Dono do Golpe: +55 (71)3180-3584 (CREDPARCEIRO Assessoria)
Golpe : phishing
Link da armadilha: https://kmya.to/pSnYSWh
Estrutura do phishing:
date: Sun, 26 Apr 2026 01:18:04 GMT
content-type: text/html; charset=utf-8
location: https://wa.me/557131803584?text=%28mar%29+Oi%2C+recebi+o+SMS+e+quero+saber+o+valor+disponivel+para+liberacao+hoje.+Meu+telefone%3A ( telefone da vítima)
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6InBoUUdTS1liMnFZcmZBNmZlMlJXQnc9PSIsInZhbHVlIjoic1R0VS9pekJ4Z3FYTlBXUnprSjZoRytjSFBTRlJsRVZHYVRpSXNvRFp3bUp4VkdJbTVpU1FsUEI4RXFhZ0JmV0hOKzJqU25RcytUUEZNanB1VkFNdmw0bklFcHRxbkRuMnJCWEdVU1lvUkxOZjR3YkM1d05PZ0xZQUduWkxQQmoiLCJtYWMiOiIzYzdkMjZlYzZkNmI4ZTRlOTk1MmExMzY4ZWExMTQyZjE3OTQ3NjM3ODA2YWQzMGNmMTkwNmJhNTA3MGJkOGM2IiwidGFnIjoiIn0%3D; expires=Sun, 26-Apr-2026 03:18:04 GMT; Max-Age=7200; path=/; secure; SameSite=lax
set-cookie: kolmeya_shortener_session=eyJpdiI6IjdqTTNYVkZCNUNhMmlGait6OXlMM1E9PSIsInZhbHVlIjoiYTJZUlFRZVVaU1NQN0REVXJZTUtoNkY4M0JmdVdaUElydU5EM28xT0hrSVBWazVJd1l6Ny9UNS9pNm5CMGh1aHp4Vmt2VC9jbHZVbGtMb0FmQ0cydktCeWRGWGpBUDdsbjJiSGRTVUJQUFdZclVzb2hsUEtqSnRGLzhmL1BNMFoiLCJtYWMiOiI4YmMwOTE4Yzc3OWVkMmNlYjRkZmMzZDkyY2Y5ZTg2YjA0ODdhYTU3OTdjMmQ4MDQ2NzVhMzY0YzdkMGYxMjhlIiwidGFnIjoiIn0%3D; expires=Sun, 26-Apr-2026 03:18:04 GMT; Max-Age=7200; path=/; secure; HttpOnly; SameSite=lax
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
HTTP/2 302
vary: Accept-Encoding
location: https://api.whatsapp.com/send/?phone=557131803584&text=%28mar%29+Oi%2C+recebi+o+SMS+e+quero+saber+o+valor+disponivel+para+liberacao+hoje.+Meu+telefone%3A ( telefone da vítima)&type=phone_number&app_absent=0
reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
x-frame-options: DENY
content-security-policy: default-src 'self' blob: *.whatsapp.net *.whatsapp.com *.fbcdn.net *.facebook.com *.facebook.net;script-src *.whatsapp.com *.whatsapp.net *.facebook.com *.facebook.net 'nonce-80NufltT' 'self' blob: *.fbcdn.net;style-src *.whatsapp.com *.whatsapp.net 'unsafe-inline' *.facebook.com 'self' blob: *.fbcdn.net *.facebook.net;connect-src *.whatsapp.com *.whatsapp.net wss://*.facebook.com:* *.fbcdn.net 'self' data: blob:;font-src *.whatsapp.com *.whatsapp.net *.facebook.com static.xx.fbcdn.net 'self' data: blob:;img-src *.whatsapp.com *.whatsapp.net *.facebook.com *.fbcdn.net static.xx.fbcdn.net 'self' data: blob:;media-src *.fbcdn.net 'self' data: blob:;child-src 'self' data: blob:;frame-src *.facebook.com *.whatsapp.com 'self' blob: whatsapp:;manifest-src 'self' data: blob:;object-src 'self' data: blob:;worker-src *.whatsapp.com *.whatsapp.net *.facebook.com *.facebook.net 'nonce-80NufltT' 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
document-policy: force-load-at-top
document-policy: include-js-call-stacks-in-crash-reports
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
origin-agent-cluster: ?1
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-type: text/html; charset="utf-8"
x-fb-debug: zZiiPbUvlmp4ZHjfWHQBW/ajVjdaT/9kfA1WD/RADC5lY0ZlIF1IYWUrCnk1FmFDJ0Q5CWirLvppsyA4KpkUUg==
content-length: 0
date: Sun, 26 Apr 2026 01:18:10 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=4, rtx=0, c=17, mss=1380, tbw=4601, tp=-1, tpl=-1, uplat=138, ullat=0
alt-svc: h3=":443"; ma=86400
HTTP/2 200
vary: Accept-Encoding
set-cookie: wa_lang_pref=pt_br; expires=Sun, 03-May-2026 01:18:15 GMT; Max-Age=604800; path=/; domain=.whatsapp.com; secure; SameSite=Lax
set-cookie: wa_ul=8950327e-238d-4a36-88a5-5288abc63d14; expires=Sat, 25-Jul-2026 01:18:15 GMT; Max-Age=7776000; path=/send; domain=.api.whatsapp.com; secure; httponly; SameSite=Lax
reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.whatsapp.com/whatsapp_browser_error_reports/?device_level=unknown&brsid=7632871118697670975&cpp=C3&cv=1038162681&st=1777166295670", permissions_policy="https://www.whatsapp.com/whatsapp_browser_error_reports/"
report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/?device_level=unknown&brsid=7632871118697670975&cpp=C3&cv=1038162681&st=1777166295670"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/"}],"group":"permissions_policy"}
content-security-policy: default-src 'self' blob:;script-src 'nonce-upurrDea' *.facebook.com *.fbcdn.net *.whatsapp.com *.whatsapp.net https://*.facebook.net 'self' blob:;style-src 'self' 'unsafe-inline' https://static.whatsapp.net data: blob:;connect-src 'self' https://*.whatsapp.com data: blob:;font-src https://*.fbcdn.net https://static.whatsapp.net data:;img-src https://*.fbcdn.net https://*.whatsapp.net 'self' data: blob:;media-src 'self' data: blob:;child-src 'self' data: blob:;frame-src whatsapp: 'self' data: blob:;manifest-src 'self' data: blob:;object-src 'self' data: blob:;worker-src 'nonce-upurrDea' *.facebook.com *.fbcdn.net *.whatsapp.com *.whatsapp.net https://*.facebook.net 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;
content-security-policy: frame-ancestors https://*.whatsapp.com https://whatsapp.com;
document-policy: include-js-call-stacks-in-crash-reports
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
origin-agent-cluster: ?1
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-type: text/html; charset="utf-8"
x-fb-debug: I+gH7EtKtAkKkBy0PFhIlWVIs+YHafYTop0Ta5Lt1spAwK3OoTCeqbXpt2qotYHypsIiqwyhcGkyCm4beG+SFA==
date: Sun, 26 Apr 2026 01:18:15 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=3, rtx=0, c=17, mss=1380, tbw=4602, tp=-1, tpl=-1, uplat=339, ullat=0
alt-svc: h3=":443"; ma=86400.
