| mail.correos.18-192-194-2.cprapid.com/pay.php |  18.192.194.2 | 200 OK | 8.7 kB |
URL User Request GET HTTP/1.1mail.correos.18-192-194-2.cprapid.com/pay.php IP18.192.194.2:443
CertificateIssuerLet's Encrypt Subjectmail.correos.18-192-194-2.cprapid.com Fingerprint0E:6E:F1:F8:71:A6:DA:54:B9:43:61:0A:25:7E:E2:73:7A:C8:18:C0 ValidityFri, 26 Apr 2024 11:53:48 GMT - Thu, 25 Jul 2024 11:53:47 GMT
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hasha1c705666d6931a43cb2b31f71c703e9 4f42f820b14a729a4dba0a3966451ef689e94485 9b22cc8aaff3ba2518c4f1c1bbeb354bae7d30c5e20b0759c7d813f75f478cf7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Correos |
GET /pay.php HTTP/1.1
Host: mail.correos.18-192-194-2.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 03:49:01 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| mail.correos.18-192-194-2.cprapid.com/styles/head.css | 18.192.194.2 | 200 OK | 882 B |
URL GET HTTP/1.1mail.correos.18-192-194-2.cprapid.com/styles/head.css IP18.192.194.2:443
Requested byhttps://mail.correos.18-192-194-2.cprapid.com/pay.php CertificateIssuerLet's Encrypt Subjectmail.correos.18-192-194-2.cprapid.com Fingerprint0E:6E:F1:F8:71:A6:DA:54:B9:43:61:0A:25:7E:E2:73:7A:C8:18:C0 ValidityFri, 26 Apr 2024 11:53:48 GMT - Thu, 25 Jul 2024 11:53:47 GMT
File typeASCII text, with CRLF line terminators Hash2b67984e981be225446ec9e947609d95 9677efd78b9b8ca93d1f57377d3069da9677d3b8 555fb6d723203f6feda4f9834849fbada17a316fbb07e80f000996cd391258ec
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Correos |
GET /styles/head.css HTTP/1.1
Host: mail.correos.18-192-194-2.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.correos.18-192-194-2.cprapid.com/pay.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 03:49:02 GMT
Server: Apache
Last-Modified: Wed, 09 Nov 2022 13:46:36 GMT
Accept-Ranges: bytes
Content-Length: 882
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| mail.correos.18-192-194-2.cprapid.com/styles/main.css | 18.192.194.2 | 200 OK | 5.4 kB |
URL GET HTTP/1.1mail.correos.18-192-194-2.cprapid.com/styles/main.css IP18.192.194.2:443
Requested byhttps://mail.correos.18-192-194-2.cprapid.com/pay.php CertificateIssuerLet's Encrypt Subjectmail.correos.18-192-194-2.cprapid.com Fingerprint0E:6E:F1:F8:71:A6:DA:54:B9:43:61:0A:25:7E:E2:73:7A:C8:18:C0 ValidityFri, 26 Apr 2024 11:53:48 GMT - Thu, 25 Jul 2024 11:53:47 GMT
File typeassembler source, ASCII text, with CRLF line terminators Hash69ad3265ac37ea14014c0bd8e111cb1c 3575344b0c1839f7393a93dbdbe824a0aef32729 9412fa88bd00b693e3899e98cf9ed2cec119236572f0bf8d257c777115fcb41f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Correos |
GET /styles/main.css HTTP/1.1
Host: mail.correos.18-192-194-2.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.correos.18-192-194-2.cprapid.com/pay.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 03:49:02 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 18:37:36 GMT
Accept-Ranges: bytes
Content-Length: 5411
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| mail.correos.18-192-194-2.cprapid.com/styles/responsive.css | 18.192.194.2 | 200 OK | 1.8 kB |
URL GET HTTP/1.1mail.correos.18-192-194-2.cprapid.com/styles/responsive.css IP18.192.194.2:443
Requested byhttps://mail.correos.18-192-194-2.cprapid.com/pay.php CertificateIssuerLet's Encrypt Subjectmail.correos.18-192-194-2.cprapid.com Fingerprint0E:6E:F1:F8:71:A6:DA:54:B9:43:61:0A:25:7E:E2:73:7A:C8:18:C0 ValidityFri, 26 Apr 2024 11:53:48 GMT - Thu, 25 Jul 2024 11:53:47 GMT
File typeassembler source, ASCII text, with CRLF line terminators Hash77c87af04ba7c0ab0f7771e74c55af56 ff8ad5b99137dbc53a21335d1a0a6e970dc7d5d1 e8dd42f6deace38cd1fae720b398765001207aadccc3cc324da0a4cbbdb8f3e3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Correos |
GET /styles/responsive.css HTTP/1.1
Host: mail.correos.18-192-194-2.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.correos.18-192-194-2.cprapid.com/pay.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 03:49:02 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 18:09:58 GMT
Accept-Ranges: bytes
Content-Length: 1756
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| mail.correos.18-192-194-2.cprapid.com/styles/codigo.Css | 18.192.194.2 | 200 OK | 572 B |
URL GET HTTP/1.1mail.correos.18-192-194-2.cprapid.com/styles/codigo.Css IP18.192.194.2:443
Requested byhttps://mail.correos.18-192-194-2.cprapid.com/pay.php CertificateIssuerLet's Encrypt Subjectmail.correos.18-192-194-2.cprapid.com Fingerprint0E:6E:F1:F8:71:A6:DA:54:B9:43:61:0A:25:7E:E2:73:7A:C8:18:C0 ValidityFri, 26 Apr 2024 11:53:48 GMT - Thu, 25 Jul 2024 11:53:47 GMT
File typeASCII text, with CRLF line terminators Hash24d66e69130b56345df87efc6f719280 0cdd19f07446455b640665be5f4c5da8ee297c97 1fabc2b240dc75ec913233538d50e47f2244f68374b58a06050530f2f13ab3ed
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Correos |
GET /styles/codigo.Css HTTP/1.1
Host: mail.correos.18-192-194-2.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.correos.18-192-194-2.cprapid.com/pay.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 03:49:02 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 18:42:28 GMT
Accept-Ranges: bytes
Content-Length: 572
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| mail.correos.18-192-194-2.cprapid.com/styles/corr.css | 18.192.194.2 | 200 OK | 3.8 kB |
URL GET HTTP/1.1mail.correos.18-192-194-2.cprapid.com/styles/corr.css IP18.192.194.2:443
Requested byhttps://mail.correos.18-192-194-2.cprapid.com/pay.php CertificateIssuerLet's Encrypt Subjectmail.correos.18-192-194-2.cprapid.com Fingerprint0E:6E:F1:F8:71:A6:DA:54:B9:43:61:0A:25:7E:E2:73:7A:C8:18:C0 ValidityFri, 26 Apr 2024 11:53:48 GMT - Thu, 25 Jul 2024 11:53:47 GMT
File typeASCII text, with CRLF line terminators Hash40470364b02ec8ac74211ee78e6bc075 147af529a090c9cabbd3a2b618d344d35722c01b 504f97f068a0abd89a9c7b18f7133415655763a1a8df67ca8f753a4869ae3352
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Correos |
GET /styles/corr.css HTTP/1.1
Host: mail.correos.18-192-194-2.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.correos.18-192-194-2.cprapid.com/pay.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 03:49:02 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 20:57:32 GMT
Accept-Ranges: bytes
Content-Length: 3817
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| mail.correos.18-192-194-2.cprapid.com/javascript/codigo.js | 18.192.194.2 | 200 OK | 3.5 kB |
URL GET HTTP/1.1mail.correos.18-192-194-2.cprapid.com/javascript/codigo.js IP18.192.194.2:443
Requested byhttps://mail.correos.18-192-194-2.cprapid.com/pay.php CertificateIssuerLet's Encrypt Subjectmail.correos.18-192-194-2.cprapid.com Fingerprint0E:6E:F1:F8:71:A6:DA:54:B9:43:61:0A:25:7E:E2:73:7A:C8:18:C0 ValidityFri, 26 Apr 2024 11:53:48 GMT - Thu, 25 Jul 2024 11:53:47 GMT
File typeASCII text, with CRLF line terminators Hashd2aa2aea5f47616001eac25175ccaaa9 4242e8ecdaa79ee8a9fccef19cd2db5ba72585aa 11b019c7cee0159e28de21da4ccd4b405901b85e22d97b7f97d851b7bb3bdda6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Correos |
GET /javascript/codigo.js HTTP/1.1
Host: mail.correos.18-192-194-2.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.correos.18-192-194-2.cprapid.com/pay.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 03:49:02 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 10:40:56 GMT
Accept-Ranges: bytes
Content-Length: 3451
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| mail.correos.18-192-194-2.cprapid.com/images/footer-logo.svg | 18.192.194.2 | 200 OK | 1.5 kB |
URL GET HTTP/1.1mail.correos.18-192-194-2.cprapid.com/images/footer-logo.svg IP18.192.194.2:443
Requested byhttps://mail.correos.18-192-194-2.cprapid.com/pay.php CertificateIssuerLet's Encrypt Subjectmail.correos.18-192-194-2.cprapid.com Fingerprint0E:6E:F1:F8:71:A6:DA:54:B9:43:61:0A:25:7E:E2:73:7A:C8:18:C0 ValidityFri, 26 Apr 2024 11:53:48 GMT - Thu, 25 Jul 2024 11:53:47 GMT
File typeSVG Scalable Vector Graphics image Hashafafbaf3482e83ad39a754c053c20766 1af54d4d9d60459efee51451e67eb080fc9772e9 dae58e3a35038fe1508d4ce16805960f8722fef2f68de4da845b9f48b9e969df
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Correos |
GET /images/footer-logo.svg HTTP/1.1
Host: mail.correos.18-192-194-2.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.correos.18-192-194-2.cprapid.com/pay.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 03:49:02 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 06:34:06 GMT
Accept-Ranges: bytes
Content-Length: 1496
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/svg+xml
|
|
| mail.correos.18-192-194-2.cprapid.com/images/LogoCornamusa.svg | 18.192.194.2 | 200 OK | 3.4 kB |
URL GET HTTP/1.1mail.correos.18-192-194-2.cprapid.com/images/LogoCornamusa.svg IP18.192.194.2:443
Requested byhttps://mail.correos.18-192-194-2.cprapid.com/pay.php CertificateIssuerLet's Encrypt Subjectmail.correos.18-192-194-2.cprapid.com Fingerprint0E:6E:F1:F8:71:A6:DA:54:B9:43:61:0A:25:7E:E2:73:7A:C8:18:C0 ValidityFri, 26 Apr 2024 11:53:48 GMT - Thu, 25 Jul 2024 11:53:47 GMT
File typeSVG Scalable Vector Graphics image Hashcfb3473db7c1f5da4b0139cbad96481b 1b8dec32b360ac71472772abe602461050a5a887 9ca4b4430d80704711911dfc8604b4c12f6697c462cdfa1a52c0ed47c09f99da
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Correos |
GET /images/LogoCornamusa.svg HTTP/1.1
Host: mail.correos.18-192-194-2.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.correos.18-192-194-2.cprapid.com/pay.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 03:49:02 GMT
Server: Apache
Last-Modified: Wed, 09 Nov 2022 13:26:44 GMT
Accept-Ranges: bytes
Content-Length: 3408
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/svg+xml
|
|
| mail.correos.18-192-194-2.cprapid.com/images/livraison.jpg | 18.192.194.2 | 200 OK | 29 kB |
URL GET HTTP/1.1mail.correos.18-192-194-2.cprapid.com/images/livraison.jpg IP18.192.194.2:443
Requested byhttps://mail.correos.18-192-194-2.cprapid.com/pay.php CertificateIssuerLet's Encrypt Subjectmail.correos.18-192-194-2.cprapid.com Fingerprint0E:6E:F1:F8:71:A6:DA:54:B9:43:61:0A:25:7E:E2:73:7A:C8:18:C0 ValidityFri, 26 Apr 2024 11:53:48 GMT - Thu, 25 Jul 2024 11:53:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 808x486, components 3 Hash574ca80af2834feb77961df58c5ef6bb 68e53c7238d9f8939c870e45a2a96184a3a760d6 556e932c42ffa56c99e663591065066d4ae3b97292221768fce25c8e91e0807f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Correos |
GET /images/livraison.jpg HTTP/1.1
Host: mail.correos.18-192-194-2.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.correos.18-192-194-2.cprapid.com/pay.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 03:49:02 GMT
Server: Apache
Last-Modified: Thu, 10 Nov 2022 19:03:44 GMT
Accept-Ranges: bytes
Content-Length: 29293
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| mail.correos.18-192-194-2.cprapid.com/fonts/CarteroRegular.otf | 18.192.194.2 | 200 OK | 38 kB |
URL GET HTTP/1.1mail.correos.18-192-194-2.cprapid.com/fonts/CarteroRegular.otf IP18.192.194.2:443
Requested byhttps://mail.correos.18-192-194-2.cprapid.com/pay.php CertificateIssuerLet's Encrypt Subjectmail.correos.18-192-194-2.cprapid.com Fingerprint0E:6E:F1:F8:71:A6:DA:54:B9:43:61:0A:25:7E:E2:73:7A:C8:18:C0 ValidityFri, 26 Apr 2024 11:53:48 GMT - Thu, 25 Jul 2024 11:53:47 GMT
Hash7795eea0ad6f4e834ff2d0e2241c451c ad06834bf40685b1d5396167eea52cb63f7d4bd2 e3226d13f953e1ce196cf91fec6bbc878bc91eb65a768491ef90f3495e391fa1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Correos |
GET /fonts/CarteroRegular.otf HTTP/1.1
Host: mail.correos.18-192-194-2.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.correos.18-192-194-2.cprapid.com/styles/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 03:49:02 GMT
Server: Apache
Last-Modified: Fri, 04 Feb 2022 21:00:56 GMT
Accept-Ranges: bytes
Content-Length: 37756
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: font/otf
|
|
| mail.correos.18-192-194-2.cprapid.com/fonts/CarteroLight.otf | 18.192.194.2 | 200 OK | 38 kB |
URL GET HTTP/1.1mail.correos.18-192-194-2.cprapid.com/fonts/CarteroLight.otf IP18.192.194.2:443
Requested byhttps://mail.correos.18-192-194-2.cprapid.com/pay.php CertificateIssuerLet's Encrypt Subjectmail.correos.18-192-194-2.cprapid.com Fingerprint0E:6E:F1:F8:71:A6:DA:54:B9:43:61:0A:25:7E:E2:73:7A:C8:18:C0 ValidityFri, 26 Apr 2024 11:53:48 GMT - Thu, 25 Jul 2024 11:53:47 GMT
Hashc28e01b87bac1f47b43d5a564877a0ec 86a203e4742d57e064e2fb1e9c238798bb709a2b 94ddea49ff5c70e8c9b9eeaf22d9ed72f96abd31f2a3124b222ab9bd1de64446
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Correos |
GET /fonts/CarteroLight.otf HTTP/1.1
Host: mail.correos.18-192-194-2.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.correos.18-192-194-2.cprapid.com/styles/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 03:49:02 GMT
Server: Apache
Last-Modified: Fri, 04 Feb 2022 21:00:56 GMT
Accept-Ranges: bytes
Content-Length: 37868
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: font/otf
|
|
| mail.correos.18-192-194-2.cprapid.com/images/background-login.jpg | 18.192.194.2 | 200 OK | 132 kB |
URL GET HTTP/1.1mail.correos.18-192-194-2.cprapid.com/images/background-login.jpg IP18.192.194.2:443
Requested byhttps://mail.correos.18-192-194-2.cprapid.com/pay.php CertificateIssuerLet's Encrypt Subjectmail.correos.18-192-194-2.cprapid.com Fingerprint0E:6E:F1:F8:71:A6:DA:54:B9:43:61:0A:25:7E:E2:73:7A:C8:18:C0 ValidityFri, 26 Apr 2024 11:53:48 GMT - Thu, 25 Jul 2024 11:53:47 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x1080, components 3 Size132 kB (132523 bytes) Hash2df8bb420f0519564f0357ddd4cdde33 d8cfbf388b17cc4906441b14dbf8b8143281d8a1 642875617fb72743a219e89d09dca1ebb4c226cf3549c85f5d29d498e5add3c8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Correos |
GET /images/background-login.jpg HTTP/1.1
Host: mail.correos.18-192-194-2.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.correos.18-192-194-2.cprapid.com/pay.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 03:49:02 GMT
Server: Apache
Last-Modified: Wed, 09 Nov 2022 13:46:58 GMT
Accept-Ranges: bytes
Content-Length: 132523
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| mail.correos.18-192-194-2.cprapid.com/javascript/junia.js | 18.192.194.2 | 200 OK | 21 kB |
URL GET HTTP/1.1mail.correos.18-192-194-2.cprapid.com/javascript/junia.js IP18.192.194.2:443
Requested byhttps://mail.correos.18-192-194-2.cprapid.com/pay.php CertificateIssuerLet's Encrypt Subjectmail.correos.18-192-194-2.cprapid.com Fingerprint0E:6E:F1:F8:71:A6:DA:54:B9:43:61:0A:25:7E:E2:73:7A:C8:18:C0 ValidityFri, 26 Apr 2024 11:53:48 GMT - Thu, 25 Jul 2024 11:53:47 GMT
File typeJavaScript source, ASCII text, with very long lines (20970), with CRLF line terminators Hashece4d7c52193b43f6f37cddcc25a6a00 3fda3159da9e7a416f555286360019c94da96d17 f31fc66d7c9773e160a4aeb486fbb6e3ef4db203432911d691eaab93a62b2a34
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Correos |
GET /javascript/junia.js HTTP/1.1
Host: mail.correos.18-192-194-2.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.correos.18-192-194-2.cprapid.com/pay.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 03:49:02 GMT
Server: Apache
Last-Modified: Fri, 04 Nov 2022 07:50:02 GMT
Accept-Ranges: bytes
Content-Length: 21408
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| mail.correos.18-192-194-2.cprapid.com/images/favicon.ico | 18.192.194.2 | 200 OK | 110 kB |
URL GET HTTP/1.1mail.correos.18-192-194-2.cprapid.com/images/favicon.ico IP18.192.194.2:443
Requested byhttps://mail.correos.18-192-194-2.cprapid.com/pay.php CertificateIssuerLet's Encrypt Subjectmail.correos.18-192-194-2.cprapid.com Fingerprint0E:6E:F1:F8:71:A6:DA:54:B9:43:61:0A:25:7E:E2:73:7A:C8:18:C0 ValidityFri, 26 Apr 2024 11:53:48 GMT - Thu, 25 Jul 2024 11:53:47 GMT
File typeMS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel Size110 kB (110021 bytes) Hash349246ee336d8b2986e584a4fa436128 598b9f95458a2426bf1688d616c4f6f3fea3580e 68554c17c00a589c2b29e1f74ac5efbcd8d30252792626f5fff81955e4d89ae7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Correos |
GET /images/favicon.ico HTTP/1.1
Host: mail.correos.18-192-194-2.cprapid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.correos.18-192-194-2.cprapid.com/pay.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 03:49:03 GMT
Server: Apache
Last-Modified: Tue, 08 Nov 2022 23:39:26 GMT
Accept-Ranges: bytes
Content-Length: 110021
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/x-icon
|
|