22 technologies5 categories
dufrio.com.br is built on Hyva Themes with Google Tag Manager and Google Analytics.
The frontend relies on Tailwind CSS. Analytics are handled by Google Tag Manager and Google Analytics. Infrastructure includes Amazon S3 and Cloudflare DNS.
Tech Stack Highlights
Core Platform1
Hyva Themes
Ecommerce
100%
2 evidence signals
Header
^Hyva Themes$: Hyva ThemesJS Global
hyva โ objectFrameworks & Languages3
Tailwind CSS
UI frameworks
75%
1 evidence signal
css
--tw-React
JavaScript frameworks
75%
1 evidence signal
HTML
data-reactAlpine.js
JavaScript frameworks
75%
1 evidence signal
HTML
implied by Hyva ThemesAnalytics & Marketing10
Google Tag Manager
Tag managers
100%
3 evidence signals
HTML
googletagmanager.com/gtm.jsJS Global
google_tag_manager โ objectJS Global
dataLayer โ objectGoogle Analytics
Analytics
100%
4 evidence signals
Cookie
_gaScript
https://www.googletagmanager.com/gtag/js?id=G-NC1B33TP3B&cx=c>m=4e6511Script
https://www.googletagmanager.com/gtag/js?id=G-WPFLPN2E47&cx=c>m=4e6511Script
https://www.googletagmanager.com/gtag/js?id=AW-936651510&cx=c>m=4e6511Facebook Pixelv2.9.313
Analytics
100%
3 evidence signals
Script
https://connect.facebook.net/signals/config/1054380289373786?v=2.9.313&r=stable&domain=www.dufrio.com.br&hme=97937018cefade17726f0472876fc101316b2ce9008a35a6a5a7977d7436151a&ex_m=104%2C205%2C154%2C22%2C72%2C73%2C145%2C68%2C67%2C11%2C162%2C90%2C16%2C138%2C48%2C146%2C77%2C112%2C47%2C127%2C39%2C75%2C78%2C134%2C159%2C164%2C8%2C4%2C5%2C7%2C6%2C3%2C91%2C101%2C165%2C170%2C219%2C62%2C186%2C187%2C55%2C276%2C30%2C74%2C231%2C230%2C229%2C23%2C33%2C103%2C61%2C10%2C63%2C97%2C98%2C99%2C105%2C130%2C31%2C29%2C132%2C133%2C129%2C128%2C155%2C76%2C158%2C156%2C157%2C50%2C60%2C123%2C15%2C161%2C45%2C263%2C264%2C262%2C26%2C27%2C28%2C18%2C20%2C44%2C40%2C42%2C41%2C83%2C92%2C96%2C110%2C144%2C147%2C46%2C111%2C24%2C21%2C119%2C69%2C36%2C149%2C148%2C150%2C141%2C139%2C25%2C35%2C59%2C109%2C160%2C70%2C17%2C152%2C114%2C81%2C66%2C19%2C85%2C86%2C116%2C84%2C136%2C135%2C34%2C278%2C293%2C212%2C201%2C202%2C200%2C296%2C288%2C52%2C213%2C107%2C131%2C80%2C121%2C54%2C49%2C113%2C120%2C126%2C58%2C64%2C151%2C115%2C37%2C32%2C53%2C56%2C100%2C163%2C1%2C124%2C14%2C122%2C12%2C2%2C57%2C93%2C65%2C118%2C89%2C88%2C166%2C167%2C94%2C95%2C9%2C125%2C102%2C51%2C142%2C87%2C79%2C71%2C117%2C106%2C43%2C143%2C0%2C82%2C137%2C140%2C153%2C38%2C108%2C13%2C168Script
https://connect.facebook.net/en_US/fbevents.jsJS Global
_fbq โ function(v2.9.313)Microsoft Advertising
Advertising
100%
5 evidence signals
Cookie
_uetsidCookie
_uetvidScript
https://bat.bing.com/bat.jsJS Global
UET โ functionJS Global
uetq โ objectM
Microsoft 365
Email
100%
1 evidence signal
dns
MX: dufrio-com-br.mail.protection.outlook.comS
SendGrid
Email
95%
1 evidence signal
dns
SPF includes sendgrid.netMicrosoft Clarity
Analytics
75%
1 evidence signal
JS Global
clarity โ functionCriteo
Advertising
75%
2 evidence signals
JS Global
Criteo โ objectJS Global
criteo_q โ objectTikTok Pixel
Analytics
75%
1 evidence signal
JS Global
TiktokAnalyticsObject โ stringAWIN
Affiliate programs
75%
1 evidence signal
Script
https://www.dwin1.com/23524.jsInfrastructure & Security5
Amazon S3
CDN
100%
2 evidence signals
Header
s3[^ ]*\.amazonaws\.com: font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com fonts.googleapis.com *.hotjar.com *.zopim.com *.fontawesome.com data: *.google.com https://fonts.bunny.net 'self' data: www.dufrio.com.br data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.mercadopago.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.google.com www.dufrio.com.br 'self' 'unsafe-inline'; frame-ancestors www.dufrio.com.br 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com cdn.dnky.co *.hotjar.com *.facebook.com *.trustpilot.com *.criteo.com *.mercadopago.com *.mercadolibre.com *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io certificate.trustvox.com.br www.reclameaqui.com.br www.dufrio.com.br *.voxus.tv *.btg360.com.br *.criteo.net *.awin1.com *.zenaps.com td.doubleclick.net *.yandex.ru *.orpen.com.br *.mainadv.com *.datalivemarketing.com.br www.googletagmanager.com localhost:8080 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://images.unsplash.com *.google.com *.google.nl connect.onlinesucces.nl px.ads.linkedin.com stats.g.doubleclick.net *.linkedin.com *.googletagmanager.com gallery.mailchimp.com *.trustedshops.com *.facebook.com *.zopim.com cdn.jsdelivr.net *.jmango360.com *.datatrics.com *.smaato.net *.google-analytics.com ssl.gstatic.com www.gstatic.com *.ebit.com.br *.ebitempresa.com.br *.mercadopago.com *.mlstatic.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com cdn.mundipagg.com api.pagar.me certificate.trustvox.com.br static.trustvox.com.br *.caravelx.com https://firebasestorage.googleapis.com *.hsforms.net *.hsforms.com 'self' data: www.dufrio.com.br *.dufrio.com.br s3.amazonaws.com newimgebit-a.akamaihd.net *.bing.com *.google.com.br *.adnxs.com *.mercadopago.com.br *.btg360.com.br *.criteo.com *.mediavine.com *.bluekai.com *.adgrx.com *.casalemedia.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.sharethrough.com *.rubiconproject.com *.media.net *.doubleclick.net *.bidswitch.net *.emxdgt.com *.yieldmo.com *.clmbtech.com *.socdm.com *.omnitagjs.com *.stickyadstv.com *.360yield.com *.ivitrack.com *.liadm.com *.outbrain.com *.pubmatic.com *.revcontent.com *.tremorhub.com *.awin1.com *.zenaps.com *.yahoo.net *.postrelease.com *.aralego.com *.aralego.net *.dmxleo.com *.clearsale.com.br *.yandex.ru *.clarity.ms *.microsoftonline.com *.caravel.store *.orpen.com.br *.unrulymedia.com *.live.sma.ia.br *.agkn.com sync.1rx.io dufrio-my.sharepoint.com *.syndigo.cloud *.syndigo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com *.paypal.com *.googletagmanager.com *.googleadservices.com cdn.dnky.co api.comapi.com *.trackedlink.net snap.licdn.com chimpstatic.com checkout.buckaroo.nl *.adyen.com *.zopim.com *.hotjar.com *.zdassets.com *.sendcloud.sc *.mailchimp.com *.trustedshops.com *.fontawesome.com *.facebook.net *.feedbackcompany.com *.google-analytics.com *.trustpilot.com cdn.jsdelivr.net *.googleoptimize.com *.clarity.ms *.datatrics.com *.criteo.net *.criteo.com cdn.mouseflow.com tagmanager.google.com *.ebit.com.br *.mercadopago.com *.mlstatic.com 3ds2.pagar.me 3ds2-sdx.pagar.me certificate.trustvox.com.br s3-sa-east-1.amazonaws.com static.trustvox.com.br colt.trustvox.com.br connect.facebook.net js.huggy.chat *.avada.io *.hsforms.net *.hsforms.com www.dufrio.com.br self s3.amazonaws.com *.voxus.com.br *.bing.com *.btg360.com.br *.adcart.com.br *.dwin1.com *.afilio.com.br *.awin1.com *.zenaps.com *.sciencebehindecommerce.com *.clearsale.com.br *.cloudflareinsights.com *.k-analytix.com *.yandex.ru unsafe-inline *.dufrio.com.br *.cloudfront.net *.orpen.com.br *.tiktok.com *.datalivemarketing.com.br *.syndigo.com *.posclick.dinamize.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com cdn.dnky.co checkout.buckaroo.nl *.fontawesome.com *.mailchimp.com *.trustpilot.com cdn.jsdelivr.net tagmanager.google.com fonts.google.com *.ebit.com.br *.mercadopago.com *.google.com webfonts.huggy.cloud https://fonts.bunny.net *.gstatic.com www.dufrio.com.br s3.amazonaws.com *.orpen.com.br static.trustvox.com.br 'self' 'unsafe-inline'; object-src www.dufrio.com.br 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com www.dufrio.com.br *.syndigo.com 'self' 'unsafe-inline'; manifest-src www.dufrio.com.br 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com commerce.adobedc.net api.comapi.com stats.g.doubleclick.net *.zdassets.com *.hotjar.com *.hotjar.io *.zopim.com wss://*.zopim.com *.feedbackcompany.com *.zendesk.com *.clarity.ms *.facebook.com *.datatrics.com *.analytics.google.com *.googletagmanager.com https://hits-banner-cloud-function.azurewebsites.net *.mercadopago.com maps.googleapis.com *.mercadolibre.com api.mundipagg.com api.pagar.me brasilapi.com.br viacep.com.br servicodados.ibge.gov.br pay.sandbox.google.com trustvox.com.br certificate.trustvox.com.br static.trustvox.com.br colt.trustvox.com.br wss://ct-socket.huggy.app widget.huggy.io https://get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com www.dufrio.com.br *.reclameaqui.com.br *.voxus.tv *.voxus.com.br *.loggly.com *.ipify.org *.google.com.br *.criteo.com *.bing.com *.us-east-2.on.aws *.sciencebehindecommerce.com *.wepowerconnections.com *.akamaihd.net *.konduto.com *.mailbiz.one *.cloudfront.net *.tiktok.com *.pangle-ads.com *.yandex.ru *.tiktokw.us *.datalivemarketing.com.br wss://mc.yandex.ru/solid.ws wss://socket.live.sma.ia.br/ws wss://socket.live.sma.ia.br/ws/ *.syndigo.com receiver.posclick.dinamize.com socket-node.staging.datalive.ai receiver.emkt.dinamize.com 'self' 'unsafe-inline'; child-src www.dufrio.com.br http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com www.dufrio.com.br *.google.com.br 'self' 'unsafe-inline' 'unsafe-eval'; base-uri www.dufrio.com.br 'self' 'unsafe-inline';Script
https://s3.amazonaws.com/raichu-beta/selos/bundle.jsC
Cloudflare DNS
PaaS
100%
1 evidence signal
dns
NS: finley.ns.cloudflare.comCloudflare
CDN
75%
2 evidence signals
Header
9f6d3d1ed99a22ba-SJCHeader
cloudflare: cloudflareHSTS
Security
75%
1 evidence signal
Header
max-age=31536000
max-age=63072000Amazon Web Services
PaaS
75%
1 evidence signal
HTML
implied by Amazon S3Libraries & Utilities3
llms.txt
AI Policy & Governance
100%
2 evidence signals
HTML
/llms.txtText
Googlecore-js
JavaScript libraries
75%
1 evidence signal
JS Global
__core-js_shared__ โ objectGlider.js
JavaScript libraries
75%
1 evidence signal
Script
https://www.dufrio.com.br/static/version1777302559/frontend/Caravel/dufrio/pt_BR/Magento_PageBuilder/js/glider.min.js