Golpe : PicPay - Seu PicPay Card ta liberado! Aproveite ainda hoje, pois a oferta sem anuidade pode expirar. Peça o seu!!!

Link :https://go.picpay.me/Up

Tipo do Golpe: Phishing/malware

Alvo: Clientes do Picpay

Estrutura do phishing:

date: Sun, 26 Apr 2026 02:29:39 GMT

content-type: text/html; charset=utf-8

content-length: 92

cache-control: private, max-age=90

content-security-policy: referrer always;

location: https://picpay.onelink.me/No7S/41wtcdcy

referrer-policy: unsafe-url

set-cookie: _bit=q3q2tD-b6ed1d570776f10734-00V; Domain=go.picpay.me; Expires=Fri, 23 Oct 2026 02:29:39 GMT

strict-transport-security: max-age=1209600

via: 1.1 google

alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

HTTP/2 301 

content-type: application/octet-stream

content-length: 0

location: https://picpay.com/baixar-o-app-picpay?source_caller=ui&shortlink=41wtcdcy&c=onelink_card_upgrade&pid=onelink_card_upgrade&deep_link_value=picpay%3A%2F%2Fpicpay%2Fcard%2Fregister%2Fhybrid&af_xp=custom&af_force_deeplink=true

date: Sun, 26 Apr 2026 02:29:45 GMT

strict-transport-security: max-age=31536000; includeSubDomains

accept-ch: Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List

cache-control: no-cache, no-store

x-cache: Miss from cloudfront

via: 1.1 1854e234bfccfb7a387b67a7feff26d2.cloudfront.net (CloudFront)

x-amz-cf-pop: GRU3-P1

x-amz-cf-id: M6xlOVYBpdscH3sx5DGnqlPVjD-5EcWtkAFoyiMRzYmKvZjiuMihvQ==

HTTP/2 404 

content-type: text/html; charset=utf-8

content-length: 897

cache-control: max-age=7200, s-maxage=172800, must-revalidate

last-modified: Fri, 27 Mar 2026 19:40:10 GMT

x-error: Lambda: x-error: failed to load /baixar-o-app-picpay.md from content-bus: 404

via: 1.1 varnish, 1.1 varnish, 1.1 varnish, 1.1 cbccd49f9035581311c7cf9544e6a602.cloudfront.net (CloudFront)

x-timer: S1777018957.005888,VS0,VE0

accept-ranges: bytes

date: Sun, 26 Apr 2026 02:29:50 GMT

x-served-by: cache-iad-kcgs7200114-IAD, cache-iad-kcgs7200114-IAD, cache-gru-sbgr1930055-GRU

x-cache-hits: 0, 9, 0

strict-transport-security: max-age=31557600

vary: Accept-Encoding

x-cache: Error from cloudfront

x-amz-cf-pop: GRU1-P2

x-amz-cf-id: Vbay4Ib-l3G8k9-3jbAb-cBGmwG4OYnDUeBOnrobs5mSZM5cxwBzhQ==