img.funnelish.com/57289/572167/1735138948-D_NQ_NP_785594-MLU74967778721_032024-O.webp?auto=compress,format&fit=clip&w=60&h=60 IP151.101.130.132:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerLet's Encrypt Subjectimg.funnelish.com Fingerprint56:53:5C:62:1F:86:E7:E6:20:78:93:89:4C:AC:77:9B:F4:32:39:22 ValidityMon, 23 Dec 2024 19:47:40 GMT - Sun, 23 Mar 2025 19:47:39 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x499, Scaling: [none]x[none], YUV color, decoders should clamp Hash193865e78eb97d760ce4eba79c5da7f5 0c850090bfbe18f291bd03f54ae3de09817a3189 8a2f3d089b4aff59e7dfa16f89fcd111e8153773bf0d89a3b3337fbb530d340d
GET /57289/572167/1735138948-D_NQ_NP_785594-MLU74967778721_032024-O.webp?auto=compress,format&fit=clip&w=60&h=60 HTTP/1.1
Host: img.funnelish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=31536000
content-type: image/webp
etag: "clPMIC8auzbS67m6H713xShL9wPQT9XErqBLcaN39gg"
fastly-io-info: ifsz=18870 idim=500x499 ifmt=webp ofsz=18870 odim=500x499 ofmt=webp
fastly-io-served-by: img03-europe-west1
fastly-io-warning: Failed to shrink image
fastly-stats: io=1
server: UploadServer
x-goog-generation: 1735138948228863
x-goog-hash: crc32c=vc911A==, md5=GThl5465fXYM5OunnF2n9Q==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 18870
x-guploader-uploadid: AFiumC4_W8hatuJ3VCMtnH6ge-ovEPVTwxyrBXO41HHS-Qgqge2QU45o41SF2JVNphdqo82fHqDn4Tc
accept-ranges: bytes
date: Fri, 27 Dec 2024 13:57:12 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1735307832.436669,VS0,VE335
vary: Accept
content-length: 18870
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Lato:wght@900&display=swap | 142.250.74.106 | 200 OK | 5.4 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Lato:wght@900&display=swap IP142.250.74.106:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint30:E5:7E:29:A5:A1:81:DB:C8:A8:49:80:67:40:12:AB:30:C0:34:8D ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT
File typegzip compressed data, max compression Hash11dd12bfe3c7fd77054dbbd1c86f7fe5 bc3cfa32799c4be88523684fb0ab1706d851b477 1c73de8fb428238884a097b7e0755434f83fc6cf697262f56c6748ebd3a9fdd6
GET /css2?family=Lato:wght@900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 27 Dec 2024 13:57:11 GMT
date: Fri, 27 Dec 2024 13:57:11 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| wersusform.com/spain-upsell/add-cart.png | 82.180.136.239 | 200 OK | 13 kB |
URL GET wersusform.com/spain-upsell/add-cart.png IP82.180.136.239:0 ASN#47583 Hostinger International Limited
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerLet's Encrypt Subjectwersusform.com Fingerprint78:EA:7E:83:03:D2:A8:66:93:1D:4A:FB:34:2B:5C:C9:0F:84:12:39 ValidityFri, 06 Dec 2024 07:07:50 GMT - Thu, 06 Mar 2025 07:07:49 GMT
File typePNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced Hash63c6867f7b191c5640222a42448c96d4 7c6973b6d00db2648133d63c2fee9097c1d5e7f5 db7854551a59d7373769ad13d0acb27d1121f024f2ce30f1afc7ceb6640a5c2b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /spain-upsell/add-cart.png HTTP/1.1
Host: wersusform.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 27 Dec 2024 13:57:12 GMT
content-type: image/png
last-modified: Mon, 25 Nov 2024 08:57:04 GMT
vary: Accept-Encoding
etag: W/"67443be0-afc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| img.funnelish.com/57289/572169/1729774452-Progetto%20senza%20titolo%20-%202024-10-24T145401.657.png?auto=webp&fit=bounds&width=40&height=40 | 151.101.130.132 | 200 OK | 2.7 kB |
URL GET HTTP/2img.funnelish.com/57289/572169/1729774452-Progetto%20senza%20titolo%20-%202024-10-24T145401.657.png?auto=webp&fit=bounds&width=40&height=40 IP151.101.130.132:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerLet's Encrypt Subjectimg.funnelish.com Fingerprint56:53:5C:62:1F:86:E7:E6:20:78:93:89:4C:AC:77:9B:F4:32:39:22 ValidityMon, 23 Dec 2024 19:47:40 GMT - Sun, 23 Mar 2025 19:47:39 GMT
File typeRIFF (little-endian) data, Web/P image Hashb72d51f66d9357aff095ce5bcbee3c28 c6b8db8c59e40978853aa0d27b4fc651e56d5822 9251f766f9224589dd4e0df19a3b5bee2463f3aa3ee6128a41d2e9ca06988d88
GET /57289/572169/1729774452-Progetto%20senza%20titolo%20-%202024-10-24T145401.657.png?auto=webp&fit=bounds&width=40&height=40 HTTP/1.1
Host: img.funnelish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=31536000
content-type: image/webp
etag: "wv/x0rHmf4ITPoukIk0WMQuc51j4rHJYFJ5E+u65foM"
fastly-io-info: ifsz=7487 idim=100x100 ifmt=png ofsz=2698 odim=40x40 ofmt=webp
fastly-io-served-by: img07-europe-west1
fastly-stats: io=1
server: UploadServer
x-goog-generation: 1729774452332972
x-goog-hash: crc32c=G0E6bg==, md5=r1UwYIFFtE66Ac8L1GeEhQ==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7487
x-guploader-uploadid: AFiumC4hKXeIpQMk1ZhGhRyG9i1LqgT9js7wxJEUBTc7T9Uje9SDGEIicuTcUdJdRNgeHYy4Rh9fi7UCLg
accept-ranges: bytes
age: 1509855
date: Fri, 27 Dec 2024 13:57:13 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1735307833.093320,VS0,VE1
vary: Accept
content-length: 2698
X-Firefox-Spdy: h2
|
|
| img.funnelish.com/57289/572167/1735138933-1000w-flame-wall-heater-snatcher-online-shopping-south-africa-28923289632927__39936.1629319475_1024x.webp?auto=compress,format&optimize=medium&fit=clip&w=100%&h=300 | 151.101.130.132 | 200 OK | 58 kB |
URL GET HTTP/2img.funnelish.com/57289/572167/1735138933-1000w-flame-wall-heater-snatcher-online-shopping-south-africa-28923289632927__39936.1629319475_1024x.webp?auto=compress,format&optimize=medium&fit=clip&w=100%&h=300 IP151.101.130.132:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerLet's Encrypt Subjectimg.funnelish.com Fingerprint56:53:5C:62:1F:86:E7:E6:20:78:93:89:4C:AC:77:9B:F4:32:39:22 ValidityMon, 23 Dec 2024 19:47:40 GMT - Sun, 23 Mar 2025 19:47:39 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp Hashd42512cce3ceeb271559bdee54609093 c04236f60ae87d7d78b9830af737a05071d9406a ac206eabf4a01fee006822ea39b8d5f374594797bb538143ceb81130da395ed6
GET /57289/572167/1735138933-1000w-flame-wall-heater-snatcher-online-shopping-south-africa-28923289632927__39936.1629319475_1024x.webp?auto=compress,format&optimize=medium&fit=clip&w=100%&h=300 HTTP/1.1
Host: img.funnelish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://revistadelahorro.com
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=31536000
content-type: image/webp
etag: "goJ3/KllfE8D0sTx2zHrRsbFdkR711S7MFtJOU5Wr2Q"
fastly-io-info: ifsz=96362 idim=1024x1024 ifmt=webp ofsz=58036 odim=1024x1024 ofmt=webp
fastly-io-served-by: img05-europe-west1
fastly-stats: io=1
server: UploadServer
x-goog-generation: 1735138933296604
x-goog-hash: crc32c=84Cncg==, md5=nZDW8naJSKrdLeSxhcJU7Q==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 96362
x-guploader-uploadid: AFiumC4mMi3zTVMXSx67j53fkVgOiYIVWWmbwLdFGY889lKEUcsoUeNj15SYdUn6how5R09H4cpC9x0
accept-ranges: bytes
age: 0
date: Fri, 27 Dec 2024 13:57:13 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1735307832.292854,VS0,VE840
vary: Accept
content-length: 58036
X-Firefox-Spdy: h2
|
|
| img.funnelish.com/57289/572167/1735138941-789.webp?auto=compress,format&fit=clip&w=60&h=60 | 151.101.130.132 | 200 OK | 64 kB |
URL GET HTTP/2img.funnelish.com/57289/572167/1735138941-789.webp?auto=compress,format&fit=clip&w=60&h=60 IP151.101.130.132:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerLet's Encrypt Subjectimg.funnelish.com Fingerprint56:53:5C:62:1F:86:E7:E6:20:78:93:89:4C:AC:77:9B:F4:32:39:22 ValidityMon, 23 Dec 2024 19:47:40 GMT - Sun, 23 Mar 2025 19:47:39 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1200, Scaling: [none]x[none], YUV color, decoders should clamp Hash340a9007dca5231e8385af8940a2e4af d086fe33f2ebf46f7eaf4ce024be77ae45805c59 fc13e9e16158bcfbc296d5fb49cbdaeec27ab0ba86a382eb6e292c206eeeb49b
GET /57289/572167/1735138941-789.webp?auto=compress,format&fit=clip&w=60&h=60 HTTP/1.1
Host: img.funnelish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=31536000
content-type: image/webp
etag: "9M07WF8Zd6W/kQNUhrtozH2B26N0+AQq62kh9Ck4kSM"
fastly-io-info: ifsz=66904 idim=1200x1200 ifmt=webp ofsz=63982 odim=1200x1200 ofmt=webp
fastly-io-served-by: img03-europe-west1
fastly-stats: io=1
server: UploadServer
x-goog-generation: 1735138941645012
x-goog-hash: crc32c=rC4Cvg==, md5=y6eEy+SZnqfd6A7kjyNyXQ==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 66904
x-guploader-uploadid: AFiumC5SFnjlYeLAua92c2YP_FYxErKUG2SjkAXEGZLfxFss5aEcTkkXLPVftpU0f1ssWPlyrMxzyt4
accept-ranges: bytes
age: 0
date: Fri, 27 Dec 2024 13:57:13 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1735307832.436336,VS0,VE726
vary: Accept
content-length: 63982
X-Firefox-Spdy: h2
|
|
| img.funnelish.com/57289/572167/1735138933-1000w-flame-wall-heater-snatcher-online-shopping-south-africa-28923289632927__39936.1629319475_1024x.webp?auto=compress,format&fit=clip&w=60&h=60 | 151.101.130.132 | 200 OK | 88 kB |
URL GET HTTP/2img.funnelish.com/57289/572167/1735138933-1000w-flame-wall-heater-snatcher-online-shopping-south-africa-28923289632927__39936.1629319475_1024x.webp?auto=compress,format&fit=clip&w=60&h=60 IP151.101.130.132:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerLet's Encrypt Subjectimg.funnelish.com Fingerprint56:53:5C:62:1F:86:E7:E6:20:78:93:89:4C:AC:77:9B:F4:32:39:22 ValidityMon, 23 Dec 2024 19:47:40 GMT - Sun, 23 Mar 2025 19:47:39 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp Hashcc4c01543eb96b256ac36e2f8d9cc2ed 338349784588f2ec7236c54d53cbba93e899e1cd 0b23243f87ac4e8cd3881f06756c043f0878d992e4e73d37ab1be6fab59dce9a
GET /57289/572167/1735138933-1000w-flame-wall-heater-snatcher-online-shopping-south-africa-28923289632927__39936.1629319475_1024x.webp?auto=compress,format&fit=clip&w=60&h=60 HTTP/1.1
Host: img.funnelish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=31536000
content-type: image/webp
etag: "RNL9Vr/nZU+Faxn2EKJsf1LhHTZXBgEb4nVpnaZaB0M"
fastly-io-info: ifsz=96362 idim=1024x1024 ifmt=webp ofsz=88262 odim=1024x1024 ofmt=webp
fastly-io-served-by: img05-europe-west1
fastly-stats: io=1
server: UploadServer
x-goog-generation: 1735138933296604
x-goog-hash: crc32c=84Cncg==, md5=nZDW8naJSKrdLeSxhcJU7Q==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 96362
x-guploader-uploadid: AFiumC4mMi3zTVMXSx67j53fkVgOiYIVWWmbwLdFGY889lKEUcsoUeNj15SYdUn6how5R09H4cpC9x0
accept-ranges: bytes
age: 0
date: Fri, 27 Dec 2024 13:57:13 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1735307833.590769,VS0,VE580
vary: Accept
content-length: 88262
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=AW-16780923972 | 142.250.74.72 | 200 OK | 102 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=AW-16780923972 IP142.250.74.72:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintFA:A6:D6:5C:A6:DC:BE:D1:9A:34:42:70:3B:66:13:21:40:A4:C9:E4 ValidityMon, 02 Dec 2024 08:35:56 GMT - Mon, 24 Feb 2025 08:35:55 GMT
File typeJavaScript source, ASCII text, with very long lines (3969) Size102 kB (101712 bytes) Hashb7d753277a537713b8521a03b0335cb7 c286912c4ddf49ab4d3665b7fafbf8b49f1a1394 7fc72014ed23a29bb8b687f68c0e690f2ea2e424f6aaa1133fd29eba132c54de
GET /gtag/js?id=AW-16780923972 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 27 Dec 2024 13:57:14 GMT
expires: Fri, 27 Dec 2024 13:57:14 GMT
cache-control: private, max-age=900
last-modified: Fri, 27 Dec 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 101712
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=AW-16769314712 | 142.250.74.72 | 200 OK | 101 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=AW-16769314712 IP142.250.74.72:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintFA:A6:D6:5C:A6:DC:BE:D1:9A:34:42:70:3B:66:13:21:40:A4:C9:E4 ValidityMon, 02 Dec 2024 08:35:56 GMT - Mon, 24 Feb 2025 08:35:55 GMT
File typeJavaScript source, ASCII text, with very long lines (3969) Size101 kB (101383 bytes) Hash5c027d374bcf8a00ec3d8ba3b83d76f2 6ca2a325029b2a7e8c157c86eca9305ec3a25679 c5d63679abc8eac1e232e0032d2bfe616addf1426dfb2f7e8b1f8b63dd9f03f4
GET /gtag/js?id=AW-16769314712 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 27 Dec 2024 13:57:14 GMT
expires: Fri, 27 Dec 2024 13:57:14 GMT
cache-control: private, max-age=900
last-modified: Fri, 27 Dec 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 101383
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=AW-16769314712&l=dataLayer&cx=c>m=45be4cc1v9200222152za200 | 142.250.74.72 | 200 OK | 101 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=AW-16769314712&l=dataLayer&cx=c>m=45be4cc1v9200222152za200 IP142.250.74.72:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintFA:A6:D6:5C:A6:DC:BE:D1:9A:34:42:70:3B:66:13:21:40:A4:C9:E4 ValidityMon, 02 Dec 2024 08:35:56 GMT - Mon, 24 Feb 2025 08:35:55 GMT
File typeJavaScript source, ASCII text, with very long lines (3969) Size101 kB (101416 bytes) Hash0c28c3e05653694e8597f64725874d92 d2cc2ff13ba3536a264aca4ab6d51b316fb7fdfc 196a03fec275f24ff423789ee640f7b7efc9251f8981a4e54489a093b567959e
GET /gtag/js?id=AW-16769314712&l=dataLayer&cx=c>m=45be4cc1v9200222152za200 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 27 Dec 2024 13:57:14 GMT
expires: Fri, 27 Dec 2024 13:57:14 GMT
cache-control: private, max-age=900
last-modified: Fri, 27 Dec 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 101416
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/ccm/collect?en=page_view&dl=https%3A%2F%2Frevistadelahorro.com%2Fpow-sav-ups&scrsrc=www.googletagmanager.com&frm=0&rnd=432207172.1735307834&dt=Upsell%20Template&auid=1236593396.1735307834&navt=n&npa=1>m=45be4cc1v9200222152za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101925629~102067555~102067808~102081485~102198178&tft=1735307834462&tfd=3458&apve=1 | 142.250.74.164 | 200 OK | 0 B |
URL POST HTTP/2www.google.com/ccm/collect?en=page_view&dl=https%3A%2F%2Frevistadelahorro.com%2Fpow-sav-ups&scrsrc=www.googletagmanager.com&frm=0&rnd=432207172.1735307834&dt=Upsell%20Template&auid=1236593396.1735307834&navt=n&npa=1>m=45be4cc1v9200222152za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101925629~102067555~102067808~102081485~102198178&tft=1735307834462&tfd=3458&apve=1 IP142.250.74.164:443
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint73:D7:A2:DD:D9:66:88:D8:12:DA:21:B2:6C:66:23:55:F7:97:39:A7 ValidityMon, 02 Dec 2024 08:37:44 GMT - Mon, 24 Feb 2025 08:37:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ccm/collect?en=page_view&dl=https%3A%2F%2Frevistadelahorro.com%2Fpow-sav-ups&scrsrc=www.googletagmanager.com&frm=0&rnd=432207172.1735307834&dt=Upsell%20Template&auid=1236593396.1735307834&navt=n&npa=1>m=45be4cc1v9200222152za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101925629~102067555~102067808~102081485~102198178&tft=1735307834462&tfd=3458&apve=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://revistadelahorro.com
DNT: 1
Connection: keep-alive
Referer: https://revistadelahorro.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
date: Fri, 27 Dec 2024 13:57:15 GMT
content-type: text/plain
expires: Fri, 01 Jan 1990 00:00:00 GMT
vary: Origin, X-Origin, Referer
server: scaffolding on HTTPServer2
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://revistadelahorro.com
access-control-expose-headers: date,vary,vary,vary,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| analytics.app.funnelish.com/view | 34.111.146.89 | 204 No Content | 0 B |
URL OPTIONS HTTP/2analytics.app.funnelish.com/view IP34.111.146.89:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerGoogle Trust Services Subjectanalytics.app.funnelish.com Fingerprint62:36:37:61:86:EC:73:75:AA:BE:66:C5:05:93:06:EC:50:92:7D:66 ValidityThu, 28 Nov 2024 19:43:56 GMT - Wed, 26 Feb 2025 20:37:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /view HTTP/1.1
Host: analytics.app.funnelish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://revistadelahorro.com/
Origin: https://revistadelahorro.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-headers: content-type
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: *
allow: OPTIONS, POST
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
x-cloud-trace-context: db40013273f87b31dd0d8a32d257db2f
date: Fri, 27 Dec 2024 13:57:16 GMT
content-type: text/html
server: Google Frontend
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| analytics.app.funnelish.com/view | 34.111.146.89 | 200 OK | 69 B |
URL OPTIONS HTTP/2analytics.app.funnelish.com/view IP34.111.146.89:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://revistadelahorro.com/pow-sav-ups?order_id=b75b12fd-1c96-4449-b1ef-973acfa263bc CertificateIssuerGoogle Trust Services Subjectanalytics.app.funnelish.com Fingerprint62:36:37:61:86:EC:73:75:AA:BE:66:C5:05:93:06:EC:50:92:7D:66 ValidityThu, 28 Nov 2024 19:43:56 GMT - Wed, 26 Feb 2025 20:37:30 GMT
Hash192d6c97a6bf8a303de95283a1a3c860 8aef578afe88eba266489e6a6b455fab0720909f 6f7625cfd7eeb81e69659981421b15e645f8a99db0411bc8f2c1777b128f590c
POST /view HTTP/1.1
Host: analytics.app.funnelish.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://revistadelahorro.com/
Content-Type: application/json
Content-Length: 405
Origin: https://revistadelahorro.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
vary: Origin
x-cloud-trace-context: f61e0a232887a0b73f649239edecf8e3
date: Fri, 27 Dec 2024 13:57:16 GMT
server: Google Frontend
content-length: 69
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|