Domain pay.costaextra.com.br
Italy
TELECOM ITALIA SPARKLE S.p.A.
Software information

AmazonS3 AmazonS3

tcp/443

CloudFront

tcp/80

  • Open service 2001:41a8:44:4::4f8c:5fa1:80 · pay.costaextra.com.br

    2026-01-22 16:10 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Content-Type: text/html
Content-Length: 167
Location: https://pay.costaextra.com.br/
X-Amz-Cf-Pop: ZRH52-P1
X-Amz-Cf-Id: pW2EWlSoVlY3DOyJ1VHSuxMOuduFCHv2c_HqmWCWyQzLiQ2d9SU7jg==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Date: Thu, 22 Jan 2026 16:10:35 GMT
Connection: close

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-22 by HttpPlugin
    Create report

  • Open service 2001:41a8:44:4::4f8c:5f2b:443 · pay.costaextra.com.br

    2026-01-22 16:10 

    HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Wed, 15 Oct 2025 14:45:23 GMT
ETag: "07375945770e4f2eeb15678cb43fcb5c"
x-amz-server-side-encryption: aws:kms
x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-central-1:014839708185:key/e21691c3-dea9-4798-a3ed-5de06eabae7a
x-amz-server-side-encryption-bucket-key-enabled: true
x-amz-version-id: CjtWAExiaB7aAh9DBdRlWa2iSe1fwcU2
Accept-Ranges: bytes
Server: AmazonS3
X-Amz-Cf-Pop: ZRH52-P1
X-Amz-Cf-Id: ed2w0oohfHFeL1oIAFSng6gzk3FSsi0bWS5e5DEminOSmciC5n5zow==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Date: Thu, 22 Jan 2026 16:10:12 GMT
Content-Length: 4105
Connection: close

Page title: Costa BR Página de Pagamento Worldpay

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Costa BR Página de Pagamento Worldpay</title>
    <link rel="stylesheet" href="styles.css">
    <script type="text/javascript" src="https://pay.costaextra.com.br/public/392a29f68ed82f10c76c6633499f6945b8cd53bedcb4"  ></script><script src="https://payments.worldpay.com/resources/hpp/integrations/embedded/js/hpp-embedded-integration-library.js"></script>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-sRIl4kxILFvY47J16cr9ZwB07vP4J8+LH7qKQnuqkuIAvNWLzeN8tE5YBujZqJLB" crossorigin="anonymous">
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/js/bootstrap.bundle.min.js" integrity="sha384-FKyoEForCGlyvwx9Hj09JcYn3nv7wiPVlz7YYwJrWVcXK/BmnVDxM+D2scQbITxI" crossorigin="anonymous"></script>
</head>
<body class="p-3">
    <div id="m-spinner" class="spinner-border position-absolute top-50 start-50" role="status">
        <span class="visually-hidden">Loading...</span>
    </div>
    <div id="main" class="d-none">
        <div id="header" class="d-flex flex-row justify-content-between">
            <div id="logo">
                <img src="./costa-logo.png" width="120"  alt="" srcset="">
            </div>
            <div>
                <div class="d-flex flex-row gap-1 align-items-center">
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-lock" viewBox="0 0 16 16">
                        <path fill-rule="evenodd" d="M8 0a4 4 0 0 1 4 4v2.05a2.5 2.5 0 0 1 2 2.45v5a2.5 2.5 0 0 1-2.5 2.5h-7A2.5 2.5 0 0 1 2 13.5v-5a2.5 2.5 0 0 1 2-2.45V4a4 4 0 0 1 4-4M4.5 7A1.5 1.5 0 0 0 3 8.5v5A1.5 1.5 0 0 0 4.5 15h7a1.5 1.5 0 0 0 1.5-1.5v-5A1.5 1.5 0 0 0 11.5 7zM8 1a3 3 0 0 0-3 3v2h6V4a3 3 0 0 0-3-3"/>
                    </svg>
                    <div id="checkout">Secure checkout</div>
                </div>
            </div>
        </div>
        <div id="iframe-container" class="d-flex justify-content-center">
            <div id="wp-iframe" class="w-50"></div>
        </div>
        <div id="custom-iframe" class="d-flex justify-content-center pt-3 pb-3">
            <div id="c-wp-try-again" class="wrapper-wp-error d-none" style="width:87%;height:150px;">
                <div class="d-flex flex-row align-items-center gap-1">
                    <p id="error-title">Recusado</p>
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="red" class="bi bi-x-lg" viewBox="0 0 16 16">
                        <path d="M2.146 2.854a.5.5 0 1 1 .708-.708L8 7.293l5.146-5.147a.5.5 0 0 1 .708.708L8.707 8l5.147 5.146a.5.5 0 0 1-.708.708L8 8.707l-5.146 5.147a.5.5 0 0 1-.708-.708L7.293 8z" stroke="red" stroke-width="2"/>
                    </svg>
                </div>
                <p class="error-message">Aconteceu algo de errado com o pagamento. Favor tentar de novo.</p>
                <button onclick="wpErrorTryAgain()">Tentar de novo</button>
            </div>
            <div id="c-wp-exception" class="wrapper-wp-error d-none" style="width:87%;height:150px;">
                <div class="d-flex flex-row align-items-center gap-1">
                    <p id="error-title">Erro</p>
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="red" class="bi bi-x-lg" viewBox="0 0 16 16">
                        <path d="M2.146 2.854a.5.5 0 1 1 .708-.708L8 7.293l5.146-5.147a.5.5 0 0 1 .708.708L8.707 8l5.147 5.146a.5.5 0 0 1-.708.708L8 8.707l-5.146 5.147a.5.5 0 0 1-.708-.708L7.293 8z" stroke="red" stroke-width="2"/>
                    </svg>
                </div>
                <p class="error-message">Aconteceu algo de errado com o pagamento. Favor tentar novamente mais tarde.</p>
            </div>
        </div>
        <button id="cancel-btn" onclick="actionCancel()" class="position-absolute bottom-10 start-50">Cancelar</button>
    </div>
    <script src="script.js"></script>
</body>
    Found 2026-01-22 by HttpPlugin
    Create report

  • Open service 2.16.183.12:80 · pay.costaextra.com.br

    2026-01-22 16:10 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Content-Type: text/html
Content-Length: 167
Location: https://pay.costaextra.com.br/
X-Amz-Cf-Pop: FRA56-P10
X-Amz-Cf-Id: IIFjxnqbJ3oRi5xwLRUT2Qfsah28n_rvMFxAz73NM3x5lEkvFsLoMA==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Date: Thu, 22 Jan 2026 16:10:33 GMT
Connection: close

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-22 by HttpPlugin
    Create report

  • Open service 2001:41a8:44:4::4f8c:5fa1:443 · pay.costaextra.com.br

    2026-01-22 16:10 

    HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Wed, 15 Oct 2025 14:45:23 GMT
ETag: "07375945770e4f2eeb15678cb43fcb5c"
x-amz-server-side-encryption: aws:kms
x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-central-1:014839708185:key/e21691c3-dea9-4798-a3ed-5de06eabae7a
x-amz-server-side-encryption-bucket-key-enabled: true
x-amz-version-id: CjtWAExiaB7aAh9DBdRlWa2iSe1fwcU2
Accept-Ranges: bytes
Server: AmazonS3
X-Amz-Cf-Pop: ZRH52-P1
X-Amz-Cf-Id: FqGTzWzk9Y7MmKEoB65QyL8Au5dM85-FYpR42hT1chnNmK74OLOgcw==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Date: Thu, 22 Jan 2026 16:10:11 GMT
Content-Length: 4105
Connection: close

Page title: Costa BR Página de Pagamento Worldpay

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Costa BR Página de Pagamento Worldpay</title>
    <link rel="stylesheet" href="styles.css">
    <script type="text/javascript" src="https://pay.costaextra.com.br/public/392a29f68ed82f10c76c6633499f6945b8cd53bedcb4"  ></script><script src="https://payments.worldpay.com/resources/hpp/integrations/embedded/js/hpp-embedded-integration-library.js"></script>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-sRIl4kxILFvY47J16cr9ZwB07vP4J8+LH7qKQnuqkuIAvNWLzeN8tE5YBujZqJLB" crossorigin="anonymous">
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/js/bootstrap.bundle.min.js" integrity="sha384-FKyoEForCGlyvwx9Hj09JcYn3nv7wiPVlz7YYwJrWVcXK/BmnVDxM+D2scQbITxI" crossorigin="anonymous"></script>
</head>
<body class="p-3">
    <div id="m-spinner" class="spinner-border position-absolute top-50 start-50" role="status">
        <span class="visually-hidden">Loading...</span>
    </div>
    <div id="main" class="d-none">
        <div id="header" class="d-flex flex-row justify-content-between">
            <div id="logo">
                <img src="./costa-logo.png" width="120"  alt="" srcset="">
            </div>
            <div>
                <div class="d-flex flex-row gap-1 align-items-center">
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-lock" viewBox="0 0 16 16">
                        <path fill-rule="evenodd" d="M8 0a4 4 0 0 1 4 4v2.05a2.5 2.5 0 0 1 2 2.45v5a2.5 2.5 0 0 1-2.5 2.5h-7A2.5 2.5 0 0 1 2 13.5v-5a2.5 2.5 0 0 1 2-2.45V4a4 4 0 0 1 4-4M4.5 7A1.5 1.5 0 0 0 3 8.5v5A1.5 1.5 0 0 0 4.5 15h7a1.5 1.5 0 0 0 1.5-1.5v-5A1.5 1.5 0 0 0 11.5 7zM8 1a3 3 0 0 0-3 3v2h6V4a3 3 0 0 0-3-3"/>
                    </svg>
                    <div id="checkout">Secure checkout</div>
                </div>
            </div>
        </div>
        <div id="iframe-container" class="d-flex justify-content-center">
            <div id="wp-iframe" class="w-50"></div>
        </div>
        <div id="custom-iframe" class="d-flex justify-content-center pt-3 pb-3">
            <div id="c-wp-try-again" class="wrapper-wp-error d-none" style="width:87%;height:150px;">
                <div class="d-flex flex-row align-items-center gap-1">
                    <p id="error-title">Recusado</p>
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="red" class="bi bi-x-lg" viewBox="0 0 16 16">
                        <path d="M2.146 2.854a.5.5 0 1 1 .708-.708L8 7.293l5.146-5.147a.5.5 0 0 1 .708.708L8.707 8l5.147 5.146a.5.5 0 0 1-.708.708L8 8.707l-5.146 5.147a.5.5 0 0 1-.708-.708L7.293 8z" stroke="red" stroke-width="2"/>
                    </svg>
                </div>
                <p class="error-message">Aconteceu algo de errado com o pagamento. Favor tentar de novo.</p>
                <button onclick="wpErrorTryAgain()">Tentar de novo</button>
            </div>
            <div id="c-wp-exception" class="wrapper-wp-error d-none" style="width:87%;height:150px;">
                <div class="d-flex flex-row align-items-center gap-1">
                    <p id="error-title">Erro</p>
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="red" class="bi bi-x-lg" viewBox="0 0 16 16">
                        <path d="M2.146 2.854a.5.5 0 1 1 .708-.708L8 7.293l5.146-5.147a.5.5 0 0 1 .708.708L8.707 8l5.147 5.146a.5.5 0 0 1-.708.708L8 8.707l-5.146 5.147a.5.5 0 0 1-.708-.708L7.293 8z" stroke="red" stroke-width="2"/>
                    </svg>
                </div>
                <p class="error-message">Aconteceu algo de errado com o pagamento. Favor tentar novamente mais tarde.</p>
            </div>
        </div>
        <button id="cancel-btn" onclick="actionCancel()" class="position-absolute bottom-10 start-50">Cancelar</button>
    </div>
    <script src="script.js"></script>
</body>
    Found 2026-01-22 by HttpPlugin
    Create report

  • Open service 2.16.183.18:443 · pay.costaextra.com.br

    2026-01-22 16:10 

    HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Wed, 15 Oct 2025 14:45:23 GMT
ETag: "07375945770e4f2eeb15678cb43fcb5c"
x-amz-server-side-encryption: aws:kms
x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-central-1:014839708185:key/e21691c3-dea9-4798-a3ed-5de06eabae7a
x-amz-server-side-encryption-bucket-key-enabled: true
x-amz-version-id: CjtWAExiaB7aAh9DBdRlWa2iSe1fwcU2
Accept-Ranges: bytes
Server: AmazonS3
X-Amz-Cf-Pop: FRA56-P10
X-Amz-Cf-Id: ycZ2Tr8PinTyRzivfN7caZ-kaZO83yQO94ntrOQb5t4ICvjUBx5J8w==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Date: Thu, 22 Jan 2026 16:10:11 GMT
Content-Length: 4105
Connection: close

Page title: Costa BR Página de Pagamento Worldpay

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Costa BR Página de Pagamento Worldpay</title>
    <link rel="stylesheet" href="styles.css">
    <script type="text/javascript" src="https://pay.costaextra.com.br/public/392a29f68ed82f10c76c6633499f6945b8cd53bedcb4"  ></script><script src="https://payments.worldpay.com/resources/hpp/integrations/embedded/js/hpp-embedded-integration-library.js"></script>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-sRIl4kxILFvY47J16cr9ZwB07vP4J8+LH7qKQnuqkuIAvNWLzeN8tE5YBujZqJLB" crossorigin="anonymous">
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/js/bootstrap.bundle.min.js" integrity="sha384-FKyoEForCGlyvwx9Hj09JcYn3nv7wiPVlz7YYwJrWVcXK/BmnVDxM+D2scQbITxI" crossorigin="anonymous"></script>
</head>
<body class="p-3">
    <div id="m-spinner" class="spinner-border position-absolute top-50 start-50" role="status">
        <span class="visually-hidden">Loading...</span>
    </div>
    <div id="main" class="d-none">
        <div id="header" class="d-flex flex-row justify-content-between">
            <div id="logo">
                <img src="./costa-logo.png" width="120"  alt="" srcset="">
            </div>
            <div>
                <div class="d-flex flex-row gap-1 align-items-center">
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-lock" viewBox="0 0 16 16">
                        <path fill-rule="evenodd" d="M8 0a4 4 0 0 1 4 4v2.05a2.5 2.5 0 0 1 2 2.45v5a2.5 2.5 0 0 1-2.5 2.5h-7A2.5 2.5 0 0 1 2 13.5v-5a2.5 2.5 0 0 1 2-2.45V4a4 4 0 0 1 4-4M4.5 7A1.5 1.5 0 0 0 3 8.5v5A1.5 1.5 0 0 0 4.5 15h7a1.5 1.5 0 0 0 1.5-1.5v-5A1.5 1.5 0 0 0 11.5 7zM8 1a3 3 0 0 0-3 3v2h6V4a3 3 0 0 0-3-3"/>
                    </svg>
                    <div id="checkout">Secure checkout</div>
                </div>
            </div>
        </div>
        <div id="iframe-container" class="d-flex justify-content-center">
            <div id="wp-iframe" class="w-50"></div>
        </div>
        <div id="custom-iframe" class="d-flex justify-content-center pt-3 pb-3">
            <div id="c-wp-try-again" class="wrapper-wp-error d-none" style="width:87%;height:150px;">
                <div class="d-flex flex-row align-items-center gap-1">
                    <p id="error-title">Recusado</p>
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="red" class="bi bi-x-lg" viewBox="0 0 16 16">
                        <path d="M2.146 2.854a.5.5 0 1 1 .708-.708L8 7.293l5.146-5.147a.5.5 0 0 1 .708.708L8.707 8l5.147 5.146a.5.5 0 0 1-.708.708L8 8.707l-5.146 5.147a.5.5 0 0 1-.708-.708L7.293 8z" stroke="red" stroke-width="2"/>
                    </svg>
                </div>
                <p class="error-message">Aconteceu algo de errado com o pagamento. Favor tentar de novo.</p>
                <button onclick="wpErrorTryAgain()">Tentar de novo</button>
            </div>
            <div id="c-wp-exception" class="wrapper-wp-error d-none" style="width:87%;height:150px;">
                <div class="d-flex flex-row align-items-center gap-1">
                    <p id="error-title">Erro</p>
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="red" class="bi bi-x-lg" viewBox="0 0 16 16">
                        <path d="M2.146 2.854a.5.5 0 1 1 .708-.708L8 7.293l5.146-5.147a.5.5 0 0 1 .708.708L8.707 8l5.147 5.146a.5.5 0 0 1-.708.708L8 8.707l-5.146 5.147a.5.5 0 0 1-.708-.708L7.293 8z" stroke="red" stroke-width="2"/>
                    </svg>
                </div>
                <p class="error-message">Aconteceu algo de errado com o pagamento. Favor tentar novamente mais tarde.</p>
            </div>
        </div>
        <button id="cancel-btn" onclick="actionCancel()" class="position-absolute bottom-10 start-50">Cancelar</button>
    </div>
    <script src="script.js"></script>
</body>
    Found 2026-01-22 by HttpPlugin
    Create report

  • Open service 2001:41a8:44:4::4f8c:5f2b:80 · pay.costaextra.com.br

    2026-01-22 16:10 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Content-Type: text/html
Content-Length: 167
Location: https://pay.costaextra.com.br/
X-Amz-Cf-Pop: ZRH52-P1
X-Amz-Cf-Id: IvfPmNiZN5Uq1UvnELqx5AAOId9XxGXK7KIZ5g5F6pt6JtVTBkUVsw==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Date: Thu, 22 Jan 2026 16:10:33 GMT
Connection: close

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-22 by HttpPlugin
    Create report

  • Open service 2.16.183.12:443 · pay.costaextra.com.br

    2026-01-22 16:10 

    HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Wed, 15 Oct 2025 14:45:23 GMT
ETag: "07375945770e4f2eeb15678cb43fcb5c"
x-amz-server-side-encryption: aws:kms
x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-central-1:014839708185:key/e21691c3-dea9-4798-a3ed-5de06eabae7a
x-amz-server-side-encryption-bucket-key-enabled: true
x-amz-version-id: CjtWAExiaB7aAh9DBdRlWa2iSe1fwcU2
Accept-Ranges: bytes
Server: AmazonS3
X-Amz-Cf-Pop: FRA56-P10
X-Amz-Cf-Id: fohzI7fioeNYA85Q0v20pGxJGgXvNh0gdePz1jDrCn-4BhddX0VgVA==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Date: Thu, 22 Jan 2026 16:10:11 GMT
Content-Length: 4105
Connection: close

Page title: Costa BR Página de Pagamento Worldpay

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Costa BR Página de Pagamento Worldpay</title>
    <link rel="stylesheet" href="styles.css">
    <script type="text/javascript" src="https://pay.costaextra.com.br/public/392a29f68ed82f10c76c6633499f6945b8cd53bedcb4"  ></script><script src="https://payments.worldpay.com/resources/hpp/integrations/embedded/js/hpp-embedded-integration-library.js"></script>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-sRIl4kxILFvY47J16cr9ZwB07vP4J8+LH7qKQnuqkuIAvNWLzeN8tE5YBujZqJLB" crossorigin="anonymous">
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/js/bootstrap.bundle.min.js" integrity="sha384-FKyoEForCGlyvwx9Hj09JcYn3nv7wiPVlz7YYwJrWVcXK/BmnVDxM+D2scQbITxI" crossorigin="anonymous"></script>
</head>
<body class="p-3">
    <div id="m-spinner" class="spinner-border position-absolute top-50 start-50" role="status">
        <span class="visually-hidden">Loading...</span>
    </div>
    <div id="main" class="d-none">
        <div id="header" class="d-flex flex-row justify-content-between">
            <div id="logo">
                <img src="./costa-logo.png" width="120"  alt="" srcset="">
            </div>
            <div>
                <div class="d-flex flex-row gap-1 align-items-center">
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-lock" viewBox="0 0 16 16">
                        <path fill-rule="evenodd" d="M8 0a4 4 0 0 1 4 4v2.05a2.5 2.5 0 0 1 2 2.45v5a2.5 2.5 0 0 1-2.5 2.5h-7A2.5 2.5 0 0 1 2 13.5v-5a2.5 2.5 0 0 1 2-2.45V4a4 4 0 0 1 4-4M4.5 7A1.5 1.5 0 0 0 3 8.5v5A1.5 1.5 0 0 0 4.5 15h7a1.5 1.5 0 0 0 1.5-1.5v-5A1.5 1.5 0 0 0 11.5 7zM8 1a3 3 0 0 0-3 3v2h6V4a3 3 0 0 0-3-3"/>
                    </svg>
                    <div id="checkout">Secure checkout</div>
                </div>
            </div>
        </div>
        <div id="iframe-container" class="d-flex justify-content-center">
            <div id="wp-iframe" class="w-50"></div>
        </div>
        <div id="custom-iframe" class="d-flex justify-content-center pt-3 pb-3">
            <div id="c-wp-try-again" class="wrapper-wp-error d-none" style="width:87%;height:150px;">
                <div class="d-flex flex-row align-items-center gap-1">
                    <p id="error-title">Recusado</p>
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="red" class="bi bi-x-lg" viewBox="0 0 16 16">
                        <path d="M2.146 2.854a.5.5 0 1 1 .708-.708L8 7.293l5.146-5.147a.5.5 0 0 1 .708.708L8.707 8l5.147 5.146a.5.5 0 0 1-.708.708L8 8.707l-5.146 5.147a.5.5 0 0 1-.708-.708L7.293 8z" stroke="red" stroke-width="2"/>
                    </svg>
                </div>
                <p class="error-message">Aconteceu algo de errado com o pagamento. Favor tentar de novo.</p>
                <button onclick="wpErrorTryAgain()">Tentar de novo</button>
            </div>
            <div id="c-wp-exception" class="wrapper-wp-error d-none" style="width:87%;height:150px;">
                <div class="d-flex flex-row align-items-center gap-1">
                    <p id="error-title">Erro</p>
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="red" class="bi bi-x-lg" viewBox="0 0 16 16">
                        <path d="M2.146 2.854a.5.5 0 1 1 .708-.708L8 7.293l5.146-5.147a.5.5 0 0 1 .708.708L8.707 8l5.147 5.146a.5.5 0 0 1-.708.708L8 8.707l-5.146 5.147a.5.5 0 0 1-.708-.708L7.293 8z" stroke="red" stroke-width="2"/>
                    </svg>
                </div>
                <p class="error-message">Aconteceu algo de errado com o pagamento. Favor tentar novamente mais tarde.</p>
            </div>
        </div>
        <button id="cancel-btn" onclick="actionCancel()" class="position-absolute bottom-10 start-50">Cancelar</button>
    </div>
    <script src="script.js"></script>
</body>
    Found 2026-01-22 by HttpPlugin
    Create report

  • Open service 2.16.183.18:80 · pay.costaextra.com.br

    2026-01-22 16:10 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Content-Type: text/html
Content-Length: 167
Location: https://pay.costaextra.com.br/
X-Amz-Cf-Pop: FRA56-P10
X-Amz-Cf-Id: exBai_3CBqDsRRC0V_VwOK2YJnuCGR3IS6-NSCzKCrIkdI98ROEhlg==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Date: Thu, 22 Jan 2026 16:10:33 GMT
Connection: close

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-22 by HttpPlugin
    Create report

  • Open service 2.16.204.76:80 · pay.costaextra.com.br

    2026-01-08 09:50 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Content-Type: text/html
Content-Length: 167
Location: https://pay.costaextra.com.br/
X-Amz-Cf-Pop: FRA56-P10
X-Amz-Cf-Id: BopkkKuXX9dvauu2Icn2oM8iU1CJq1fMsQIr0-tnrzFpQCa81Orzbg==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Date: Thu, 08 Jan 2026 09:51:27 GMT
Connection: close

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-08 by HttpPlugin
    Create report

  • Open service 2a02:26f0:ab00::214:8f52:80 · pay.costaextra.com.br

    2026-01-08 09:50 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Content-Type: text/html
Content-Length: 167
Location: https://pay.costaextra.com.br/
X-Amz-Cf-Pop: FRA56-P10
X-Amz-Cf-Id: aFWi7EdzOiQxlI56WupJ_CJ8A3wYWqN5bC8wuqBy3a-8zO0Jt59XUA==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Date: Thu, 08 Jan 2026 09:51:27 GMT
Connection: close

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-08 by HttpPlugin
    Create report

  • Open service 2a02:26f0:ab00::214:8f4b:443 · pay.costaextra.com.br

    2026-01-08 09:50 

    HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Wed, 15 Oct 2025 14:45:23 GMT
ETag: "07375945770e4f2eeb15678cb43fcb5c"
x-amz-server-side-encryption: aws:kms
x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-central-1:014839708185:key/e21691c3-dea9-4798-a3ed-5de06eabae7a
x-amz-server-side-encryption-bucket-key-enabled: true
x-amz-version-id: CjtWAExiaB7aAh9DBdRlWa2iSe1fwcU2
Accept-Ranges: bytes
Server: AmazonS3
X-Amz-Cf-Pop: FRA56-P10
X-Amz-Cf-Id: LMcIwUUxh3V2QEXrNPOEyXMrBfFmUSdvdKNMZgp5Y3aCdIsVZCp6YA==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Date: Thu, 08 Jan 2026 09:50:46 GMT
Content-Length: 4105
Connection: close

Page title: Costa BR Página de Pagamento Worldpay

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Costa BR Página de Pagamento Worldpay</title>
    <link rel="stylesheet" href="styles.css">
    <script type="text/javascript" src="https://pay.costaextra.com.br/public/00fa02ac9ed82f10c76c6633499f6945b8cd53bedcb4"  ></script><script src="https://payments.worldpay.com/resources/hpp/integrations/embedded/js/hpp-embedded-integration-library.js"></script>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-sRIl4kxILFvY47J16cr9ZwB07vP4J8+LH7qKQnuqkuIAvNWLzeN8tE5YBujZqJLB" crossorigin="anonymous">
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/js/bootstrap.bundle.min.js" integrity="sha384-FKyoEForCGlyvwx9Hj09JcYn3nv7wiPVlz7YYwJrWVcXK/BmnVDxM+D2scQbITxI" crossorigin="anonymous"></script>
</head>
<body class="p-3">
    <div id="m-spinner" class="spinner-border position-absolute top-50 start-50" role="status">
        <span class="visually-hidden">Loading...</span>
    </div>
    <div id="main" class="d-none">
        <div id="header" class="d-flex flex-row justify-content-between">
            <div id="logo">
                <img src="./costa-logo.png" width="120"  alt="" srcset="">
            </div>
            <div>
                <div class="d-flex flex-row gap-1 align-items-center">
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-lock" viewBox="0 0 16 16">
                        <path fill-rule="evenodd" d="M8 0a4 4 0 0 1 4 4v2.05a2.5 2.5 0 0 1 2 2.45v5a2.5 2.5 0 0 1-2.5 2.5h-7A2.5 2.5 0 0 1 2 13.5v-5a2.5 2.5 0 0 1 2-2.45V4a4 4 0 0 1 4-4M4.5 7A1.5 1.5 0 0 0 3 8.5v5A1.5 1.5 0 0 0 4.5 15h7a1.5 1.5 0 0 0 1.5-1.5v-5A1.5 1.5 0 0 0 11.5 7zM8 1a3 3 0 0 0-3 3v2h6V4a3 3 0 0 0-3-3"/>
                    </svg>
                    <div id="checkout">Secure checkout</div>
                </div>
            </div>
        </div>
        <div id="iframe-container" class="d-flex justify-content-center">
            <div id="wp-iframe" class="w-50"></div>
        </div>
        <div id="custom-iframe" class="d-flex justify-content-center pt-3 pb-3">
            <div id="c-wp-try-again" class="wrapper-wp-error d-none" style="width:87%;height:150px;">
                <div class="d-flex flex-row align-items-center gap-1">
                    <p id="error-title">Recusado</p>
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="red" class="bi bi-x-lg" viewBox="0 0 16 16">
                        <path d="M2.146 2.854a.5.5 0 1 1 .708-.708L8 7.293l5.146-5.147a.5.5 0 0 1 .708.708L8.707 8l5.147 5.146a.5.5 0 0 1-.708.708L8 8.707l-5.146 5.147a.5.5 0 0 1-.708-.708L7.293 8z" stroke="red" stroke-width="2"/>
                    </svg>
                </div>
                <p class="error-message">Aconteceu algo de errado com o pagamento. Favor tentar de novo.</p>
                <button onclick="wpErrorTryAgain()">Tentar de novo</button>
            </div>
            <div id="c-wp-exception" class="wrapper-wp-error d-none" style="width:87%;height:150px;">
                <div class="d-flex flex-row align-items-center gap-1">
                    <p id="error-title">Erro</p>
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="red" class="bi bi-x-lg" viewBox="0 0 16 16">
                        <path d="M2.146 2.854a.5.5 0 1 1 .708-.708L8 7.293l5.146-5.147a.5.5 0 0 1 .708.708L8.707 8l5.147 5.146a.5.5 0 0 1-.708.708L8 8.707l-5.146 5.147a.5.5 0 0 1-.708-.708L7.293 8z" stroke="red" stroke-width="2"/>
                    </svg>
                </div>
                <p class="error-message">Aconteceu algo de errado com o pagamento. Favor tentar novamente mais tarde.</p>
            </div>
        </div>
        <button id="cancel-btn" onclick="actionCancel()" class="position-absolute bottom-10 start-50">Cancelar</button>
    </div>
    <script src="script.js"></script>
</body>
    Found 2026-01-08 by HttpPlugin
    Create report

  • Open service 2.16.204.77:443 · pay.costaextra.com.br

    2026-01-08 09:50 

    HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Wed, 15 Oct 2025 14:45:23 GMT
ETag: "07375945770e4f2eeb15678cb43fcb5c"
x-amz-server-side-encryption: aws:kms
x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-central-1:014839708185:key/e21691c3-dea9-4798-a3ed-5de06eabae7a
x-amz-server-side-encryption-bucket-key-enabled: true
x-amz-version-id: CjtWAExiaB7aAh9DBdRlWa2iSe1fwcU2
Accept-Ranges: bytes
Server: AmazonS3
X-Amz-Cf-Pop: FRA56-P10
X-Amz-Cf-Id: UaNUsZ5HQ_-DJaXVTNIqL1oHeQ4cwF8GUjtNznsfL9LiTvlrxRIv8Q==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Date: Thu, 08 Jan 2026 09:50:46 GMT
Content-Length: 4105
Connection: close

Page title: Costa BR Página de Pagamento Worldpay

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Costa BR Página de Pagamento Worldpay</title>
    <link rel="stylesheet" href="styles.css">
    <script type="text/javascript" src="https://pay.costaextra.com.br/public/00fa02ac9ed82f10c76c6633499f6945b8cd53bedcb4"  ></script><script src="https://payments.worldpay.com/resources/hpp/integrations/embedded/js/hpp-embedded-integration-library.js"></script>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-sRIl4kxILFvY47J16cr9ZwB07vP4J8+LH7qKQnuqkuIAvNWLzeN8tE5YBujZqJLB" crossorigin="anonymous">
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/js/bootstrap.bundle.min.js" integrity="sha384-FKyoEForCGlyvwx9Hj09JcYn3nv7wiPVlz7YYwJrWVcXK/BmnVDxM+D2scQbITxI" crossorigin="anonymous"></script>
</head>
<body class="p-3">
    <div id="m-spinner" class="spinner-border position-absolute top-50 start-50" role="status">
        <span class="visually-hidden">Loading...</span>
    </div>
    <div id="main" class="d-none">
        <div id="header" class="d-flex flex-row justify-content-between">
            <div id="logo">
                <img src="./costa-logo.png" width="120"  alt="" srcset="">
            </div>
            <div>
                <div class="d-flex flex-row gap-1 align-items-center">
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-lock" viewBox="0 0 16 16">
                        <path fill-rule="evenodd" d="M8 0a4 4 0 0 1 4 4v2.05a2.5 2.5 0 0 1 2 2.45v5a2.5 2.5 0 0 1-2.5 2.5h-7A2.5 2.5 0 0 1 2 13.5v-5a2.5 2.5 0 0 1 2-2.45V4a4 4 0 0 1 4-4M4.5 7A1.5 1.5 0 0 0 3 8.5v5A1.5 1.5 0 0 0 4.5 15h7a1.5 1.5 0 0 0 1.5-1.5v-5A1.5 1.5 0 0 0 11.5 7zM8 1a3 3 0 0 0-3 3v2h6V4a3 3 0 0 0-3-3"/>
                    </svg>
                    <div id="checkout">Secure checkout</div>
                </div>
            </div>
        </div>
        <div id="iframe-container" class="d-flex justify-content-center">
            <div id="wp-iframe" class="w-50"></div>
        </div>
        <div id="custom-iframe" class="d-flex justify-content-center pt-3 pb-3">
            <div id="c-wp-try-again" class="wrapper-wp-error d-none" style="width:87%;height:150px;">
                <div class="d-flex flex-row align-items-center gap-1">
                    <p id="error-title">Recusado</p>
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="red" class="bi bi-x-lg" viewBox="0 0 16 16">
                        <path d="M2.146 2.854a.5.5 0 1 1 .708-.708L8 7.293l5.146-5.147a.5.5 0 0 1 .708.708L8.707 8l5.147 5.146a.5.5 0 0 1-.708.708L8 8.707l-5.146 5.147a.5.5 0 0 1-.708-.708L7.293 8z" stroke="red" stroke-width="2"/>
                    </svg>
                </div>
                <p class="error-message">Aconteceu algo de errado com o pagamento. Favor tentar de novo.</p>
                <button onclick="wpErrorTryAgain()">Tentar de novo</button>
            </div>
            <div id="c-wp-exception" class="wrapper-wp-error d-none" style="width:87%;height:150px;">
                <div class="d-flex flex-row align-items-center gap-1">
                    <p id="error-title">Erro</p>
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="red" class="bi bi-x-lg" viewBox="0 0 16 16">
                        <path d="M2.146 2.854a.5.5 0 1 1 .708-.708L8 7.293l5.146-5.147a.5.5 0 0 1 .708.708L8.707 8l5.147 5.146a.5.5 0 0 1-.708.708L8 8.707l-5.146 5.147a.5.5 0 0 1-.708-.708L7.293 8z" stroke="red" stroke-width="2"/>
                    </svg>
                </div>
                <p class="error-message">Aconteceu algo de errado com o pagamento. Favor tentar novamente mais tarde.</p>
            </div>
        </div>
        <button id="cancel-btn" onclick="actionCancel()" class="position-absolute bottom-10 start-50">Cancelar</button>
    </div>
    <script src="script.js"></script>
</body>
    Found 2026-01-08 by HttpPlugin
    Create report

  • Open service 2a02:26f0:ab00::214:8f4b:80 · pay.costaextra.com.br

    2026-01-08 09:50 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Content-Type: text/html
Content-Length: 167
Location: https://pay.costaextra.com.br/
X-Amz-Cf-Pop: FRA56-P10
X-Amz-Cf-Id: M1BRNzMz_6cNQyWaJilnxVdWEJyD1Nk6yRn1RlV96PKF_GGJucDfkw==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Date: Thu, 08 Jan 2026 09:51:27 GMT
Connection: close

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-08 by HttpPlugin
    Create report

  • Open service 2a02:26f0:ab00::214:8f52:443 · pay.costaextra.com.br

    2026-01-08 09:50 

    HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Wed, 15 Oct 2025 14:45:23 GMT
ETag: "07375945770e4f2eeb15678cb43fcb5c"
x-amz-server-side-encryption: aws:kms
x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-central-1:014839708185:key/e21691c3-dea9-4798-a3ed-5de06eabae7a
x-amz-server-side-encryption-bucket-key-enabled: true
x-amz-version-id: CjtWAExiaB7aAh9DBdRlWa2iSe1fwcU2
Accept-Ranges: bytes
Server: AmazonS3
X-Amz-Cf-Pop: FRA56-P10
X-Amz-Cf-Id: 5JZ-b9hyc08SPl5AgTgdz_-WZnQ43bZX5n8MJeiLSoRBsdY9svFaag==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Date: Thu, 08 Jan 2026 09:50:46 GMT
Content-Length: 4105
Connection: close

Page title: Costa BR Página de Pagamento Worldpay

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Costa BR Página de Pagamento Worldpay</title>
    <link rel="stylesheet" href="styles.css">
    <script type="text/javascript" src="https://pay.costaextra.com.br/public/00fa02ac9ed82f10c76c6633499f6945b8cd53bedcb4"  ></script><script src="https://payments.worldpay.com/resources/hpp/integrations/embedded/js/hpp-embedded-integration-library.js"></script>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-sRIl4kxILFvY47J16cr9ZwB07vP4J8+LH7qKQnuqkuIAvNWLzeN8tE5YBujZqJLB" crossorigin="anonymous">
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/js/bootstrap.bundle.min.js" integrity="sha384-FKyoEForCGlyvwx9Hj09JcYn3nv7wiPVlz7YYwJrWVcXK/BmnVDxM+D2scQbITxI" crossorigin="anonymous"></script>
</head>
<body class="p-3">
    <div id="m-spinner" class="spinner-border position-absolute top-50 start-50" role="status">
        <span class="visually-hidden">Loading...</span>
    </div>
    <div id="main" class="d-none">
        <div id="header" class="d-flex flex-row justify-content-between">
            <div id="logo">
                <img src="./costa-logo.png" width="120"  alt="" srcset="">
            </div>
            <div>
                <div class="d-flex flex-row gap-1 align-items-center">
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-lock" viewBox="0 0 16 16">
                        <path fill-rule="evenodd" d="M8 0a4 4 0 0 1 4 4v2.05a2.5 2.5 0 0 1 2 2.45v5a2.5 2.5 0 0 1-2.5 2.5h-7A2.5 2.5 0 0 1 2 13.5v-5a2.5 2.5 0 0 1 2-2.45V4a4 4 0 0 1 4-4M4.5 7A1.5 1.5 0 0 0 3 8.5v5A1.5 1.5 0 0 0 4.5 15h7a1.5 1.5 0 0 0 1.5-1.5v-5A1.5 1.5 0 0 0 11.5 7zM8 1a3 3 0 0 0-3 3v2h6V4a3 3 0 0 0-3-3"/>
                    </svg>
                    <div id="checkout">Secure checkout</div>
                </div>
            </div>
        </div>
        <div id="iframe-container" class="d-flex justify-content-center">
            <div id="wp-iframe" class="w-50"></div>
        </div>
        <div id="custom-iframe" class="d-flex justify-content-center pt-3 pb-3">
            <div id="c-wp-try-again" class="wrapper-wp-error d-none" style="width:87%;height:150px;">
                <div class="d-flex flex-row align-items-center gap-1">
                    <p id="error-title">Recusado</p>
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="red" class="bi bi-x-lg" viewBox="0 0 16 16">
                        <path d="M2.146 2.854a.5.5 0 1 1 .708-.708L8 7.293l5.146-5.147a.5.5 0 0 1 .708.708L8.707 8l5.147 5.146a.5.5 0 0 1-.708.708L8 8.707l-5.146 5.147a.5.5 0 0 1-.708-.708L7.293 8z" stroke="red" stroke-width="2"/>
                    </svg>
                </div>
                <p class="error-message">Aconteceu algo de errado com o pagamento. Favor tentar de novo.</p>
                <button onclick="wpErrorTryAgain()">Tentar de novo</button>
            </div>
            <div id="c-wp-exception" class="wrapper-wp-error d-none" style="width:87%;height:150px;">
                <div class="d-flex flex-row align-items-center gap-1">
                    <p id="error-title">Erro</p>
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="red" class="bi bi-x-lg" viewBox="0 0 16 16">
                        <path d="M2.146 2.854a.5.5 0 1 1 .708-.708L8 7.293l5.146-5.147a.5.5 0 0 1 .708.708L8.707 8l5.147 5.146a.5.5 0 0 1-.708.708L8 8.707l-5.146 5.147a.5.5 0 0 1-.708-.708L7.293 8z" stroke="red" stroke-width="2"/>
                    </svg>
                </div>
                <p class="error-message">Aconteceu algo de errado com o pagamento. Favor tentar novamente mais tarde.</p>
            </div>
        </div>
        <button id="cancel-btn" onclick="actionCancel()" class="position-absolute bottom-10 start-50">Cancelar</button>
    </div>
    <script src="script.js"></script>
</body>
    Found 2026-01-08 by HttpPlugin
    Create report

  • Open service 2.16.204.77:80 · pay.costaextra.com.br

    2026-01-08 09:50 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Content-Type: text/html
Content-Length: 167
Location: https://pay.costaextra.com.br/
X-Amz-Cf-Pop: FRA56-P10
X-Amz-Cf-Id: 1F1OvFT3f-XtHrwSdMPOKxE03wK1hj2rpq76h85EVf8tBtXHUrDNgw==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Date: Thu, 08 Jan 2026 09:51:24 GMT
Connection: close

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-08 by HttpPlugin
    Create report

  • Open service 2.16.204.76:443 · pay.costaextra.com.br

    2026-01-08 09:50 

    HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Wed, 15 Oct 2025 14:45:23 GMT
ETag: "07375945770e4f2eeb15678cb43fcb5c"
x-amz-server-side-encryption: aws:kms
x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-central-1:014839708185:key/e21691c3-dea9-4798-a3ed-5de06eabae7a
x-amz-server-side-encryption-bucket-key-enabled: true
x-amz-version-id: CjtWAExiaB7aAh9DBdRlWa2iSe1fwcU2
Accept-Ranges: bytes
Server: AmazonS3
X-Amz-Cf-Pop: FRA56-P10
X-Amz-Cf-Id: Ez8DuUyK5KeNliJZBGaJLZG8hxI6rcQu0eNLH8O0rM7P4acSMmYP8Q==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Date: Thu, 08 Jan 2026 09:50:46 GMT
Content-Length: 4105
Connection: close

Page title: Costa BR Página de Pagamento Worldpay

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Costa BR Página de Pagamento Worldpay</title>
    <link rel="stylesheet" href="styles.css">
    <script type="text/javascript" src="https://pay.costaextra.com.br/public/00fa02ac9ed82f10c76c6633499f6945b8cd53bedcb4"  ></script><script src="https://payments.worldpay.com/resources/hpp/integrations/embedded/js/hpp-embedded-integration-library.js"></script>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-sRIl4kxILFvY47J16cr9ZwB07vP4J8+LH7qKQnuqkuIAvNWLzeN8tE5YBujZqJLB" crossorigin="anonymous">
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/js/bootstrap.bundle.min.js" integrity="sha384-FKyoEForCGlyvwx9Hj09JcYn3nv7wiPVlz7YYwJrWVcXK/BmnVDxM+D2scQbITxI" crossorigin="anonymous"></script>
</head>
<body class="p-3">
    <div id="m-spinner" class="spinner-border position-absolute top-50 start-50" role="status">
        <span class="visually-hidden">Loading...</span>
    </div>
    <div id="main" class="d-none">
        <div id="header" class="d-flex flex-row justify-content-between">
            <div id="logo">
                <img src="./costa-logo.png" width="120"  alt="" srcset="">
            </div>
            <div>
                <div class="d-flex flex-row gap-1 align-items-center">
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-lock" viewBox="0 0 16 16">
                        <path fill-rule="evenodd" d="M8 0a4 4 0 0 1 4 4v2.05a2.5 2.5 0 0 1 2 2.45v5a2.5 2.5 0 0 1-2.5 2.5h-7A2.5 2.5 0 0 1 2 13.5v-5a2.5 2.5 0 0 1 2-2.45V4a4 4 0 0 1 4-4M4.5 7A1.5 1.5 0 0 0 3 8.5v5A1.5 1.5 0 0 0 4.5 15h7a1.5 1.5 0 0 0 1.5-1.5v-5A1.5 1.5 0 0 0 11.5 7zM8 1a3 3 0 0 0-3 3v2h6V4a3 3 0 0 0-3-3"/>
                    </svg>
                    <div id="checkout">Secure checkout</div>
                </div>
            </div>
        </div>
        <div id="iframe-container" class="d-flex justify-content-center">
            <div id="wp-iframe" class="w-50"></div>
        </div>
        <div id="custom-iframe" class="d-flex justify-content-center pt-3 pb-3">
            <div id="c-wp-try-again" class="wrapper-wp-error d-none" style="width:87%;height:150px;">
                <div class="d-flex flex-row align-items-center gap-1">
                    <p id="error-title">Recusado</p>
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="red" class="bi bi-x-lg" viewBox="0 0 16 16">
                        <path d="M2.146 2.854a.5.5 0 1 1 .708-.708L8 7.293l5.146-5.147a.5.5 0 0 1 .708.708L8.707 8l5.147 5.146a.5.5 0 0 1-.708.708L8 8.707l-5.146 5.147a.5.5 0 0 1-.708-.708L7.293 8z" stroke="red" stroke-width="2"/>
                    </svg>
                </div>
                <p class="error-message">Aconteceu algo de errado com o pagamento. Favor tentar de novo.</p>
                <button onclick="wpErrorTryAgain()">Tentar de novo</button>
            </div>
            <div id="c-wp-exception" class="wrapper-wp-error d-none" style="width:87%;height:150px;">
                <div class="d-flex flex-row align-items-center gap-1">
                    <p id="error-title">Erro</p>
                    <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="red" class="bi bi-x-lg" viewBox="0 0 16 16">
                        <path d="M2.146 2.854a.5.5 0 1 1 .708-.708L8 7.293l5.146-5.147a.5.5 0 0 1 .708.708L8.707 8l5.147 5.146a.5.5 0 0 1-.708.708L8 8.707l-5.146 5.147a.5.5 0 0 1-.708-.708L7.293 8z" stroke="red" stroke-width="2"/>
                    </svg>
                </div>
                <p class="error-message">Aconteceu algo de errado com o pagamento. Favor tentar novamente mais tarde.</p>
            </div>
        </div>
        <button id="cancel-btn" onclick="actionCancel()" class="position-absolute bottom-10 start-50">Cancelar</button>
    </div>
    <script src="script.js"></script>
</body>
    Found 2026-01-08 by HttpPlugin
    Create report
www.costacrociere.itbooking.costaextra.comcostapresscenter.comdev-pay.costacruises.comdxm-media.costa.itdxm.costa.itmediacenter.costa.itpay.costacruceros.compay.costacruises.compay.costacruzeiros.compay.costaextra.com.arpay.costaextra.com.brpay.costaextra.com.mxpoint-pre.costa.itpoint-test.costa.itpoint.costa.itportals-api.costa.itpresscenter.costa.itstage-lofietiedxm.costa.itstage-pay.costacruceros.comstage-pay.costacruises.comstage-pay.costacruzeiros.comstage-pay.costaextra.com.arstage-pay.costaextra.com.brstage-pay.costaextra.com.mxtms.costa.ittraining.booking.costaextra.comtraining.int.costaextra.comwebcb.costacrociere.itwww.costacroisieres.bewww.costacroisieres.frwww.costacruceros.comwww.costacruceros.eswww.costacruises.co.ukwww.costacruises.comwww.costacruises.dkwww.costacruises.euwww.costacruises.fiwww.costacruises.nlwww.costacruises.nowww.costacruises.sewww.costacruzeiros.comwww.costacruzeiros.com.ptwww.costakreuzfahrten.atwww.costakreuzfahrten.chwww.costakreuzfahrten.dewww.costapresscenter.comwww.costatravelplanet.it
Fingerprint:
a2d25546dddeb3ce69208562be8ac8dcd3cac063cc4b31f15f618efbeb2d8d83
CN:
www.costacrociere.it
Key:
ECDSA-256
Issuer:
DigiCert Global G3 TLS ECC SHA384 2020 CA1
Not before:
2026-01-08 00:00
Not after:
2027-01-09 23:59
www.costacrociere.itbooking.costaextra.comcostapresscenter.comdev-pay.costacruises.comdxm-media.costa.itdxm.costa.itmediacenter.costa.itpay.costacruceros.compay.costacruises.compay.costacruzeiros.compay.costaextra.com.arpay.costaextra.com.brpay.costaextra.com.mxpoint-pre.costa.itpoint-test.costa.itpoint.costa.itportals-api.costa.itpresscenter.costa.itstage-lofietiedxm.costa.itstage-pay.costacruceros.comstage-pay.costacruises.comstage-pay.costacruzeiros.comstage-pay.costaextra.com.arstage-pay.costaextra.com.brstage-pay.costaextra.com.mxtms.costa.ittraining.booking.costaextra.comtraining.int.costaextra.comwebcb.costacrociere.itwww.costacroisieres.bewww.costacroisieres.frwww.costacruceros.comwww.costacruceros.eswww.costacruises.co.ukwww.costacruises.comwww.costacruises.dkwww.costacruises.euwww.costacruises.fiwww.costacruises.nlwww.costacruises.nowww.costacruises.sewww.costacruzeiros.comwww.costacruzeiros.com.ptwww.costakreuzfahrten.atwww.costakreuzfahrten.chwww.costakreuzfahrten.dewww.costapresscenter.comwww.costatravelplanet.it
Fingerprint:
b4b47d897dd33385bf80b77648604e04b36ab52533be874804cf8e276e028560
CN:
www.costacrociere.it
Key:
ECDSA-256
Issuer:
DigiCert Global G3 TLS ECC SHA384 2020 CA1
Not before:
2025-10-22 00:00
Not after:
2026-01-21 23:59
Domain summary

pay.costaextra.com.br 15

1 recorded
IP summary

2001:41a8:44:4::4f8c:5fa1 1 2001:41a8:44:4::4f8c:5f2b 1 2.16.183.12 1 2.16.183.18 1 2.16.204.76 1 2a02:26f0:ab00::214:8f52 1 2a02:26f0:ab00::214:8f4b 1 2.16.204.77 1

8 recorded

© 2026 LeakIX v2.0.49
About LeakIX - Credits - Take-down and blacklist requests - Security issues - Terms and conditions - Cookie policy - Legal notice