corroes.site44.com/
200 OK 7.2 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8991)
Hash ec80caa416dd25f55b32423722a8e8fb
a6867a558c1b16032021a5ffe2f10f95c16e1160
7820c82ed435ad2c946d78cede42d465128fea49f40765b39f0207cb932a5777
GET / HTTP/1.1
Host: corroes.site44.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Sat, 05 Nov 2022 22:17:23 GMT
Date: Sun, 06 Nov 2022 04:33:32 GMT
Keep-Alive: timeout=5
Vary: Accept-Encoding
Content-Encoding: gzip
ETag: W/"34610e8feb7c0f12ea8029d913522f65"
X-Varnish: 24545604 21484477
Age: 90553
Via: 1.1 varnish-v4
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=22569
Content-Length: 7209
Connection: keep-alive
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9e164a845d32db8fa51fdb5b1aa218d9
169099b4d2f8e119ab6cf6fca279b6fb535b1759
402ffbf1404cf05c0516c5a8cd5344bd53537ac5150d387730a90c81c17dc9e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "402FFBF1404CF05C0516C5A8CD5344BD53537AC5150D387730A90C81C17DC9E4"
Last-Modified: Sun, 06 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8191
Expires: Mon, 07 Nov 2022 07:59:16 GMT
Date: Mon, 07 Nov 2022 05:42:45 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 05978511215be8462d0b69e33b3a91a3
61535ba131d547f1c5108d9e7763ee3fc8d8c824
cfdbf0f9e88e3c1ae8eb03e46c352633a75d4b2edbfbd57c1c6b52ff1623a109
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2201
Cache-Control: max-age=105899
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 05:42:45 GMT
Etag: "63678ce7-1d7"
Expires: Tue, 08 Nov 2022 11:07:44 GMT
Last-Modified: Sun, 06 Nov 2022 10:31:03 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d8c32b2fb818533a5b3fe5c69157bde9
93594fd3fc50d9d444c28660eabba1edbe4f0588
df8b8ce7a83d11fbe075c8780103c509654f288b5d757d64b696d861a11f3c7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF8B8CE7A83D11FBE075C8780103C509654F288B5D757D64B696D861A11F3C7F"
Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14463
Expires: Mon, 07 Nov 2022 09:43:48 GMT
Date: Mon, 07 Nov 2022 05:42:45 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Itf5k+vHfPkEyEXOpT34uNqdvqQAbD391M3pQuRcPsxwJQATvx89CT+DHOqEsQrm+p47TEXfCWE=
x-amz-request-id: 7VCZK3CHXNYFPJA5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 07 Nov 2022 04:47:55 GMT
age: 3290
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 05:42:45 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
corroes.site44.com/favicon.ico
200 OK 1.2 kB URL HTTP/1.1 corroes.site44.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 96f9b849bdad00d82156acff16f63e9d
5a70a773c772121f5aabc9d61b44b494c5f7bfc7
3e44591d11ce07576de4c2c210b62199c752e73087593bd719073d158cf07a1d
GET /favicon.ico HTTP/1.1
Host: corroes.site44.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://corroes.site44.com/
HTTP/1.1 200 OK
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Tue, 08 May 2012 04:40:28 GMT
Date: Sun, 06 Nov 2022 23:44:55 GMT
Keep-Alive: timeout=5
X-Varnish: 23738018 23697194
Age: 21470
Via: 1.1 varnish-v4
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Connection: keep-alive
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash d862f992e9902530594e7aca425f129b
25b414fe833d30b52928535d659a1ee281b82e3a
0c6286152fe8bb5fdf1505f2001d530a65ee53aa6d9601bbb1eecb683036071d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6301
Cache-Control: max-age=104946
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 05:42:46 GMT
Etag: "6367792b-1d7"
Expires: Tue, 08 Nov 2022 10:51:52 GMT
Last-Modified: Sun, 06 Nov 2022 09:06:51 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: kJbdXbr4O9flWu3bLTArxg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: K0JT/Zmlpc7VwCFa8HNtY85GZ/A=
ocsp.sectigo.com/
200 OK 471 B IP
Hash 437dd13f8d4d23a3cc96729298df5e3f
9811c10578ee2209a81f40308e3182487a9e8314
0e0f9cb7cbff923f23bfb36fad8896f26f89dbb980a2a1a599172381f4acf074
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 05:42:47 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 06 Nov 2022 21:28:13 GMT
Expires: Sun, 13 Nov 2022 21:28:12 GMT
Etag: "9811c10578ee2209a81f40308e3182487a9e8314"
Cache-Control: max-age=574524,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7663bf5eff53b51b-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e37c89a5a7f608a21ac42b87ee0f7fc
55132fb03671e178b7e186da48ac7e02d6e96e23
6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20548
Expires: Mon, 07 Nov 2022 11:25:15 GMT
Date: Mon, 07 Nov 2022 05:42:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e37c89a5a7f608a21ac42b87ee0f7fc
55132fb03671e178b7e186da48ac7e02d6e96e23
6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20548
Expires: Mon, 07 Nov 2022 11:25:15 GMT
Date: Mon, 07 Nov 2022 05:42:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e37c89a5a7f608a21ac42b87ee0f7fc
55132fb03671e178b7e186da48ac7e02d6e96e23
6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20548
Expires: Mon, 07 Nov 2022 11:25:15 GMT
Date: Mon, 07 Nov 2022 05:42:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e37c89a5a7f608a21ac42b87ee0f7fc
55132fb03671e178b7e186da48ac7e02d6e96e23
6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20548
Expires: Mon, 07 Nov 2022 11:25:15 GMT
Date: Mon, 07 Nov 2022 05:42:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e37c89a5a7f608a21ac42b87ee0f7fc
55132fb03671e178b7e186da48ac7e02d6e96e23
6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20548
Expires: Mon, 07 Nov 2022 11:25:15 GMT
Date: Mon, 07 Nov 2022 05:42:47 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a1807de-0827-4b70-915b-ad833da18839.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a1807de-0827-4b70-915b-ad833da18839.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 255d7f3f2b49a85dc2c42d3ce1a8abdd
f6232ea2d63baea5f833eea79533670eb8ba6ac8
a07986c4065f6fd151a10c6162899704eb543aa3e51d19eb6bf363af4d8caf92
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a1807de-0827-4b70-915b-ad833da18839.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10979
x-amzn-requestid: a7537de0-c4ff-4a64-942b-8440e52f4987
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bA1k1FUaIAMFtQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63636951-69c3b3d435da8a336317eac2;Sampled=0
x-amzn-remapped-date: Thu, 03 Nov 2022 07:10:09 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: V8MQPiUHBKo3HXrUG7J6gVpQwUQAxp_pEVct-bMLCcPb5GxPHlZixQ==
via: 1.1 b47618c03bd47cf085f27b1e215f76cc.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 16:40:44 GMT
age: 46923
etag: "f6232ea2d63baea5f833eea79533670eb8ba6ac8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08fced45-2207-4622-ad9c-c2ab54f27b2a.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08fced45-2207-4622-ad9c-c2ab54f27b2a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6c405a2c2821da31e4000a3badb64d60
4ae120aa65e23ea40cf9f3dc25c5c3c0aba24db9
c192840e892b171fe60c7688b3e6388433d4fcc8a0a1f54699a361373da64d37
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08fced45-2207-4622-ad9c-c2ab54f27b2a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7460
x-amzn-requestid: 031771ee-eab5-41f8-80de-5281dded85bf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bMtUrE79IAMF3vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636828ea-58109a273d57d22c7149dbf2;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 21:36:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: LquZ8nU3W4g-4YNMXaHivixIV_W4vQM05ZjhXdxFx6l9N6Ha19hESw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 21:39:31 GMT
age: 28996
etag: "4ae120aa65e23ea40cf9f3dc25c5c3c0aba24db9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/
302 Found 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/ HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Mon, 07 Nov 2022 05:42:47 GMT
content-type: text/html; charset=UTF-8
location: Bienvenido a Correos.es - El Portal Online de Correos.html
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
age: 0
x-cache: MISS
content-length: 0
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6db454c-443b-4ca6-982a-3856bcc96e03.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6db454c-443b-4ca6-982a-3856bcc96e03.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 261f11f1f3c32679559e7ca92868bca9
0cb101f9081261eaadc55593acedeae23a530114
15e6d3cb9b100bce9ebcc537939f56703f6a9018bcbcc76bebc2cdac1b92f363
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6db454c-443b-4ca6-982a-3856bcc96e03.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6907
x-amzn-requestid: b6f67609-796a-4beb-b51b-e241fb4f7b13
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bMtWGE3yIAMF1FA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636828f3-6520fdac16744a3d237d0746;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 21:36:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: uC3eqDqX2p4N8YJpNFjG1RZgd-seTCgcNrla3-hm66RDZPigEc2ubA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 21:51:00 GMT
etag: "0cb101f9081261eaadc55593acedeae23a530114"
content-type: image/jpeg
age: 28307
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13dd0fa0-60cd-4a93-b673-6d1c4b963e3c.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13dd0fa0-60cd-4a93-b673-6d1c4b963e3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 98ba06818a9e583ae9d633917ad1b311
3bbbfcb3e35f1827a7a5a0da29f9042262b706dc
c6fa191b753430aa1ae982c36cdb9bb43af17258513f6a51db8a17c7d8cc4f9f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13dd0fa0-60cd-4a93-b673-6d1c4b963e3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9698
x-amzn-requestid: abd3018e-ef1b-4bea-96c3-f2acfe09e5f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bMtgiFEwIAMFYYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63682936-4f3d5f8420cf69054c250ea8;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 21:37:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dAJc78sGe0SRE5jXuMH4xDEkSkJfbkcq0RycQ0aKDSCl-p0x7QY2nA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 21:51:02 GMT
age: 28305
etag: "3bbbfcb3e35f1827a7a5a0da29f9042262b706dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba2be0c-46a2-4aa1-be6e-09cafbba66a9.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba2be0c-46a2-4aa1-be6e-09cafbba66a9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1190aa1b3db742f1cc476e53b34479b7
7e7ba87cfbc21acc28219c68521eedd6d3f614a0
6724e0c14b11cf9ef8c2050116115e5f7985f744184a7d2e8ea4c0189bd1997d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba2be0c-46a2-4aa1-be6e-09cafbba66a9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7309
x-amzn-requestid: 0d1c4df8-769e-497b-999c-b1087d79dfe4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bKLIGGWHIAMFhiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63672566-1745417f7ed16a0576321e03;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 03:09:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0EhZdU9imzr2PMiF_8CNHggx2T53fnClbpE-rFqlKU3jtxHdRXQKyQ==
via: 1.1 95785220a566cd050f3ad80928463374.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 03:23:35 GMT
age: 8352
etag: "7e7ba87cfbc21acc28219c68521eedd6d3f614a0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e2853cc6ec6223160471401e6871f4b
f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aMF6oEz_oAMF8Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3fDf4aoep5tTAusisXhIdAf0A6SbpM5fYtYaiXtNSb0-VRJo5nu8Vg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 09:11:34 GMT
age: 73873
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
200 OK 53 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
IP
File type PHP script text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (58707)
Hash 9d4f91aa67dc4a94c3e25bc99ccafcb8
0d5f851817fcf5e80fc6119bf67997912354d6ae
e718519c6b7b52dbd3a17a26ced2f04623fd95b4a2ce154d1d04607e64f3450c
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:41 GMT
content-type: text/html
last-modified: Sat, 05 Nov 2022 21:39:47 GMT
vary: Accept-Encoding
etag: W/"6366d823-8a526"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
x-cacheable: YES
age: 76566
x-cache: HIT
accept-ranges: bytes
content-length: 53207
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css
200 OK 18 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash e58df9cec56c886bd5325c4199f1d977
e28a2bbf9b128a710f8fe74769df90cc1ed6ae59
f31949bf870133dec95482487d27998b6ae73fe98c1bfb8e3280f5c51e269615
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: text/css
last-modified: Sat, 05 Nov 2022 20:20:54 GMT
vary: Accept-Encoding
etag: W/"6366c5a6-1fb46"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 76566
x-cache: HIT
accept-ranges: bytes
content-length: 18526
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f5d7543eae40ab3568346a24b420fc8e
4a55570924bf5890ba12b9ac971c37d98e20a4fd
9eb8334709efda5dc19a240b717940662e7c0de02f227cc9cb5d329fe41e8c50
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9EB8334709EFDA5DC19A240B717940662E7C0DE02F227CC9CB5D329FE41E8C50"
Last-Modified: Sun, 06 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10719
Expires: Mon, 07 Nov 2022 08:41:27 GMT
Date: Mon, 07 Nov 2022 05:42:48 GMT
Connection: keep-alive
uimarketpro.com/js/31d93afad6b167cce0ac3580169a7ce4.js?referrer=https://www.google.com/
200 OK 28 kB URL HTTP/1.1 uimarketpro.com/js/31d93afad6b167cce0ac3580169a7ce4.js?referrer=https://www.google.com/
IP
File type ASCII text, with very long lines (62823)
Hash 2a89cee57cb2642e8ac9b50d54549cd3
5b8da0e466fadade991a5f4666373bd2769bc4c8
f2c530354b7c73e02e632504eab2e5c822f2ca5fe67e3486ba6478b6ce717ea6
GET /js/31d93afad6b167cce0ac3580169a7ce4.js?referrer=https://www.google.com/ HTTP/1.1
Host: uimarketpro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Nov 2022 05:42:48 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Jun 2022 13:23:30 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
ETag: W/"62b317d2-f568"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, OPTIONS, GET
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-base.css
200 OK 2.1 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-base.css
IP
File type ASCII text, with very long lines (1469)
Hash 2162e2ed5c6a5b5c3427e560ede12f61
d3987bb89d0f60fbeeb3b004be43d3e9da524db2
5f4a3e24bb0df65b3c2e36b0b1676d909df86bb259dcde764cd55ece1d381089
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-base.css HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: text/css
last-modified: Sat, 05 Nov 2022 20:20:54 GMT
vary: Accept-Encoding
etag: W/"6366c5a6-1456"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 76566
x-cache: HIT
accept-ranges: bytes
content-length: 2084
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.css
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.css
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.css HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 07 Nov 2022 05:42:48 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.css
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.css
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.css HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 07 Nov 2022 05:42:48 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.js.t%C3%A9l%C3%A9chargement
200 OK 34 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (32759)
Hash 4635bffccc756e9a52eae8011adb9137
8c6d308daac07e23764c6dcf2f0d305931dfddb7
92c5b25edbc4647c55be848b92ea22fd4618cc3252a2364025262e18a7430f84
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 33481
last-modified: Sat, 05 Nov 2022 20:20:53 GMT
etag: "6366c5a5-82c9"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.js.t%C3%A9l%C3%A9chargement
200 OK 372 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.js.t%C3%A9l%C3%A9chargement
IP
Hash 51d697b6110e35dc0a87a172487ee4aa
dc6b25c5414b9b559774e9320987fbe325192a44
5e472f1a234f9be27a0c865ff5c8d8ca674c09b3960bdd63e0d0f6ea8e1a02ac
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 372
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-174"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.js.t%C3%A9l%C3%A9chargement
200 OK 48 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.js.t%C3%A9l%C3%A9chargement
IP
Hash 134ae75fc1c8870ce2051459dedd435f
2bd77fa55f7e0c46a13843d50bd09e133c7e203a
7a214fdc1dd4bf3f029466a9e9eff5aea76b0043d08bef54aa675ed78bc24705
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 104323
last-modified: Sat, 05 Nov 2022 20:20:54 GMT
etag: "6366c5a6-19783"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76566
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/gtm.js.t%C3%A9l%C3%A9chargement
200 OK 52 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/gtm.js.t%C3%A9l%C3%A9chargement
IP
Hash b6cd4d81346b6c45b54c511673aabd46
b2c8a38dab7c2b20fa33a4964513da4ee0045387
fdfa15c7348af7bbea1cfa3cadfee9efd7c622e7bbc1020930494bc221903573
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/gtm.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 83223
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-14517"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76566
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 12a1f191d3251cadd0fce23ca14e1a5d
a95b5c8eafe5d0ae8d78c77d4965ba1c486ec864
95b318059b6735c7221e60eabe0489c228c705c47a5f6adc8f829ac0f3c5f77c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 05:42:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.min.js.t%C3%A9l%C3%A9chargement
200 OK 372 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.min.js.t%C3%A9l%C3%A9chargement
IP
Hash 51d697b6110e35dc0a87a172487ee4aa
dc6b25c5414b9b559774e9320987fbe325192a44
5e472f1a234f9be27a0c865ff5c8d8ca674c09b3960bdd63e0d0f6ea8e1a02ac
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.min.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 372
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-174"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/LogoCornamusa.svg
200 OK 1.2 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/LogoCornamusa.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2761), with CRLF line terminators
Hash 947ef162543253ab828a76e306ea0578
c8134fbb3c6c1cad9b667a21f4e54eaf283577d7
4afd52dd55956a5e253f5290f5c2140fd1712cb165c58839e595e41e95686487
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/LogoCornamusa.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-d50"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
content-length: 1239
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/usuario.png
200 OK 2.3 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/usuario.png
IP
File type PNG image data, 40 x 47, 8-bit/color RGBA, non-interlaced\012- data
Hash 24b1f6b9e40c680c7669234cb261e9c1
9d5f261cf1f8cf60204c5aa4eeb4b7c890ef5948
263ba4741dba44c404dc7175d9223bd179a9c05c879e0b23ccd6ef44fdf3cbbb
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/usuario.png HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/png
content-length: 2285
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-8ed"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/deco_triangles.svg
200 OK 451 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/deco_triangles.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 9f484954ec83afedf792b8a54262b528
e6bbe505e712c396e0dca15915f68fa897f5ed77
e9fd41da5588466d5e7fda079a6555b926a422449e22e61e13c8356411fce3a8
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/deco_triangles.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-4bb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
content-length: 451
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/deco_bars.svg
200 OK 390 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/deco_bars.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82304b9a0023912a7a5ecf6bc3423a4d
74cdfe76217be9aef762ccc76c807b54bc627a35
0fbc2616c8ad67b276f458ff1896e233a0f803314318197dc00a13d53d026097
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/deco_bars.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-391"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
content-length: 390
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/apple_store.jpg
200 OK 11 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/apple_store.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 250x82, components 3\012- data
Hash 498c4a8cc089ec2fc0b87f460924b9b4
324b0ef1cf07829216653bf3fca04add4ebf553f
509066150aa1da2b163e681cff62f67f0becd0bb65cded95be964371835798f6
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/apple_store.jpg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/jpeg
content-length: 11255
last-modified: Sat, 05 Nov 2022 20:20:53 GMT
etag: "6366c5a5-2bf7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/google_play.jpg
200 OK 12 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/google_play.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 270x80, components 3\012- data
Hash 71405560fcf941f01e531e8564ad9e3f
a970b8084d6e7cdd714dbd1add272ac630cd9fe9
bda17ffead5e3809b288330e7aa2d2b689c45cfadcef8249416d07afe34477a7
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/google_play.jpg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/jpeg
content-length: 11827
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-2e33"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/huawei.svg
200 OK 9.9 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/huawei.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (2050), with CRLF line terminators
Hash ec48cd7f9e55e5a0fed3748fe377362f
c4cf5d3a82a05996133e8afd441e064734d17c43
9d18a83a0fa960887ca5b4f86d261c7c52c32bfc74c3dd610a3b87bc4fc38d99
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/huawei.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-62a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
content-length: 9858
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/mastercard.svg
200 OK 6.9 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/mastercard.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (1312), with CRLF line terminators
Hash fc7f0e07f6e0efb9ca91a3a1404e00b3
c7d7c9cfe004695b784b6e207dcf77b2ac66c47a
3304180cc11e7f15a02f3012522f1dbee84e849a7f2dbfa6244a7a50b03db972
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/mastercard.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-46ce"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
content-length: 6903
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/paypal.svg
200 OK 2.6 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/paypal.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (1241), with CRLF line terminators
Hash 3b5cc9c768101ad99dec6f71fb89e017
dfb773903162cf322d3e65a1909d568e05c5eb3c
3481cd3cd3131f6ce35aa4753d7a326f7e0b8e9ecf0cc048d467d9211a6afc86
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/paypal.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-196c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
content-length: 2629
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/maestro.svg
200 OK 5.1 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/maestro.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (1301), with CRLF line terminators
Hash 22041b12bca6f171fef02997650fd6f1
8a1d301c18d8ed7f72b94e2ad72b7b4848cea8a7
94ee583cf1e89e57d0e2090fdf6d49fc23c7b1affb7b12ff0ad0e605238bf20e
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/maestro.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-3200"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
content-length: 5069
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/visa.svg
200 OK 1.4 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/visa.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (989), with CRLF line terminators
Hash a95d85570b0c3df7a53065a80171afa6
af7a613fe88309714f3c96d30d5c78c8957a2ce2
f70678ce5ee585470eec043aea512b8009bbc82d58855458cafa9f7a3bb48cbc
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/visa.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-c92"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
content-length: 1442
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/ico-splash.svg
200 OK 776 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/ico-splash.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1299), with CRLF line terminators
Hash 6a39d90eaa5689d12961123917cc3660
b73924456cbacc2f92c2c3b066b4ac869f05dc5e
e4dbe445c7c478bc0ae4fded706a24c2a0596ca9f8f4e3cc8db3dee466723b1a
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/ico-splash.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-5d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
content-length: 776
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/EAwards.png
200 OK 6.1 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/EAwards.png
IP
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 67a30e9b7d955f7b0e7e7cc4f46f6bea
26a488d3727605f5c0918ce247112cda3e81cf26
a612c443b0ef94f8b2d4ab4b13fa53b0b91a27bf0626269ac62981a2ba3a595a
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/EAwards.png HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/png
content-length: 6080
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-17c0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-provider-correosid.js.t%C3%A9l%C3%A9chargement
200 OK 1.1 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-provider-correosid.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (544)
Hash ed8e3f9c92c02f27ac1f60e6503eb3e8
b292b50ffe2cc1266df6594385b5abc115c828b2
1a8c9179d1d4fef9308485f10fc5a296254604b7b02f449f0c325d704fe9d1fc
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-provider-correosid.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 1137
last-modified: Sat, 05 Nov 2022 20:20:54 GMT
etag: "6366c5a6-471"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/container.js.t%C3%A9l%C3%A9chargement
200 OK 752 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/container.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (514)
Hash 64e934d0a16266574945c8fb92e68316
56cd0c08e7bf1a5f363ec4bdafb6c926814713ea
c69737729bfeffad46e66417ed01bff74a95b62b5265abafe011777f5d87f09f
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/container.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 752
last-modified: Sat, 05 Nov 2022 20:20:54 GMT
etag: "6366c5a6-2f0"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/ario2020.png
200 OK 33 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/ario2020.png
IP
File type PNG image data, 400 x 350, 8-bit/color RGBA, interlaced\012- data
Hash 3719fadf2f228ad6608aabced589b630
da67e6e65c24bf6dee6ba33a8bf339ab8e3dee0e
15ad4c1d5c432561e857f8e94c00ef57abf90c5eb82ae0457f51b1fccde3d5f3
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/ario2020.png HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/png
content-length: 32574
last-modified: Sat, 05 Nov 2022 20:20:54 GMT
etag: "6366c5a6-7f3e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/31d93afad6b167cce0ac3580169a7ce4.js.t%C3%A9l%C3%A9chargement
200 OK 63 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/31d93afad6b167cce0ac3580169a7ce4.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (62823)
Hash d6ddaa3e42dd1f5800f2d0486f9dd27f
a2ed0834fa9945634337839fb60c450b05758a17
e31ae1d6b64683fd9de74c8795491cad2210bb8a065dcec1220c4a0f251aed20
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/31d93afad6b167cce0ac3580169a7ce4.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 62824
last-modified: Sat, 05 Nov 2022 20:20:53 GMT
etag: "6366c5a5-f568"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76566
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.css
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.css
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.css HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 07 Nov 2022 05:42:49 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.css
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.css
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.css HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 07 Nov 2022 05:42:49 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/launch-22ce7a1a18b2.js.t%C3%A9l%C3%A9chargement
200 OK 47 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/launch-22ce7a1a18b2.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (32759)
Hash b9bd8ce458a75ac182a3e0fdc7b87575
e2050a0f4a10634f99b7f665c7427a4b406ca245
47415fbe390eb34d0a1e4b6808b98fecd8207bedf8101ac88717739a0bfb6745
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/launch-22ce7a1a18b2.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 244154
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-3b9ba"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76566
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js.t%C3%A9l%C3%A9chargement
200 OK 64 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (58777)
Hash 0b8a8dee8199692e9dedee3e516c35ca
4d8b6bc1842d1f91e617e556ca5918810615fe3b
e547fe50a764e43c4a31eee65d715869f35c7ad8d781584453561b87c4fcf7f3
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 64055
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-fa37"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76566
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js.t%C3%A9l%C3%A9chargement
200 OK 64 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (58387)
Hash 132f24c5da432e831cae10ef2ce914b9
af5bea3dda8f01b260b6cc0a7ac6c40264b86f1c
fe9430ac1262f6841c4661888fc45b65e0d11d8a11bfba24b21866f30730c189
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 64055
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-fa37"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/31d93afad6b167cce0ac3580169a7ce4.js.t%C3%A9l%C3%A9chargement
200 OK 47 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/31d93afad6b167cce0ac3580169a7ce4.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (32759)
Hash 9143168e9db7052e1de20ab0c8172172
8ae35649cb26945013eb229588e114514e171bea
0d5d8970aee788415e21aa4706ff01b7f799f8af5558a94bf4f4651ddfe461e1
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/31d93afad6b167cce0ac3580169a7ce4.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 62824
last-modified: Sat, 05 Nov 2022 20:20:53 GMT
etag: "6366c5a5-f568"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76566
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Login_MiOficina.jpg
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Login_MiOficina.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /CORSAS/cor/Login_MiOficina.jpg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 07 Nov 2022 05:42:49 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff2
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff2
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff2 HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 07 Nov 2022 05:42:49 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422.js.t%C3%A9l%C3%A9chargement
200 OK 52 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (50886), with CRLF, LF line terminators
Hash 78703f6d90461392261cb8cfb6322e7f
37e31b6060f33bc59e4e33944eccc78c444ea954
007d4203bb5a8d599a7383e861dbff8781d9d04439e8375e02001fe6fd40a6d1
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 294444
last-modified: Sat, 05 Nov 2022 20:20:53 GMT
etag: "6366c5a5-47e2c"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76566
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff2
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff2
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff2 HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 07 Nov 2022 05:42:49 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js.t%C3%A9l%C3%A9chargement
200 OK 76 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (64348)
Hash d18a4098c13c8fa96c3727eee2f3b843
26a5668f669738f5c249bf374d19602d7e5940e0
61c0568f87a08864b091c9df22aadcfd7e5b2b8e3b06cec230187a82a5827b1d
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 102077
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-18ebd"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76566
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 07 Nov 2022 05:42:49 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 07 Nov 2022 05:42:49 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 07 Nov 2022 05:42:49 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1655128335527.woff
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1655128335527.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1655128335527.woff HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 07 Nov 2022 05:42:49 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1655128335527.ttf
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1655128335527.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1655128335527.ttf HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 07 Nov 2022 05:42:49 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js(1).t%C3%A9l%C3%A9chargement
429 Too Many Requests 117 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js(1).t%C3%A9l%C3%A9chargement
IP
File type HTML document, ASCII text
Hash 2dccf9a2e169c68dd4f3bd5ea163e45e
4ddcf984285a5c544ed1132f5f6efd7a5d01b470
ae138caf8767f7be2fe6f47f1663b0e2e28d903264707aa9b6f73bb7b223902c
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js(1).t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 429 Too Many Requests
content-length: 117
cache-control: no-cache
content-type: text/html
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422.js.t%C3%A9l%C3%A9chargement
200 OK 113 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (64471)
Size 113 kB (112807 bytes)
Hash 423e07a9061f00c1ebbadf7eb9d574da
43e6981cdec871affd998a93c0bc9468c9cee248
27174eb0f8d0f6571722b642a5612113191ceb279074aab6c0a39ac696484d7c
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 294444
last-modified: Sat, 05 Nov 2022 20:20:53 GMT
etag: "6366c5a5-47e2c"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.min.js.t%C3%A9l%C3%A9chargement
429 Too Many Requests 117 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.min.js.t%C3%A9l%C3%A9chargement
IP
File type HTML document, ASCII text
Hash 2dccf9a2e169c68dd4f3bd5ea163e45e
4ddcf984285a5c544ed1132f5f6efd7a5d01b470
ae138caf8767f7be2fe6f47f1663b0e2e28d903264707aa9b6f73bb7b223902c
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.min.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 429 Too Many Requests
content-length: 117
cache-control: no-cache
content-type: text/html
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.js.t%C3%A9l%C3%A9chargement
429 Too Many Requests 117 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.js.t%C3%A9l%C3%A9chargement
IP
File type HTML document, ASCII text
Hash 2dccf9a2e169c68dd4f3bd5ea163e45e
4ddcf984285a5c544ed1132f5f6efd7a5d01b470
ae138caf8767f7be2fe6f47f1663b0e2e28d903264707aa9b6f73bb7b223902c
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 429 Too Many Requests
content-length: 117
cache-control: no-cache
content-type: text/html
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js(1).t%C3%A9l%C3%A9chargement
200 OK 15 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js(1).t%C3%A9l%C3%A9chargement
IP
Hash d242a0133bbb28b54bbf983b6fbf605d
f547f376223a0294335ba441be15cfd37043f288
63836074e985c411464117896f89257d3c9ab8277b7e2c194501916ceb00073c
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js(1).t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 64055
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-fa37"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
www.correos.es/content/dam/correos/imagenes/iconos/CORREOS-favicon.ico
200 OK 18 kB URL HTTP/2 www.correos.es/content/dam/correos/imagenes/iconos/CORREOS-favicon.ico
IP
File type MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel\012- data
Hash f73085e029c5a02fc8203fbe9e2f0a44
34bf21870c8d6e304c13cdf5adefa57821abd34f
46829a75450c4665c2d0b7ae641fb49b287423d471446465b1c330d116bb3eb0
GET /content/dam/correos/imagenes/iconos/CORREOS-favicon.ico HTTP/1.1
Host: www.correos.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/x-icon
content-length: 17992
date: Mon, 07 Nov 2022 05:39:30 GMT
server: Apache
x-server: server1
x-content-type-options: nosniff
last-modified: Wed, 14 Apr 2021 14:00:47 GMT
accept-ranges: bytes
content-encoding: gzip
x-frame-options: SAMEORIGIN
etag: "1adc5-5bfef2c6d41c0-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2nfYJw1QbGM753mcYcqZ5ahHpAVWDPasqF7doifxl-VmWKjtNNA34g==
age: 890902
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-provider-correosid.js.t%C3%A9l%C3%A9chargement
429 Too Many Requests 117 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-provider-correosid.js.t%C3%A9l%C3%A9chargement
IP
File type HTML document, ASCII text
Hash 2dccf9a2e169c68dd4f3bd5ea163e45e
4ddcf984285a5c544ed1132f5f6efd7a5d01b470
ae138caf8767f7be2fe6f47f1663b0e2e28d903264707aa9b6f73bb7b223902c
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-provider-correosid.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 429 Too Many Requests
content-length: 117
cache-control: no-cache
content-type: text/html
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.min.js.t%C3%A9l%C3%A9chargement
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.min.js.t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.min.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 33481
last-modified: Sat, 05 Nov 2022 20:20:54 GMT
etag: "6366c5a6-82c9"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/launch-22ce7a1a18b2.js.t%C3%A9l%C3%A9chargement
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/launch-22ce7a1a18b2.js.t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/launch-22ce7a1a18b2.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 244154
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-3b9ba"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js.t%C3%A9l%C3%A9chargement
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js.t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 102077
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-18ebd"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.js.t%C3%A9l%C3%A9chargement
404 Not Found 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.js.t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 07 Nov 2022 05:42:48 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://golden-corroes-be96ec.ingress-erytho.ewp.live/wp-json/>; rel="https://api.w.org/"
content-encoding: gzip
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.js.t%C3%A9l%C3%A9chargement
404 Not Found 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.js.t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 07 Nov 2022 05:42:48 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://golden-corroes-be96ec.ingress-erytho.ewp.live/wp-json/>; rel="https://api.w.org/"
content-encoding: gzip
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422 HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 294444
last-modified: Sat, 05 Nov 2022 20:20:53 GMT
etag: "6366c5a5-47e2c"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-base.js.t%C3%A9l%C3%A9chargement
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-base.js.t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-base.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 128839
last-modified: Sat, 05 Nov 2022 20:20:54 GMT
etag: "6366c5a6-1f747"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js(1).t%C3%A9l%C3%A9chargement
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js(1).t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js(1).t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 102077
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-18ebd"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76565
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422 HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 294444
last-modified: Sat, 05 Nov 2022 20:20:53 GMT
etag: "6366c5a5-47e2c"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 76566
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
3.230.29.177
23.36.77.32
93.184.220.29
18.202.7.144
0.0.0.0