| xyy.fzi.mybluehost.me/recibir_paquete.phpRecibir_paquete.phpRecibir_paquete.phpRecibir_paquete.phpRecibir_paquete.phpRecibir_paquete.php |  50.87.230.228 | 302 Found | 22 B |
URL User Request GET HTTP/2xyy.fzi.mybluehost.me/recibir_paquete.phpRecibir_paquete.phpRecibir_paquete.phpRecibir_paquete.phpRecibir_paquete.phpRecibir_paquete.php IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeASCII text, with CRLF line terminators Hash81051bcc2cf1bedf378224b0a93e2877 ba8ab5a0280b953aa97435ff8946cbcbb2755a27 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /recibir_paquete.phpRecibir_paquete.phpRecibir_paquete.phpRecibir_paquete.phpRecibir_paquete.phpRecibir_paquete.php HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 02 May 2024 00:03:39 GMT
server: nginx/1.21.6
content-type: text/html; charset=UTF-8
content-length: 22
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
location: Recibir_paquete.php
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-server-cache: false
set-cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66; path=/
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/Seleccione%20medio%20de%20pago_fichiers/main.css | 50.87.230.228 | 404 Not Found | 315 B |
URL GET HTTP/2xyy.fzi.mybluehost.me/Seleccione%20medio%20de%20pago_fichiers/main.css IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /Seleccione%20medio%20de%20pago_fichiers/main.css HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/assets/recibir_paquete_files/deco_bars.svg | 50.87.230.228 | 200 OK | 913 B |
URL GET HTTP/2xyy.fzi.mybluehost.me/assets/recibir_paquete_files/deco_bars.svg IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeSVG Scalable Vector Graphics image Hash5aaebd8cceb435e8a81f3c7f9d52a6ba c79635f540bd5ce5b71216dea24528d505d79a17 2201abbe6f55ac83b0fc8291475349bc74b527e16021698e6a251c7cd0ea075d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /assets/recibir_paquete_files/deco_bars.svg HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 23 May 2022 17:59:06 GMT
accept-ranges: bytes
content-length: 913
cache-control: max-age=86400
expires: Fri, 03 May 2024 00:03:40 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-type: image/svg+xml
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/assets/recibir_paquete_files/deco_triangles.svg | 50.87.230.228 | 200 OK | 1.2 kB |
URL GET HTTP/2xyy.fzi.mybluehost.me/assets/recibir_paquete_files/deco_triangles.svg IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeSVG Scalable Vector Graphics image Hash83013781ba4b723868224fd9764bf148 fa2e794664c6b402549094eb8f7b09b63bc1b812 463d2ec0fd05c876e567b092d01faac06a20c369d7ce7ea1e8542dbd42c0b9cb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /assets/recibir_paquete_files/deco_triangles.svg HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 23 May 2022 17:59:06 GMT
accept-ranges: bytes
content-length: 1211
cache-control: max-age=86400
expires: Fri, 03 May 2024 00:03:40 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-type: image/svg+xml
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/assets/recibir_paquete_files/apple_store.jpg | 50.87.230.228 | 200 OK | 11 kB |
URL GET HTTP/2xyy.fzi.mybluehost.me/assets/recibir_paquete_files/apple_store.jpg IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 250x82, components 3 Hash498c4a8cc089ec2fc0b87f460924b9b4 324b0ef1cf07829216653bf3fca04add4ebf553f 509066150aa1da2b163e681cff62f67f0becd0bb65cded95be964371835798f6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /assets/recibir_paquete_files/apple_store.jpg HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 23 May 2022 17:59:06 GMT
accept-ranges: bytes
content-length: 11255
cache-control: max-age=86400
expires: Fri, 03 May 2024 00:03:40 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-type: image/jpeg
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/assets/recibir_paquete_files/container.js | 50.87.230.228 | 200 OK | 317 B |
URL GET HTTP/2xyy.fzi.mybluehost.me/assets/recibir_paquete_files/container.js IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeJavaScript source, ASCII text, with very long lines (514) Hash64e934d0a16266574945c8fb92e68316 56cd0c08e7bf1a5f363ec4bdafb6c926814713ea c69737729bfeffad46e66417ed01bff74a95b62b5265abafe011777f5d87f09f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /assets/recibir_paquete_files/container.js HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 23 May 2022 17:59:06 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Fri, 03 May 2024 00:03:40 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-length: 317
content-type: application/javascript
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/assets/recibir_paquete_files/google_play.jpg | 50.87.230.228 | 200 OK | 12 kB |
URL GET HTTP/2xyy.fzi.mybluehost.me/assets/recibir_paquete_files/google_play.jpg IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 270x80, components 3 Hash71405560fcf941f01e531e8564ad9e3f a970b8084d6e7cdd714dbd1add272ac630cd9fe9 bda17ffead5e3809b288330e7aa2d2b689c45cfadcef8249416d07afe34477a7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /assets/recibir_paquete_files/google_play.jpg HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 23 May 2022 17:59:06 GMT
accept-ranges: bytes
content-length: 11827
cache-control: max-age=86400
expires: Fri, 03 May 2024 00:03:40 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-type: image/jpeg
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/assets/recibir_paquete_files/clientlib-site.js | 50.87.230.228 | 404 Not Found | 315 B |
URL GET HTTP/2xyy.fzi.mybluehost.me/assets/recibir_paquete_files/clientlib-site.js IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /assets/recibir_paquete_files/clientlib-site.js HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/assets/recibir_paquete_files/clientlib-provider-correosid.js | 50.87.230.228 | 200 OK | 359 B |
URL GET HTTP/2xyy.fzi.mybluehost.me/assets/recibir_paquete_files/clientlib-provider-correosid.js IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeJavaScript source, ASCII text, with very long lines (544) Hashed8e3f9c92c02f27ac1f60e6503eb3e8 b292b50ffe2cc1266df6594385b5abc115c828b2 1a8c9179d1d4fef9308485f10fc5a296254604b7b02f449f0c325d704fe9d1fc
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /assets/recibir_paquete_files/clientlib-provider-correosid.js HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 23 May 2022 17:59:06 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Fri, 03 May 2024 00:03:40 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-length: 359
content-type: application/javascript
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/assets/recibir_paquete_files/correos-ui-kit.css | 50.87.230.228 | 200 OK | 103 kB |
URL GET HTTP/2xyy.fzi.mybluehost.me/assets/recibir_paquete_files/correos-ui-kit.css IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typegzip compressed data, from Unix Size103 kB (103402 bytes) Hashd7192566e09b03d1f57fc8001d7e3fb4 07d17392404c6ff942675f1c5bcd6eedc6496078 e23aadd722c749b4b1afc1fc441ce4777f54bd377f8443275a1d10c6bf87e4af
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /assets/recibir_paquete_files/correos-ui-kit.css HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 23 May 2022 17:59:06 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Fri, 03 May 2024 00:03:40 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-type: text/css
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff2 | 50.87.230.228 | 404 Not Found | 315 B |
URL GET HTTP/2xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff2 IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff2 HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff2 | 50.87.230.228 | 404 Not Found | 315 B |
URL GET HTTP/2xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff2 IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff2 HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff2 | 50.87.230.228 | 404 Not Found | 315 B |
URL GET HTTP/2xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff2 IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff2 HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff2 | 50.87.230.228 | 404 Not Found | 315 B |
URL GET HTTP/2xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff2 IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff2 HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/libs/granite/csrf/token.json | 50.87.230.228 | 404 Not Found | 315 B |
URL GET HTTP/2xyy.fzi.mybluehost.me/libs/granite/csrf/token.json IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /libs/granite/csrf/token.json HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff | 50.87.230.228 | 404 Not Found | 315 B |
URL GET HTTP/2xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Thu, 02 May 2024 00:03:41 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff | 50.87.230.228 | 404 Not Found | 315 B |
URL GET HTTP/2xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Thu, 02 May 2024 00:03:41 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff | 50.87.230.228 | 404 Not Found | 315 B |
URL GET HTTP/2xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Thu, 02 May 2024 00:03:41 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/ | 50.87.230.228 | | 22 B |
IP50.87.230.228:0 ASN#46606 UNIFIEDLAYER-AS-1
CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeASCII text, with CRLF line terminators Hash81051bcc2cf1bedf378224b0a93e2877 ba8ab5a0280b953aa97435ff8946cbcbb2755a27 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET / HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Thu, 02 May 2024 00:03:41 GMT
Server: nginx/1.21.6
Content-Type: text/html; charset=UTF-8
Content-Length: 22
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: Recibir_paquete.php
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Newfold-Cache-Level: 2
X-Server-Cache: false
Set-Cookie: PHPSESSID=94211da201c7ad67e255996078300f1a; path=/
|
|
| xyy.fzi.mybluehost.me/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1_002.js | 50.87.230.228 | 200 OK | 41 kB |
URL GET HTTP/2xyy.fzi.mybluehost.me/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1_002.js IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typegzip compressed data, from Unix Hash12d3ec068a425bb947bed9cb8fcb8ec8 a26d6072dafdd2678d72cd52a88dbd4f92186899 6e5ce1ec6bb84d5f8a7c21b2187510910d5748b2399d9efc7a289e3dc910b602
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1_002.js HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 23 May 2022 17:59:06 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Fri, 03 May 2024 00:03:40 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-type: application/javascript
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.ttf | 50.87.230.228 | 404 Not Found | 315 B |
URL GET HTTP/2xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.ttf IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.ttf HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Thu, 02 May 2024 00:03:41 GMT
server: nginx/1.21.6
content-type: text/html; charset=iso-8859-1
content-length: 315
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/assets/recibir_paquete_files/CORREOS-favicon.ico | 50.87.230.228 | 200 OK | 110 kB |
URL GET HTTP/2xyy.fzi.mybluehost.me/assets/recibir_paquete_files/CORREOS-favicon.ico IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeMS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel Size110 kB (110021 bytes) Hash349246ee336d8b2986e584a4fa436128 598b9f95458a2426bf1688d616c4f6f3fea3580e 68554c17c00a589c2b29e1f74ac5efbcd8d30252792626f5fff81955e4d89ae7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /assets/recibir_paquete_files/CORREOS-favicon.ico HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 02 May 2024 00:03:41 GMT
server: nginx/1.21.6
content-type: image/x-icon
content-length: 110021
last-modified: Mon, 23 May 2022 17:59:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Fri, 02 May 2025 00:03:41 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-server-cache: false
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/assets/recibir_paquete_files/CORREOS-favicon.ico | 50.87.230.228 | 200 OK | 110 kB |
URL GET HTTP/2xyy.fzi.mybluehost.me/assets/recibir_paquete_files/CORREOS-favicon.ico IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeMS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel Size110 kB (110021 bytes) Hash349246ee336d8b2986e584a4fa436128 598b9f95458a2426bf1688d616c4f6f3fea3580e 68554c17c00a589c2b29e1f74ac5efbcd8d30252792626f5fff81955e4d89ae7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /assets/recibir_paquete_files/CORREOS-favicon.ico HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 02 May 2024 00:03:41 GMT
server: nginx/1.21.6
content-type: image/x-icon
content-length: 110021
last-modified: Mon, 23 May 2022 17:59:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Fri, 02 May 2025 00:03:41 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-server-cache: false
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/Recibir_paquete.php | 50.87.230.228 | 200 OK | 110 kB |
URL User Request GET HTTP/2xyy.fzi.mybluehost.me/Recibir_paquete.php IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (363), with CRLF line terminators Size110 kB (110092 bytes) Hash6eba6494ed4071822c94ffecdf8ddab6 634e852f176d865a9df349f01f04cb1622388e7d 1ec243114f1ef974c25982b36b119184a9a341b067db476f6ef893a9fed3123b
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - Anti-debugging code | | OpenPhish | phishing | Correos |
GET /Recibir_paquete.php HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 May 2024 00:03:41 GMT
Server: nginx/1.21.6
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Newfold-Cache-Level: 2
X-Server-Cache: false
Set-Cookie: PHPSESSID=8480180ff4d92ad64bb8c9e9241a186e; path=/
Transfer-Encoding: chunked
|
|
| xyy.fzi.mybluehost.me/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1.js | 50.87.230.228 | 200 OK | 248 kB |
URL GET HTTP/2xyy.fzi.mybluehost.me/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1.js IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeJavaScript source, ASCII text Size248 kB (248235 bytes) Hash273e017fd0bef143258516bdee173a1e b47730ffaec4272a8a01756af2ef13ecea1c4e92 9fcc241093405946885039df428cfa7f0051a1f2bdbcc5a313a177a9e35f8806
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1.js HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Mon, 23 May 2022 17:59:06 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Fri, 03 May 2024 00:03:40 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-type: application/javascript
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/assets/recibir_paquete_files/clientlib-base.js | 50.87.230.228 | 200 OK | 129 kB |
URL GET HTTP/2xyy.fzi.mybluehost.me/assets/recibir_paquete_files/clientlib-base.js IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
Size129 kB (128839 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Correos |
GET /assets/recibir_paquete_files/clientlib-base.js HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Mon, 23 May 2022 17:59:06 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Fri, 03 May 2024 00:03:40 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-type: application/javascript
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/assets/pic_image/package.jpg | 50.87.230.228 | 200 OK | 80 kB |
URL GET HTTP/2xyy.fzi.mybluehost.me/assets/pic_image/package.jpg IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x960, components 3 Hashc8f62200abc0901f82eb57cfd63f11da b57afb6c671cc84aff03656945c36af57ec0c68d 0e343f72b8fe95c764a97e83ec0b5f47910e7615045487174fb48e1ce6075372
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /assets/pic_image/package.jpg HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Mon, 23 May 2022 17:59:06 GMT
accept-ranges: bytes
content-length: 79701
cache-control: max-age=86400
expires: Fri, 03 May 2024 00:03:40 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-type: image/jpeg
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/assets/recibir_paquete_files/gtm.js | 50.87.230.228 | 200 OK | 80 kB |
URL GET HTTP/2xyy.fzi.mybluehost.me/assets/recibir_paquete_files/gtm.js IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeJavaScript source, ASCII text, with very long lines (1555) Hashbd9368eb37645cdf268345f880851e03 2b3d6120eb736e9f218f48f9056b64860d0ae619 f60fb122312d6f897d7ed61b9ee0a89b6551649fdd3a6be513c50bb73b7d2654
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /assets/recibir_paquete_files/gtm.js HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Mon, 23 May 2022 17:59:06 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Fri, 03 May 2024 00:03:40 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-type: application/javascript
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-ui-1.js | 50.87.230.228 | 200 OK | 211 kB |
URL GET HTTP/2xyy.fzi.mybluehost.me/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-ui-1.js IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeJavaScript source, ASCII text, with very long lines (18557) Size211 kB (210902 bytes) Hash0cd3f4fce2e0fe4a3826df5e2b5cc9bf a4a80afd87d6d3a986defb2741d5b76d18a96125 794bf1ff4b8bbc981cb280b4efeb6e5b040afb34b85f6e3cd2546ace15910301
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /assets/Seleccione%20medio%20de%20pago_fichiers/jquery-ui-1.js HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/Recibir_paquete.php
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Mon, 23 May 2022 17:59:06 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Fri, 03 May 2024 00:03:40 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-type: application/javascript
date: Thu, 02 May 2024 00:03:40 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff | 50.87.230.228 | 404 Not Found | 315 B |
URL GET HTTP/2xyy.fzi.mybluehost.me/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff IP50.87.230.228:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xyy.fzi.mybluehost.me/Recibir_paquete.php CertificateIssuerLet's Encrypt Subjectmail.xyy.fzi.mybluehost.me FingerprintF6:D1:33:9B:D0:21:27:88:4D:E1:3A:9C:0C:42:C4:22:0F:49:F0:F6 ValidityTue, 16 Apr 2024 23:24:22 GMT - Mon, 15 Jul 2024 23:24:21 GMT
File typeHTML document, ASCII text, with very long lines (326), with no line terminators Hash97ef40509b73c101d6815511c3adf98d a4242322497ea630ea72e26ba297a95a2bbe5ccd 322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Correos | | OpenPhish | phishing | Correos |
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff HTTP/1.1
Host: xyy.fzi.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://xyy.fzi.mybluehost.me/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=0036f304ae2bc751fe330bad5a1e7b66
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Thu, 02 May 2024 00:03:41 GMT
server: Apache
X-Firefox-Spdy: h2
|
|