demo2.cloudwp.dev/trial-y412xt64/Last_Correos/
151.139.128.10301 Moved Permanently 0 B URL HTTP/1.1 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/
IP 151.139.128.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert openphish Correos
fortinet Phishing
GET /trial-y412xt64/Last_Correos/ HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 30 Dec 2022 20:13:06 GMT
Accept-Ranges: bytes
Cache-Control: max-age=0
Location: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/
X-HW: 1672431186.cds023.sk1.h2,1672431186.cds255.sk1.c
Link: <http://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/>; rel="canonical"
Access-Control-Allow-Origin: *
x-sp-metadata: HS256.COKovZ0GEksKJDM0YmJlYmQ0LThkZmEtNGY4Mi04ZDdjLWI3ZjRjOTY2NjMxNhDYn4qBp9n7AhoGCNKMvZ0GIgw5MS45MC40Mi4xNTQogcsCMAIaKAgBEiRjZjYxN2UwNC1lYTVmLTQzNTgtYmQ3Ni04NWE3ZDJkZjNjZjQiGAgCEhRjZHMyNTUuc2sxLmh3Y2RuLm5ldA==.HZvUyReTnpycQa4LLMYoO5nk8mU067IjoPxyd9O8kqk=
Connection: keep-alive
Content-Length: 0
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5c6a87f6d6b5c54dcb1b630ae6001c73
e0315c9936d6f2f58ff7d078e74a8ec7802265a8
d88ef07b9fcfb42d27a490cb57df4adaf3261efc7d0b38246db387da3ca32a8d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D88EF07B9FCFB42D27A490CB57DF4ADAF3261EFC7D0B38246DB387DA3CA32A8D"
Last-Modified: Fri, 30 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8198
Expires: Fri, 30 Dec 2022 22:29:44 GMT
Date: Fri, 30 Dec 2022 20:13:06 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 0e93d32de9bcebd3483b40a8fed30718
7e1fe5db1f08b75a079780717e4f18ad76767212
4f0aaacfefd27c89225a1a0d2fbe778ec4f3369b5e4e1599255bf12866196cd4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4F0AAACFEFD27C89225A1A0D2FBE778EC4F3369B5E4E1599255BF12866196CD4"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5619
Expires: Fri, 30 Dec 2022 21:46:45 GMT
Date: Fri, 30 Dec 2022 20:13:06 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6d6d99cd1201f65eeb7d437b62bad1f3
6d5e41d7a2786ccaad7c7276ecdd9411f8cbd6ba
db2b42007fc4ad126c8af8d7cce27af88947231d09ded56da33cfee3d2594e23
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB2B42007FC4AD126C8AF8D7CCE27AF88947231D09DED56DA33CFEE3D2594E23"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3096
Expires: Fri, 30 Dec 2022 21:04:42 GMT
Date: Fri, 30 Dec 2022 20:13:06 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 30 Dec 2022 19:35:33 GMT
content-type: application/json
age: 2253
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: yl54B2R6pW9RQJEYFLDDMbpABYzoSzLsK42paw3ipjkHK5hNcL2F8hq+Bh5vFvqpVVu1Gy92v5o=
x-amz-request-id: EY5H0P3K3A7W7SDS
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 30 Dec 2022 19:59:19 GMT
age: 827
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 20:13:06 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Alert, ETag, Content-Type, Last-Modified, Cache-Control, Expires, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 30 Dec 2022 20:08:08 GMT
age: 299
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 553f97ab8a2c2f1abe4ee932cf6dab42
9e9433075523efb0cf7d13b6811d237c4b48f099
8a7c26f298fb34ec9d5cbd977a2677118b9360ad3134bb56171c13d4d13da540
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2379
Cache-Control: max-age=135199
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 20:13:07 GMT
Etag: "63aeaa27-1d7"
Expires: Sun, 01 Jan 2023 09:46:26 GMT
Last-Modified: Fri, 30 Dec 2022 09:06:47 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.38.146.2101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.38.146.2:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: uphG7L7NSIQhda3jVhj7LA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fy6ixMbEmw+PZSB1lAZZejAgS60=
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2156f5045eb474b5c02d0c6f64f02c4e
5cc884658ca6b9b357478137cb431f694e773bd8
3e7eb661f6a47c44f20915b8384799874b0f0a69fcedd1d90caaed93f8fce4bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3E7EB661F6A47C44F20915B8384799874B0F0A69FCEDD1D90CAAED93F8FCE4BB"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3093
Expires: Fri, 30 Dec 2022 21:04:41 GMT
Date: Fri, 30 Dec 2022 20:13:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2156f5045eb474b5c02d0c6f64f02c4e
5cc884658ca6b9b357478137cb431f694e773bd8
3e7eb661f6a47c44f20915b8384799874b0f0a69fcedd1d90caaed93f8fce4bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3E7EB661F6A47C44F20915B8384799874B0F0A69FCEDD1D90CAAED93F8FCE4BB"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3093
Expires: Fri, 30 Dec 2022 21:04:41 GMT
Date: Fri, 30 Dec 2022 20:13:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2156f5045eb474b5c02d0c6f64f02c4e
5cc884658ca6b9b357478137cb431f694e773bd8
3e7eb661f6a47c44f20915b8384799874b0f0a69fcedd1d90caaed93f8fce4bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3E7EB661F6A47C44F20915B8384799874B0F0A69FCEDD1D90CAAED93F8FCE4BB"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3093
Expires: Fri, 30 Dec 2022 21:04:41 GMT
Date: Fri, 30 Dec 2022 20:13:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2156f5045eb474b5c02d0c6f64f02c4e
5cc884658ca6b9b357478137cb431f694e773bd8
3e7eb661f6a47c44f20915b8384799874b0f0a69fcedd1d90caaed93f8fce4bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3E7EB661F6A47C44F20915B8384799874B0F0A69FCEDD1D90CAAED93F8FCE4BB"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3093
Expires: Fri, 30 Dec 2022 21:04:41 GMT
Date: Fri, 30 Dec 2022 20:13:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2156f5045eb474b5c02d0c6f64f02c4e
5cc884658ca6b9b357478137cb431f694e773bd8
3e7eb661f6a47c44f20915b8384799874b0f0a69fcedd1d90caaed93f8fce4bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3E7EB661F6A47C44F20915B8384799874B0F0A69FCEDD1D90CAAED93F8FCE4BB"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3093
Expires: Fri, 30 Dec 2022 21:04:41 GMT
Date: Fri, 30 Dec 2022 20:13:08 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b72d4d2-0340-4f3f-9cb2-a0ff1e1ece28.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b72d4d2-0340-4f3f-9cb2-a0ff1e1ece28.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d0f02288213f270c5a4a8944107c81e9
d17f3594e4aa86aa1b28849bbc3c7f1d45d938ea
770e6cc997aafc1c0485af4fa413fa255868a5d333e8e60e7de90b4c74bf29bf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b72d4d2-0340-4f3f-9cb2-a0ff1e1ece28.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8494
x-amzn-requestid: 8dc4c6ae-ecb5-427d-be0a-535585f19b03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7ZUXHR1IAMFn4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae08e8-326ee70106b8fa9d2c4d540b;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:38:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OwT983wT16yakg-cntLy7dKgOXa3ypDtRAGPKH6GICxaTkufUqP8UQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 21:41:08 GMT
etag: "d17f3594e4aa86aa1b28849bbc3c7f1d45d938ea"
content-type: image/jpeg
age: 81120
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdab5cb9e-53fc-4a70-831a-6d6bd503103e.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdab5cb9e-53fc-4a70-831a-6d6bd503103e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a9d1857128ab6a237e6854c7a3532b51
702ab1eb38be637f012e1454201b9a7561c29081
48fbf5b5aa1cf66fcdaafe68c72ac073d2ba9b6dedf76ebfaafdc88836fa0fde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdab5cb9e-53fc-4a70-831a-6d6bd503103e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4833
x-amzn-requestid: 46ef49d7-dadb-4665-84bf-1c331ed8fce6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7ZU2E3IIAMFxAw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae08eb-28af0ab9094d7c21560a60db;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:38:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: aiGabD98wdch1q-6CRt4VLbduBsZEJzkku8-bTyF102z9hCpgFhIXg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 22:02:31 GMT
etag: "702ab1eb38be637f012e1454201b9a7561c29081"
content-type: image/jpeg
age: 79837
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4aacfdf9-29e5-4cca-88eb-1d7fb007e520.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4aacfdf9-29e5-4cca-88eb-1d7fb007e520.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 51406d6bd4a7322a475fc2a98267154e
9fa03002aa1974d4a9557cedad8bd5d7fefa52ad
a1858d9fd203972f0dc3fe97f36e07796b84f6e2851c9990d406f452793e3454
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4aacfdf9-29e5-4cca-88eb-1d7fb007e520.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11315
x-amzn-requestid: 77dd9348-e3a9-448e-8ae9-499d5d672a41
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d4GZpGTRIAMFTUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63acb770-7dec07d1447e6f10125b8b6f;Sampled=0
x-amzn-remapped-date: Wed, 28 Dec 2022 21:38:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lfojNVZMHGD1YfOqiMgEwTOi_6uPqkVJ_gbQ0PKo5CLFycpcY89T1g==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 21:42:23 GMT
age: 81045
etag: "9fa03002aa1974d4a9557cedad8bd5d7fefa52ad"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5684f9da-4da1-47fc-a5ba-8f30a894d588.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5684f9da-4da1-47fc-a5ba-8f30a894d588.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9ebe131c7787411178a93d045ba57b5a
40b601b6ad3a3d7738b5b55777981598f4dc0519
68ea133b346bd1f76cd7b4dcf5023d8f987935dff380bacec73dec957effb97e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5684f9da-4da1-47fc-a5ba-8f30a894d588.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11516
x-amzn-requestid: e4e9ceeb-b2e5-454f-9550-d412fc0be82a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7aRLGuqoAMF3JA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae0a6d-6ed43b46144121dc2dd7db2f;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:45:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0cLaSIiaQE4WUEG4mML3Nfad-lh-MWyzAQ1bb7XInUIx7Nm8D6rU_w==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 22:16:00 GMT
age: 79028
etag: "40b601b6ad3a3d7738b5b55777981598f4dc0519"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e77cad2-6b0d-46d1-a2e4-ce29f7cc173e.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e77cad2-6b0d-46d1-a2e4-ce29f7cc173e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a4adb7268aa0a520dcee9f1d936d16dd
9364105419c6662123999ed11912de21ad32f6ba
6d593122db8b8514db4d3d0d0e6d037f57d39e5aab9a9f493fed359eb4b73b2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e77cad2-6b0d-46d1-a2e4-ce29f7cc173e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8505
x-amzn-requestid: de8ce29e-7947-4c4f-95f5-14efae45cfda
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d4p9MGW9IAMFqdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63acf054-5cf23dcf7bdbd784373222a9;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 01:41:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: D6x3bwfydhVtrU5ZXbBbxfTYvW4S0EPViQTdwuverqNNdx7qHzJiqg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Fri, 30 Dec 2022 03:43:34 GMT
age: 59374
etag: "9364105419c6662123999ed11912de21ad32f6ba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb9607c6-9a7f-483e-afc4-9004ad7691ab.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb9607c6-9a7f-483e-afc4-9004ad7691ab.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e270e4d21abb133d068a56a552b1708
2d5c698f982dcdb9a86de4e45e30d7caf9b42336
723573f9908c5a2aa1d3dfe1146a764d7052c866ff2076a9096daccf5697328b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb9607c6-9a7f-483e-afc4-9004ad7691ab.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11775
x-amzn-requestid: 0794ca14-8458-4abb-922b-129a82eb91ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7ZlpFqnIAMFYkg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae0957-21354f3f55563e7346ebc268;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:40:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T9FxFI_0Ht2NR9GWPJKZrGAmEqAS7ASIaJMQYeAxnAne0Ffr3OB2LA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 22:24:23 GMT
age: 78525
etag: "2d5c698f982dcdb9a86de4e45e30d7caf9b42336"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/gtm.js
151.139.128.10200 OK 31 kB URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/gtm.js
IP 151.139.128.10:0
File type ASCII text, with very long lines (1555)
Hash ca463889b9d537472f64f3366ce22eae
0586ebe6f8dfb3a1d03ab8448f2e8d44a7faa2f5
19f6456c07fec7e3f09d52da938b490b0d2c3c9a126bceafabd1a0356effa943
Analyzer Verdict Alert fortinet Phishing
GET /trial-y412xt64/Last_Correos/assets/recibir_paquete_files/gtm.js HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:12 GMT
etag: "1653332346"
cache-control: max-age=30
content-encoding: gzip
content-length: 30565
content-type: application/javascript; charset=utf-8
last-modified: Mon, 23 May 2022 18:59:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
x-proxy-cache: HIT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
x-sp-metadata: HS256.COiovZ0GEocBCiQyZWQxYzZlZS01ODRkLTQ2ZWUtODZjMy01OTNmZGQyNGRjYTQQ2J+KgafZ+wIaBgjXjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGioSJGRiNGUyOTU4LTkzMTktNGQxNS04ZDNiLTBlZjY1Nzg3N2VmNBjl7gEiGggCEhRjZHMyMTUuc2sxLmh3Y2RuLm5ldBgI.rbL71e4kpYbPJeXf3pSLWl9uJsyWHG1cj9VcMYoJORY=
x-hw: 1672431191.cds209.sk1.hc,1672431191.cds215.sk1.sc,1672431192.cds215.sk1.pr
link: <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/gtm.js>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/deco_bars.svg
151.139.128.10200 OK 390 B URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/deco_bars.svg
IP 151.139.128.10:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82304b9a0023912a7a5ecf6bc3423a4d
74cdfe76217be9aef762ccc76c807b54bc627a35
0fbc2616c8ad67b276f458ff1896e233a0f803314318197dc00a13d53d026097
Analyzer Verdict Alert fortinet Phishing
GET /trial-y412xt64/Last_Correos/assets/recibir_paquete_files/deco_bars.svg HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:12 GMT
etag: "1653332346"
cache-control: max-age=30
content-encoding: gzip
content-length: 390
content-type: image/svg+xml
last-modified: Mon, 23 May 2022 18:59:06 GMT
accept-ranges: bytes
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
x-sp-metadata: HS256.COiovZ0GEocBCiQ5ZThhOWQyZS05MmFmLTRkNWYtYTllZC1iODVhYWFkMWQ3MjQQ2J+KgafZ+wIaBgjYjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGikSJDZjMzk2MmZlLThlYWYtNGI1OS05ZWE0LTJlYzllZDI2NzFiORiGAyIaCAISFGNkczI0NC5zazEuaHdjZG4ubmV0GAg=.sVrDWCfuixbSJ/YXwiaBpd6vG69wZm7Bl13/67ZnFKg=
x-hw: 1672431192.cds209.sk1.hc,1672431192.cds244.sk1.sc,1672431192.cds244.sk1.pr
link: <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/deco_bars.svg>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/correos-ui-kit.css
151.139.128.10200 OK 19 kB URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/correos-ui-kit.css
IP 151.139.128.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash d7f060d473c184f8b561089afef22c42
a8f585ea300292f5084de28f54f5db190875883e
2b72949ea596dc03fb8fa6a6908571a30004c30d244c9156945cfdc151894fc1
GET /trial-y412xt64/Last_Correos/assets/recibir_paquete_files/correos-ui-kit.css HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:12 GMT
etag: "1653332346"
cache-control: max-age=30
content-encoding: gzip
content-length: 18628
content-type: text/css
last-modified: Mon, 23 May 2022 18:59:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
x-sp-metadata: HS256.COiovZ0GEocBCiQ5NDQ4N2U2MC0wODVlLTRjMGYtODVjYS1lZWY0MThhMTI2MWUQ2J+KgafZ+wIaBgjYjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGioSJDk1NWQ1YWY3LTllYmUtNDZkZS1hZGNhLTZiOWNhODNmM2MzMxjEkQEiGggCEhRjZHMyMjcuc2sxLmh3Y2RuLm5ldBgI.qF8E5EBX6GUoy7KYhMsdwpYiKlnFg7ycebzwFRmN2as=
x-hw: 1672431192.cds209.sk1.hc,1672431192.cds227.sk1.sc,1672431192.cds227.sk1.pr
link: <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/correos-ui-kit.css>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/apple_store.jpg
151.139.128.10200 OK 11 kB URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/apple_store.jpg
IP 151.139.128.10:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 250x82, components 3\012- data
Hash 498c4a8cc089ec2fc0b87f460924b9b4
324b0ef1cf07829216653bf3fca04add4ebf553f
509066150aa1da2b163e681cff62f67f0becd0bb65cded95be964371835798f6
GET /trial-y412xt64/Last_Correos/assets/recibir_paquete_files/apple_store.jpg HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:12 GMT
etag: "1653332346"
cache-control: max-age=30
content-length: 11255
content-type: image/jpeg
last-modified: Mon, 23 May 2022 18:59:06 GMT
accept-ranges: bytes
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
x-sp-metadata: HS256.COiovZ0GEocBCiQ2MjI0Y2E1OC1hOTM1LTQyMmEtODkwNy05ZTcxNmQ4OWU2YjcQ2J+KgafZ+wIaBgjYjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGikSJDliN2ZmNjU2LTczNjUtNDc3Mi04MzE4LWJlN2Q0YWFjZGJkZBj3VyIaCAISFGNkczIwOS5zazEuaHdjZG4ubmV0GAg=.Rvuv6+j8CB6m4/ss5jaFMsADx/uie0sApwKmoHEORjs=
x-hw: 1672431192.cds209.sk1.hc,1672431192.cds209.sk1.sc,1672431192.cds209.sk1.pr
link: <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/apple_store.jpg>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/container.js
151.139.128.10200 OK 317 B URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/container.js
IP 151.139.128.10:0
File type ASCII text, with very long lines (514)
Hash abbcd47293a1d3441d6c87604d5ab3c2
302f022c93d5114efcc2a8cf57d00ee743f3e8b4
c2bc7d8c507b509332bd93fbc743dbc7d6d5fec2e530461a94ad70b664fd19b0
Analyzer Verdict Alert fortinet Phishing
GET /trial-y412xt64/Last_Correos/assets/recibir_paquete_files/container.js HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:12 GMT
etag: "1653332346"
cache-control: max-age=30
content-encoding: gzip
content-length: 317
content-type: application/javascript; charset=utf-8
last-modified: Mon, 23 May 2022 18:59:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
x-proxy-cache: HIT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
x-sp-metadata: HS256.COiovZ0GEocBCiQ2MmY0MWZmOC03ZWI5LTQzOTUtODk3NS1lMTk4NjdkZTRmZmEQ2J+KgafZ+wIaBgjYjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGikSJGMxZjBiMDljLTMxZDktNDUwNS05NTE0LTg4NDcwN2YzZTdjZRi9AiIaCAISFGNkczI0OS5zazEuaHdjZG4ubmV0GAg=.qsn7YEn5r6JbiBeEJBJHDKCvqKyCPfjF+OsCZwPu1Vs=
x-hw: 1672431192.cds209.sk1.hc,1672431192.cds249.sk1.sc,1672431192.cds249.sk1.pr
link: <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/container.js>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/google_play.jpg
151.139.128.10200 OK 12 kB URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/google_play.jpg
IP 151.139.128.10:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 270x80, components 3\012- data
Hash 71405560fcf941f01e531e8564ad9e3f
a970b8084d6e7cdd714dbd1add272ac630cd9fe9
bda17ffead5e3809b288330e7aa2d2b689c45cfadcef8249416d07afe34477a7
GET /trial-y412xt64/Last_Correos/assets/recibir_paquete_files/google_play.jpg HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:12 GMT
etag: "1653332346"
cache-control: max-age=30
content-length: 11827
content-type: image/jpeg
last-modified: Mon, 23 May 2022 18:59:06 GMT
accept-ranges: bytes
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
x-sp-metadata: HS256.COiovZ0GEocBCiQxMzRlYWQxMC0wYWU1LTQzMjctYjM4Zi0yYjA0ZGZiNDFiYmEQ2J+KgafZ+wIaBgjYjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGikSJDBkNWU4ODY2LWRjMzYtNGM3Ni05NDZlLWM5ZjE3MDI4N2M4YxizXCIaCAISFGNkczA3MS5zazEuaHdjZG4ubmV0GAg=.ddH/NogJ6NuiapoKv6blkQTz2Cnvxlv3RddpcU/utNs=
x-hw: 1672431192.cds209.sk1.hc,1672431192.cds071.sk1.sc,1672431192.cds071.sk1.pr
link: <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/google_play.jpg>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1.js
151.139.128.10200 OK 74 kB URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1.js
IP 151.139.128.10:0
Hash 5d3e19d799af1614d307455c75452443
95d21bc6d5395ea51c46ed0ec47d505c8fbaed7e
f3dffc814892061dcf6e19461105bb910de706b9859425f37083dc159e5f2aa9
Analyzer Verdict Alert fortinet Phishing
GET /trial-y412xt64/Last_Correos/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1.js HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:12 GMT
etag: "1653332346"
cache-control: max-age=30
content-encoding: gzip
content-length: 73776
content-type: application/javascript; charset=utf-8
last-modified: Mon, 23 May 2022 18:59:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
x-proxy-cache: HIT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
x-sp-metadata: HS256.COiovZ0GEocBCiRlOWE1YmM4OS1jOTE4LTRiODMtOWNhZi1lMjQ2NzU1NjIxNDkQ2J+KgafZ+wIaBgjYjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGioSJGVkZmQ4YmFiLWFkZmYtNDZlMS05NmY3LWJhMDI4ZDIzYjJkMhiwwAQiGggCEhRjZHMyNDMuc2sxLmh3Y2RuLm5ldBgI.mScMA2GRgtJAMmt7KbZt5+Bo2wWXDeCTEpkwRkJuqPs=
x-hw: 1672431192.cds209.sk1.hc,1672431192.cds243.sk1.sc,1672431192.cds243.sk1.pr
link: <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1.js>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/clientlib-base.js
151.139.128.10200 OK 21 kB URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/clientlib-base.js
IP 151.139.128.10:0
Hash 1e93f91bea8b133d0968263e56efeee4
29970851506ef4e74cb8654e87624d3b33e3cf9d
a52cc4c8ed883d2201443be42b888c3e2d2a86277e5514a013b352fc38c34c4e
Analyzer Verdict Alert fortinet Phishing
GET /trial-y412xt64/Last_Correos/assets/recibir_paquete_files/clientlib-base.js HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:12 GMT
etag: "1653332346"
cache-control: max-age=30
content-encoding: gzip
content-length: 20912
content-type: application/javascript; charset=utf-8
last-modified: Mon, 23 May 2022 18:59:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
x-proxy-cache: HIT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
x-sp-metadata: HS256.COiovZ0GEocBCiQ0MGM0MzhkMC00MjY1LTRlNjctODM5ZC0wYWQxZDc2Y2JlMzEQ2J+KgafZ+wIaBgjYjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGioSJDQ2OThjOTZiLTdiZDUtNDM5NC04OGJlLTMwY2JkNzEwODU2MRiwowEiGggCEhRjZHMyMjcuc2sxLmh3Y2RuLm5ldBgI.aRhDSWlqsxx6dRu2asZUuTYwYDFvNyLnF7gnVmAbY1Y=
x-hw: 1672431192.cds209.sk1.hc,1672431192.cds227.sk1.sc,1672431192.cds227.sk1.pr
link: <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/clientlib-base.js>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1_002.js
151.139.128.10200 OK 33 kB URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1_002.js
IP 151.139.128.10:0
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash 76db83dd730f355d8a2b2445ca815c06
90e3cf9de8c028d5bfa8ad0250375aaed34abdf3
b7accca78a6dd5121a5c735bf66b608eef1c6f691dd00a14158e232fc77acb43
Analyzer Verdict Alert fortinet Phishing
GET /trial-y412xt64/Last_Correos/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1_002.js HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:12 GMT
etag: "1653332346"
cache-control: max-age=30
content-encoding: gzip
content-length: 33409
content-type: application/javascript; charset=utf-8
last-modified: Mon, 23 May 2022 18:59:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
x-sp-metadata: HS256.COiovZ0GEocBCiRiNDUzYWI0ZC00ZjgwLTQxNzQtOGQ3My1jZmY3NDI5MGRlZDEQ2J+KgafZ+wIaBgjYjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGioSJGFjZmRkZmE3LTkwNzAtNDUwZC05Yzk4LWIwZmJlNmVmMDI2YhiBhQIiGggCEhRjZHMyMzUuc2sxLmh3Y2RuLm5ldBgI.yLJTnczewXcAXNjkDoDRINW9M+FZe4NQTYTOZHHjf/M=
x-hw: 1672431192.cds209.sk1.hc,1672431192.cds235.sk1.sc,1672431192.cds235.sk1.pr
link: <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1_002.js>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/deco_triangles.svg
151.139.128.10200 OK 451 B URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/deco_triangles.svg
IP 151.139.128.10:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 9f484954ec83afedf792b8a54262b528
e6bbe505e712c396e0dca15915f68fa897f5ed77
e9fd41da5588466d5e7fda079a6555b926a422449e22e61e13c8356411fce3a8
Analyzer Verdict Alert fortinet Phishing
GET /trial-y412xt64/Last_Correos/assets/recibir_paquete_files/deco_triangles.svg HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:12 GMT
etag: "1653332346"
cache-control: max-age=30
content-encoding: gzip
content-length: 451
content-type: image/svg+xml
last-modified: Mon, 23 May 2022 18:59:06 GMT
accept-ranges: bytes
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
x-sp-metadata: HS256.COiovZ0GEocBCiQyNzA0MDJhMi0wNWQzLTQxMTMtOTQ3Ni1mN2U2MTRiYTZlNmMQ2J+KgafZ+wIaBgjYjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGikSJDdmYzQ5ZWVjLWM4N2QtNGMzZi1iMmM1LTRlODc5MWE1OGViYxjDAyIaCAISFGNkczI1NC5zazEuaHdjZG4ubmV0GAg=./DJTEObUEZG73fsLGN+YQPottKJZSTsd6J7wDro8wQQ=
x-hw: 1672431192.cds209.sk1.hc,1672431192.cds254.sk1.sc,1672431192.cds254.sk1.pr
link: <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/deco_triangles.svg>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-ui-1.js
151.139.128.10200 OK 53 kB URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-ui-1.js
IP 151.139.128.10:0
File type ASCII text, with very long lines (18557)
Hash 9674da53b48a950f8314ade4948962bc
89ad62ef463c3579bcce94a5b6fbf387330b2df0
029e91c4bf31ce2d8e7d88670f931d4eef989bb4ff3260ade30481584c18e433
Analyzer Verdict Alert fortinet Phishing
GET /trial-y412xt64/Last_Correos/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-ui-1.js HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:12 GMT
etag: "1653332346"
cache-control: max-age=30
content-encoding: gzip
content-length: 52924
content-type: application/javascript; charset=utf-8
last-modified: Mon, 23 May 2022 18:59:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
x-sp-metadata: HS256.COiovZ0GEocBCiQzYmFiODhkZC03MGU4LTRkYzUtYjA4ZS1jY2JlNjRmZGI5YTYQ2J+KgafZ+wIaBgjYjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGioSJDZkNjEwNTQ0LTNmNTctNGUzNS1iOThmLWYxYjEyNmU0MmIzZhi8nQMiGggCEhRjZHMwMDMuc2sxLmh3Y2RuLm5ldBgI.HS7qgk88c4TcgogY23OOo54i9SyiGRChDms5ZzZzBw4=
x-hw: 1672431192.cds209.sk1.hc,1672431192.cds003.sk1.sc,1672431192.cds003.sk1.pr
link: <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-ui-1.js>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/clientlib-provider-correosid.js
151.139.128.10200 OK 359 B URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/clientlib-provider-correosid.js
IP 151.139.128.10:0
File type ASCII text, with very long lines (544)
Hash 97a7641b5f45d665acd091f0d8a09ae7
7a00bd2d400ca07f0c6ba9feaf0244ab111a201d
8ebb6a5164236229738be9ccac10d47756fd9d9900cd6e162dc67db982e3fa8d
Analyzer Verdict Alert fortinet Phishing
GET /trial-y412xt64/Last_Correos/assets/recibir_paquete_files/clientlib-provider-correosid.js HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:12 GMT
etag: "1653332346"
cache-control: max-age=30
content-encoding: gzip
content-length: 359
content-type: application/javascript; charset=utf-8
last-modified: Mon, 23 May 2022 18:59:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
x-proxy-cache: HIT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
x-sp-metadata: HS256.COiovZ0GEocBCiQzMWM2NWQxYy01Y2FlLTQ1YTEtYjYxZC04ZmVhMzNmYTA3ZTAQ2J+KgafZ+wIaBgjYjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGikSJGY5ZTVhYjQxLTI1OTgtNDZmYS04N2RmLWE0NWE3NTVlOTQ4ZBjnAiIaCAISFGNkczIyOS5zazEuaHdjZG4ubmV0GAg=.8qPxxQ/16j5FU3Zqo485Cj62rVLPyCStFCIIY1jwD28=
x-hw: 1672431192.cds209.sk1.hc,1672431192.cds229.sk1.sc,1672431192.cds229.sk1.pr
link: <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/clientlib-provider-correosid.js>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/pic_image/package.jpg
151.139.128.10200 OK 80 kB URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/pic_image/package.jpg
IP 151.139.128.10:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x960, components 3\012- data
Hash c8f62200abc0901f82eb57cfd63f11da
b57afb6c671cc84aff03656945c36af57ec0c68d
0e343f72b8fe95c764a97e83ec0b5f47910e7615045487174fb48e1ce6075372
GET /trial-y412xt64/Last_Correos/assets/pic_image/package.jpg HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:13 GMT
etag: "1653332346"
cache-control: max-age=30
content-length: 79701
content-type: image/jpeg
last-modified: Mon, 23 May 2022 18:59:06 GMT
accept-ranges: bytes
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
x-sp-metadata: HS256.COmovZ0GEocBCiRlNzljYzkwZi0xYTg3LTRmOWUtYmI4YS00NjRjOGY3MTNmMzEQ2J+KgafZ+wIaBgjYjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGioSJDYwMDZlMjU4LWY5NjItNDM1My1iYjA0LTM1OTI4MTFjZDdjNRjV7gQiGggCEhRjZHMyMzcuc2sxLmh3Y2RuLm5ldBgI.++DyBXmAyz/7gW5KAWpHIoEkimtilr78+zQPrIuJqfE=
x-hw: 1672431192.cds209.sk1.hc,1672431192.cds237.sk1.sc,1672431193.cds237.sk1.pr
link: <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/pic_image/package.jpg>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff2
151.139.128.10301 Moved Permanently 246 B URL HTTP/2 demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff2
IP 151.139.128.10:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 34e7e14b00c9dd2bccc95c97fc80b049
3489a6241b5a46a124b0eb5908dfeac166919eee
0ffeeccf9b904bc7cfe3a9d9554dc8e05907adec665e93a5921d79a9415ab5b0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff2 HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Fri, 30 Dec 2022 20:13:13 GMT
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-length: 246
content-type: text/html; charset=iso-8859-1
set-cookie: spcsrf=87a86faaf02f0130d21df811c7cd649b; path=/; SameSite=Strict; HttpOnly; expires=Fri, 30-Dec-22 22:13:13 GMT
pragma: no-cache
expires: Sun, 20 Apr 1975 05:05:00 GMT
location: https://demo2.cloudwp.dev/inactive.htm
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
link: <https://demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff2>; rel="canonical"
x-hw: 1672431192.cds209.sk1.hc,1672431192.cds250.sk1.sc,1672431193.cdn2-wafbe03-arn1.stackpath.systems.-.wx,1672431193.cds250.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COmovZ0GEocBCiQwYzgzZTU1YS02Yzg2LTQ3Y2ItYWRlMy1iZWMzOTc5OTJlMmQQ2J+KgafZ+wIaBgjYjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGikSJDE1NjA1N2FiLTIxNDUtNGYxZi1iYjZjLWM5OGQ3YjhjYzA4NRj2ASIaCAISFGNkczI1MC5zazEuaHdjZG4ubmV0GAg=.WZQX2VZ/u9nVZB1Y24YTkXH/tLo39jSvAgKBBpy5a0s=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff2
151.139.128.10301 Moved Permanently 246 B URL HTTP/2 demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff2
IP 151.139.128.10:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 34e7e14b00c9dd2bccc95c97fc80b049
3489a6241b5a46a124b0eb5908dfeac166919eee
0ffeeccf9b904bc7cfe3a9d9554dc8e05907adec665e93a5921d79a9415ab5b0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff2 HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Fri, 30 Dec 2022 20:13:13 GMT
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-length: 246
content-type: text/html; charset=iso-8859-1
set-cookie: spcsrf=c929abac32fb96b0643ab32a25e4d301; path=/; SameSite=Strict; HttpOnly; expires=Fri, 30-Dec-22 22:13:13 GMT
pragma: no-cache
expires: Sun, 20 Apr 1975 05:05:00 GMT
location: https://demo2.cloudwp.dev/inactive.htm
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
link: <https://demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff2>; rel="canonical"
x-hw: 1672431192.cds209.sk1.hc,1672431192.cds212.sk1.sc,1672431193.cdn2-wafbe02-arn1.stackpath.systems.-.wx,1672431193.cds212.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COmovZ0GEocBCiQ1ZTY5NzAxYS0zZGZiLTQyOTAtODAwYi0wMmViOTJlNTE1ZTYQ2J+KgafZ+wIaBgjYjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGikSJDM2Y2I3YmM4LTAwOGEtNDcxYy1iZDgwLTg3NTc3YTAxMDA0ORj2ASIaCAISFGNkczIxMi5zazEuaHdjZG4ubmV0GAg=.q0ePU85z5nm3eHkr9VR0CTJw28sa8LbaKbR5LJHZCXA=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff2
151.139.128.10301 Moved Permanently 246 B URL HTTP/2 demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff2
IP 151.139.128.10:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 34e7e14b00c9dd2bccc95c97fc80b049
3489a6241b5a46a124b0eb5908dfeac166919eee
0ffeeccf9b904bc7cfe3a9d9554dc8e05907adec665e93a5921d79a9415ab5b0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff2 HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Fri, 30 Dec 2022 20:13:13 GMT
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-length: 246
content-type: text/html; charset=iso-8859-1
set-cookie: spcsrf=6f581221e0d4794f53669d0496cd3c5a; path=/; SameSite=Strict; HttpOnly; expires=Fri, 30-Dec-22 22:13:13 GMT
pragma: no-cache
expires: Sun, 20 Apr 1975 05:05:00 GMT
location: https://demo2.cloudwp.dev/inactive.htm
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
link: <https://demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff2>; rel="canonical"
x-hw: 1672431192.cds209.sk1.hc,1672431192.cds253.sk1.sc,1672431193.cdn2-wafbe03-arn1.stackpath.systems.-.wx,1672431193.cds253.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COmovZ0GEocBCiQ1NWMzMDNlYS03YzFiLTRmMDEtYTBiYy0wZDUyNThiNjkzMGUQ2J+KgafZ+wIaBgjYjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGikSJDMzYTA3N2E5LWM2NTMtNGVkMy05ZTJiLTY2NWNiOTFiZTdhNxj2ASIaCAISFGNkczI1My5zazEuaHdjZG4ubmV0GAg=.n/Kw2UIUaoMoCi032qadRlhwVu0jwq8KVbPsA2dOfp4=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff2
151.139.128.10301 Moved Permanently 246 B URL HTTP/2 demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff2
IP 151.139.128.10:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 34e7e14b00c9dd2bccc95c97fc80b049
3489a6241b5a46a124b0eb5908dfeac166919eee
0ffeeccf9b904bc7cfe3a9d9554dc8e05907adec665e93a5921d79a9415ab5b0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff2 HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Fri, 30 Dec 2022 20:13:13 GMT
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-length: 246
content-type: text/html; charset=iso-8859-1
set-cookie: spcsrf=8ab0a2190e93cabf9899ed19bb0df6da; path=/; SameSite=Strict; HttpOnly; expires=Fri, 30-Dec-22 22:13:13 GMT
pragma: no-cache
expires: Sun, 20 Apr 1975 05:05:00 GMT
location: https://demo2.cloudwp.dev/inactive.htm
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
link: <https://demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff2>; rel="canonical"
x-hw: 1672431192.cds209.sk1.hc,1672431192.cds246.sk1.sc,1672431193.cdn2-redis02-arn1.stackpath.systems.-.wx,1672431193.cds246.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COmovZ0GEocBCiQ2NWJmN2YzOS1kMjczLTRlZTItODZjZC01MWU3YjBmYzUzZTAQ2J+KgafZ+wIaBgjYjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGikSJGE0NGFhMjE4LThkYjQtNGEyYy1iOWM0LTUyYmMzM2VkMTE2ORj2ASIaCAISFGNkczI0Ni5zazEuaHdjZG4ubmV0GAg=.5uT3t6dcaXQgPqNnspnz1JytvJnSHiNRKxpAXPJdY/M=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/CORREOS-favicon.ico
151.139.128.10200 OK 110 kB URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/CORREOS-favicon.ico
IP 151.139.128.10:0
File type MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel\012- data
Size 110 kB (110021 bytes)
Hash 349246ee336d8b2986e584a4fa436128
598b9f95458a2426bf1688d616c4f6f3fea3580e
68554c17c00a589c2b29e1f74ac5efbcd8d30252792626f5fff81955e4d89ae7
Analyzer Verdict Alert fortinet Phishing
GET /trial-y412xt64/Last_Correos/assets/recibir_paquete_files/CORREOS-favicon.ico HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:14 GMT
etag: "1653332346"
cache-control: max-age=30
content-length: 110021
content-type: image/x-icon
last-modified: Mon, 23 May 2022 18:59:06 GMT
accept-ranges: bytes
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
x-sp-metadata: HS256.COqovZ0GEocBCiQzZWFiMGE2YS0zNjUwLTRhOTgtYTY1NS00YzA1NGEzNzljZTAQ2J+KgafZ+wIaBgjZjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGiwIARIkYjkzMzY5NGMtNTBiYy00M2QwLTkyNDQtNDRmMTBkYjYzNTMyGMXbBiIaCAISFGNkczIzNS5zazEuaHdjZG4ubmV0GAg=.EqRGTnMnOm5Lkiy9363W9j/4mcelLREWxA6ofnLr930=
x-hw: 1672431193.cds209.sk1.hc,1672431193.cds235.sk1.sc,1672431194.cds235.sk1.pr
link: <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/CORREOS-favicon.ico>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/CORREOS-favicon.ico
151.139.128.10200 OK 110 kB URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/CORREOS-favicon.ico
IP 151.139.128.10:0
File type MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel\012- data
Size 110 kB (110021 bytes)
Hash 349246ee336d8b2986e584a4fa436128
598b9f95458a2426bf1688d616c4f6f3fea3580e
68554c17c00a589c2b29e1f74ac5efbcd8d30252792626f5fff81955e4d89ae7
Analyzer Verdict Alert fortinet Phishing
GET /trial-y412xt64/Last_Correos/assets/recibir_paquete_files/CORREOS-favicon.ico HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:14 GMT
etag: "1653332346"
cache-control: max-age=30
content-length: 110021
content-type: image/x-icon
last-modified: Mon, 23 May 2022 18:59:06 GMT
accept-ranges: bytes
x-proxy-cache: HIT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
x-sp-metadata: HS256.COqovZ0GEocBCiQyNTcwYzlmNy0wYjAxLTQyODQtYmFiMC1iNmI1OTI1YzQyOWYQ2J+KgafZ+wIaBgjZjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGioSJDZiNGYwMmRhLTYyZDItNGNiZS1iNmRmLWJiMTczOGNhMDRjMhjF2wYiGggCEhRjZHMyMzUuc2sxLmh3Y2RuLm5ldBgI.5Z5bTuyQl9HfhVimJZL679Hq75VBomZa/83cHzNCboQ=
x-hw: 1672431193.cds209.sk1.hc,1672431193.cds235.sk1.sc,1672431194.cds235.sk1.pr
link: <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/CORREOS-favicon.ico>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff
151.139.128.10301 Moved Permanently 246 B URL HTTP/2 demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff
IP 151.139.128.10:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 34e7e14b00c9dd2bccc95c97fc80b049
3489a6241b5a46a124b0eb5908dfeac166919eee
0ffeeccf9b904bc7cfe3a9d9554dc8e05907adec665e93a5921d79a9415ab5b0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=c6af6f8b43d49eea281403f235214e90; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ii74RY3wsiH5We5njqT+aw==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Fri, 30 Dec 2022 20:13:15 GMT
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-length: 246
content-type: text/html; charset=iso-8859-1
pragma: no-cache
expires: Sun, 20 Apr 1975 05:05:00 GMT
location: https://demo2.cloudwp.dev/inactive.htm
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
link: <https://demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff>; rel="canonical"
x-hw: 1672431194.cds209.sk1.hc,1672431194.cds259.sk1.sc,1672431195.cdn2-wafbe02-arn1.stackpath.systems.-.wx,1672431195.cds259.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COuovZ0GEocBCiQwZWIzMTc5NS0xNjAyLTRlZDgtYTZhMC0wNDRjODA2MGViYmQQ2J+KgafZ+wIaBgjajL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGikSJGMxNGI2NDMwLTZhMmUtNGMxOC05NGNlLWVhMzI4MWRkZTlmMBj2ASIaCAISFGNkczI1OS5zazEuaHdjZG4ubmV0GAg=.ar+wohwfu2L5TNLHkO+NBEb7cogFZVoRhlfh5+gnT+k=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff
151.139.128.10301 Moved Permanently 246 B URL HTTP/2 demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff
IP 151.139.128.10:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 34e7e14b00c9dd2bccc95c97fc80b049
3489a6241b5a46a124b0eb5908dfeac166919eee
0ffeeccf9b904bc7cfe3a9d9554dc8e05907adec665e93a5921d79a9415ab5b0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=c6af6f8b43d49eea281403f235214e90; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ii74RY3wsiH5We5njqT+aw==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Fri, 30 Dec 2022 20:13:15 GMT
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-length: 246
content-type: text/html; charset=iso-8859-1
pragma: no-cache
expires: Sun, 20 Apr 1975 05:05:00 GMT
location: https://demo2.cloudwp.dev/inactive.htm
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
link: <https://demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff>; rel="canonical"
x-hw: 1672431194.cds209.sk1.hc,1672431194.cds024.sk1.sc,1672431195.cdn2-wafbe01-arn1.stackpath.systems.-.wx,1672431195.cds024.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COuovZ0GEocBCiQ5MGQ2MGNkYy1kMjViLTQ4YjYtYjM2OS1kZWNlODdkNjBjODYQ2J+KgafZ+wIaBgjajL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGikSJDQ0ZDRkNGQ3LWMyOTctNDNhNC05MzFlLTQ0NGQwMTY3ZGJkZBj2ASIaCAISFGNkczAyNC5zazEuaHdjZG4ubmV0GAg=.M9hZmCOwPWup3MLLbVOE/P2cAGlgk//kNPSJvF6hPEQ=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff
151.139.128.10301 Moved Permanently 246 B URL HTTP/2 demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff
IP 151.139.128.10:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 34e7e14b00c9dd2bccc95c97fc80b049
3489a6241b5a46a124b0eb5908dfeac166919eee
0ffeeccf9b904bc7cfe3a9d9554dc8e05907adec665e93a5921d79a9415ab5b0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=341600b0012fe77caeeee9b4e78778fe; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ii74RY3wsiH5We5njqT+aw==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Fri, 30 Dec 2022 20:13:15 GMT
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-length: 246
content-type: text/html; charset=iso-8859-1
pragma: no-cache
expires: Sun, 20 Apr 1975 05:05:00 GMT
location: https://demo2.cloudwp.dev/inactive.htm
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
link: <https://demo2.cloudwp.dev/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff>; rel="canonical"
x-hw: 1672431194.cds209.sk1.hc,1672431194.cds248.sk1.sc,1672431195.cdn2-wafbe04-arn1.stackpath.systems.-.wx,1672431195.cds248.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COuovZ0GEocBCiQ0MzQ5MTllMi0wNzdjLTQzY2MtOGI1MC1iMmJkMjJkOWNmNTYQ2J+KgafZ+wIaBgjajL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGikSJDY2ZDA3NDBlLWNjYWItNDBkNS05ZjllLWQwZWY2OGQ1NWQzNRj2ASIaCAISFGNkczI0OC5zazEuaHdjZG4ubmV0GAg=.SxKQtIIczg8VD41emLJdPGsDm9zyCTM5MZLZc1qXeGA=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/inactive.htm
151.139.128.10200 OK 4.9 kB URL HTTP/2 demo2.cloudwp.dev/inactive.htm
IP 151.139.128.10:0
Hash c6977d4044e33b57d9e9648eb73bcb59
2f0f918cf1a6e344814c110d93f66acfe9349ae4
982ec4df8364cfa2c3e57b75aa7cd2b12812ce67414ee381da9d540e2b008980
Analyzer Verdict Alert fortinet Phishing
GET /inactive.htm HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/correos-ui-kit.css
Connection: keep-alive
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=8ab0a2190e93cabf9899ed19bb0df6da; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:14 GMT
cache-control: private
content-encoding: gzip
content-type: text/html; charset=utf-8
last-modified: Fri, 09 Jul 2021 17:42:39 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
set-cookie: spcsrf=ac6be211ab37193aee26763767efb141; path=/; SameSite=Strict; HttpOnly; expires=Fri, 30-Dec-22 22:13:13 GMT
PRLST=; Tue, 27-Dec-22 20:13:13 GMT; path=/; SameSite=Lax;
sp_lit=ii74RY3wsiH5We5njqT+aw==; path=/; SameSite=Strict; HttpOnly; expires=Fri, 30-Dec-22 20:18:14 GMT
link: <https://demo2.cloudwp.dev/inactive.htm>; rel="canonical"
x-hw: 1672431193.cds209.sk1.hc,1672431193.cds018.sk1.sc,1672431194.cdn2-wafbe04-arn1.stackpath.systems.-.wx,1672431194.cds018.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COqovZ0GEocBCiQ5MGI1NmIzZi04NmRhLTRjY2YtOGNlYi1iNjIzMTU0MDNkZTEQ2J+KgafZ+wIaBgjZjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGigIARIkOWZkMGY3ZGUtMzE1Yi00MzlhLTg2YzUtYTFiOTAyZmE2NDc5IhoIAhIUY2RzMDE4LnNrMS5od2Nkbi5uZXQYCA==.DA+1HHLm5bNLl0JTzHg9JJLh2i2Z3oi/DRsJveyDI0s=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/inactive.htm
151.139.128.10200 OK 0 B URL HTTP/2 demo2.cloudwp.dev/inactive.htm
IP 151.139.128.10:0
Analyzer Verdict Alert fortinet Phishing
GET /inactive.htm HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/correos-ui-kit.css
Connection: keep-alive
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=6f581221e0d4794f53669d0496cd3c5a; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:14 GMT
cache-control: private
content-encoding: gzip
content-type: text/html; charset=utf-8
last-modified: Fri, 09 Jul 2021 17:42:39 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
set-cookie: spcsrf=c6af6f8b43d49eea281403f235214e90; path=/; SameSite=Strict; HttpOnly; expires=Fri, 30-Dec-22 22:13:13 GMT
PRLST=; Tue, 27-Dec-22 20:13:13 GMT; path=/; SameSite=Lax;
sp_lit=ii74RY3wsiH5We5njqT+aw==; path=/; SameSite=Strict; HttpOnly; expires=Fri, 30-Dec-22 20:18:14 GMT
link: <https://demo2.cloudwp.dev/inactive.htm>; rel="canonical"
x-hw: 1672431193.cds209.sk1.hc,1672431193.cds018.sk1.sc,1672431194.cdn2-redis01-arn1.stackpath.systems.-.wx,1672431194.cds018.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COqovZ0GEocBCiQ1ZmUzZGUwYS04Y2Y3LTQzNzYtOWNiNC1iOWJhNTM2MDNlMDAQ2J+KgafZ+wIaBgjZjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGigIARIkNDAwNGU0NDctNWYzNi00NmQ3LTgxYzctNjAwMzlhNTdlNDM2IhoIAhIUY2RzMDE4LnNrMS5od2Nkbi5uZXQYCA==.FlfWnyIwcLJqEVQXFNNGcskSbZxjdRLQJbDGIedqgu0=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/sbbi/?sbbpg=sbbShell&gprid=wG&sbbgs=h49af9deabaf334f1ee4fcbb16366e59fb37&ddl=-5
151.139.128.10200 OK 0 B URL HTTP/2 demo2.cloudwp.dev/sbbi/?sbbpg=sbbShell&gprid=wG&sbbgs=h49af9deabaf334f1ee4fcbb16366e59fb37&ddl=-5
IP 151.139.128.10:0
GET /sbbi/?sbbpg=sbbShell&gprid=wG&sbbgs=h49af9deabaf334f1ee4fcbb16366e59fb37&ddl=-5 HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=dcbbc092b123acf5a5b41fe499ea619d; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=wG
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:06 GMT
cache-control: no-store, no-cache, max-age=0, must-revalidate, private, max-stale=0, post-check=0, pre-check=0
content-encoding: gzip
content-type: text/html; charset=UTF-8
server: fbs
x-accel-expires: 0
link: <https://demo2.cloudwp.dev/sbbi/>; rel="canonical"
x-hw: 1672431186.cds013.sk1.hn,1672431186.cds203.sk1.sc,1672431186.cdn2-wafbe04-arn1.stackpath.systems.-.i,1672431186.cds203.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COKovZ0GEoYBCiQwMzk0OTczYi05ODEwLTQ3NjMtODk0Mi0xNWJjZmQzODRhNzQQ2J+KgafZ+wIaBgjSjL2dBiIMOTEuOTAuNDIuMTU0KNF7MAM4BEIWVExTX0FFU18xMjhfR0NNX1NIQTI1NlogYzdkMmI0YzQ4NGE0MTNlMTkxZGU2YWNmZjJkYjIwMDkaJhIkNmQzYjA4MjYtNDQyNC00ZTE0LWI0OGUtMWRhZTc2ZmVlOGU4IhoIAhIUY2RzMjAzLnNrMS5od2Nkbi5uZXQYCA==.ugSxa+NfWJJtRDiEJGB8o9rpqc/zUJOWqRPJ9UlEx04=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/
151.139.128.10302 Found 0 B URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/
IP 151.139.128.10:0
Analyzer Verdict Alert openphish Correos
fortinet Phishing
GET /trial-y412xt64/Last_Correos/ HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=dcbbc092b123acf5a5b41fe499ea619d; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=wG; adOtr=ed1eb0511b1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 30 Dec 2022 20:13:10 GMT
cache-control: no-store, no-cache, must-revalidate
content-encoding: gzip
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
set-cookie: spcsrf=1dc644aeecb111718cbf34f882cc6b27; path=/; SameSite=Strict; HttpOnly; expires=Fri, 30-Dec-22 22:13:07 GMT
PHPSESSID=60f8f3c599248a788199b427b5258fc9; path=/
location: Recibir_paquete.php
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
link: <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/>; rel="canonical"
x-hw: 1672431187.cds012.sk1.hc,1672431187.cds255.sk1.sc,1672431190.cdn2-wafbe02-arn1.stackpath.systems.-.wx,1672431190.cds255.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COaovZ0GEoYBCiQ5YWZjMjdmOS05Yzk3LTRhMDYtODY4ZC0yMzNkMzZiNDhkYmEQ2J+KgafZ+wIaBgjTjL2dBiIMOTEuOTAuNDIuMTU0KOxeMAM4BEIWVExTX0FFU18xMjhfR0NNX1NIQTI1NlogYjJlMzIxNDYwN2MyNzRlM2I3MmYxNDQ3MWEwYWRkOWQaJhIkMDZjOWQ5ZmUtMzkyOC00MGZiLWI0OTMtZTcyNjkwZDRlM2FiIhoIAhIUY2RzMjU1LnNrMS5od2Nkbi5uZXQYCA==.bJ9WH2P7KEhVGdZuZ4vOj3KW9EFX/lo048smS85HuGA=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Seleccione%20medio%20de%20pago_fichiers/main.css
151.139.128.10404 Not Found 0 B URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Seleccione%20medio%20de%20pago_fichiers/main.css
IP 151.139.128.10:0
GET /trial-y412xt64/Last_Correos/Seleccione%20medio%20de%20pago_fichiers/main.css HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Fri, 30 Dec 2022 20:13:12 GMT
accept-ranges: bytes
content-encoding: gzip
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
cache-control: no-cache, must-revalidate, max-age=0
server: fbs
link: <https://demo2.cloudwp.dev/trial-y412xt64/wp-json/>; rel="https://api.w.org/", <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Seleccione%20medio%20de%20pago_fichiers/main.css>; rel="canonical"
x-hw: 1672431191.cds209.sk1.hc,1672431191.cds213.sk1.sc,1672431192.cdn2-wafbe03-arn1.stackpath.systems.-.wx,1672431192.cds213.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COiovZ0GEocBCiRhYmZhYmQ0MC0zYzFiLTQ5MjAtYWNjMC0yZjNjNjRlMzMzMDQQ2J+KgafZ+wIaBgjXjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGiYSJGFiYjNjNzEzLThmNDktNGE2NC04NzgxLTA3ZjYzYWIwNzY1MiIaCAISFGNkczIxMy5zazEuaHdjZG4ubmV0GAg=.yNDKIPi03/tnjmGl0Ldbwli+Q0njPTyJdGFDmR8qTu8=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/clientlib-site.js
151.139.128.10404 Not Found 0 B URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/clientlib-site.js
IP 151.139.128.10:0
Analyzer Verdict Alert fortinet Phishing
GET /trial-y412xt64/Last_Correos/assets/recibir_paquete_files/clientlib-site.js HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Fri, 30 Dec 2022 20:13:12 GMT
accept-ranges: bytes
content-encoding: gzip
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
cache-control: no-cache, must-revalidate, max-age=0
server: fbs
link: <https://demo2.cloudwp.dev/trial-y412xt64/wp-json/>; rel="https://api.w.org/", <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/clientlib-site.js>; rel="canonical"
x-hw: 1672431192.cds209.sk1.hc,1672431192.cds259.sk1.sc,1672431192.cdn2-wafbe02-arn1.stackpath.systems.-.wx,1672431192.cds259.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COiovZ0GEocBCiRiOTdhZDhiYy0yY2YwLTQ0ZDItOTFlMC0xZDllYTE3NGRjMjUQ2J+KgafZ+wIaBgjYjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGiYSJDMwMDc5M2M2LTI2M2MtNGNmMy04OWVjLTBlZThlNDYwZjhiZCIaCAISFGNkczI1OS5zazEuaHdjZG4ubmV0GAg=.U4Zvz2wSKsCRGvcE/RxC1TF3yn2HWUxPSwcgALtLEyw=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/inactive.htm
151.139.128.10200 OK 0 B URL HTTP/2 demo2.cloudwp.dev/inactive.htm
IP 151.139.128.10:0
Analyzer Verdict Alert fortinet Phishing
GET /inactive.htm HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/correos-ui-kit.css
Connection: keep-alive
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=87a86faaf02f0130d21df811c7cd649b; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:14 GMT
cache-control: private
content-encoding: gzip
content-type: text/html; charset=utf-8
last-modified: Fri, 09 Jul 2021 17:42:39 GMT
vary: Accept-Encoding
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
set-cookie: spcsrf=341600b0012fe77caeeee9b4e78778fe; path=/; SameSite=Strict; HttpOnly; expires=Fri, 30-Dec-22 22:13:13 GMT
PRLST=; Tue, 27-Dec-22 20:13:13 GMT; path=/; SameSite=Lax;
sp_lit=ii74RY3wsiH5We5njqT+aw==; path=/; SameSite=Strict; HttpOnly; expires=Fri, 30-Dec-22 20:18:14 GMT
link: <https://demo2.cloudwp.dev/inactive.htm>; rel="canonical"
x-hw: 1672431193.cds209.sk1.hc,1672431193.cds018.sk1.sc,1672431194.cdn2-wafbe02-arn1.stackpath.systems.-.wx,1672431194.cds018.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COqovZ0GEocBCiQ1NWJkZTUwOC1mNTNiLTRlZTctOWUyOS0wMjY4OTExYTdjYjMQ2J+KgafZ+wIaBgjZjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGiYSJGFlMDNjZjQ4LWI4MjEtNGNhMy04NjJkLTM1ZmYzMzZiZjQwOSIaCAISFGNkczAxOC5zazEuaHdjZG4ubmV0GAg=.etWvJny3dCwH/RJjXmjVqmOrIG4CWace3F9zmbU6YZc=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/inactive.htm
151.139.128.10200 OK 0 B URL HTTP/2 demo2.cloudwp.dev/inactive.htm
IP 151.139.128.10:0
Analyzer Verdict Alert fortinet Phishing
GET /inactive.htm HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Connection: keep-alive
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=8ab0a2190e93cabf9899ed19bb0df6da; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:14 GMT
cache-control: private
content-encoding: gzip
content-type: text/html; charset=utf-8
last-modified: Fri, 09 Jul 2021 17:42:39 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
set-cookie: spcsrf=e3f37618d71ae2bd33b7d470c0aa892b; path=/; SameSite=Strict; HttpOnly; expires=Fri, 30-Dec-22 22:13:13 GMT
PRLST=; Tue, 27-Dec-22 20:13:13 GMT; path=/; SameSite=Lax;
sp_lit=ii74RY3wsiH5We5njqT+aw==; path=/; SameSite=Strict; HttpOnly; expires=Fri, 30-Dec-22 20:18:14 GMT
link: <https://demo2.cloudwp.dev/inactive.htm>; rel="canonical"
x-hw: 1672431193.cds209.sk1.hc,1672431193.cds018.sk1.sc,1672431194.cdn2-wafbe02-arn1.stackpath.systems.-.wx,1672431194.cds018.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COqovZ0GEocBCiQ2OGE2NWMyNi1jNzBkLTRjNTAtOTA5MS1mZmY5ODFiYTYxYjcQ2J+KgafZ+wIaBgjZjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGigIARIkNTE1N2RhODQtZTNiNi00M2IxLTlhZjEtMzFmNGVmYTkzOTIyIhoIAhIUY2RzMDE4LnNrMS5od2Nkbi5uZXQYCA==.OhPPyv/02kiGfm5Fc/wa+OPTBN1D/9+5DKoqj6c+uEg=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/sbbi/?sbbpg=sbbShell&gprid=wG&sbbgs=h49af9deabaf334f1ee4fcbb16366e59fb37&ddl=-5
151.139.128.10200 OK 0 B URL HTTP/2 demo2.cloudwp.dev/sbbi/?sbbpg=sbbShell&gprid=wG&sbbgs=h49af9deabaf334f1ee4fcbb16366e59fb37&ddl=-5
IP 151.139.128.10:0
POST /sbbi/?sbbpg=sbbShell&gprid=wG&sbbgs=h49af9deabaf334f1ee4fcbb16366e59fb37&ddl=-5 HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 489
Origin: https://demo2.cloudwp.dev
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/sbbi/?sbbpg=sbbShell&gprid=wG&sbbgs=h49af9deabaf334f1ee4fcbb16366e59fb37&ddl=-5
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=dcbbc092b123acf5a5b41fe499ea619d; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=wG; adOtr=ed1eb0511b1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:07 GMT
cache-control: no-store, no-cache, max-age=0, must-revalidate, private, max-stale=0, post-check=0, pre-check=0
content-encoding: gzip
content-type: text/html; charset=UTF-8
server: fbs
x-accel-expires: 0
link: <https://demo2.cloudwp.dev/sbbi/>; rel="canonical"
x-hw: 1672431187.cds013.sk1.hn,1672431187.cds260.sk1.sc,1672431187.cdn2-wafbe02-arn1.stackpath.systems.-.i,1672431187.cds260.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COOovZ0GEoYBCiRiN2E2OWUwNi1jYmEwLTQwNGMtYTgwNy1hODJkMzllYmUyYTQQ2J+KgafZ+wIaBgjTjL2dBiIMOTEuOTAuNDIuMTU0KNF7MAM4BEIWVExTX0FFU18xMjhfR0NNX1NIQTI1NlogYzdkMmI0YzQ4NGE0MTNlMTkxZGU2YWNmZjJkYjIwMDkaJhIkYmIwYWFmODktZWRkOS00MDI4LWFkNjMtMTVjYWExOTljMzQ4IhoIAhIUY2RzMjYwLnNrMS5od2Nkbi5uZXQYCA==.QwVp5UQoRry1fKtd4UaDAI0p4G9DON+KeRQVRPy6zm4=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/libs/granite/csrf/token.json
151.139.128.10301 Moved Permanently 0 B URL HTTP/2 demo2.cloudwp.dev/libs/granite/csrf/token.json
IP 151.139.128.10:0
Analyzer Verdict Alert fortinet Phishing
GET /libs/granite/csrf/token.json HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/Recibir_paquete.php
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=5203da8baff343b21f9ee58bcecf7b9e; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Fri, 30 Dec 2022 20:13:13 GMT
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/html; charset=iso-8859-1
pragma: no-cache
expires: Sun, 20 Apr 1975 05:05:00 GMT
location: https://demo2.cloudwp.dev/inactive.htm
x-proxy-cache: MISS
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
link: <https://demo2.cloudwp.dev/libs/granite/csrf/token.json>; rel="canonical"
x-hw: 1672431193.cds209.sk1.hc,1672431193.cds233.sk1.sc,1672431193.cdn2-wafbe02-arn1.stackpath.systems.-.wx,1672431193.cds233.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COmovZ0GEocBCiQ0YjlmMjU2OS1iNTkwLTRlNGQtYmUwNi0wMGVlYmY5N2UxNTAQ2J+KgafZ+wIaBgjZjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGikSJDlmNDYxZDQ4LWY2NWYtNDc1Yi1hNDI1LTUyNzMwYzA1NDQ1Mxj2ASIaCAISFGNkczIzMy5zazEuaHdjZG4ubmV0GAg=.kXaMfj0W9PKO3qlaXuBO37G5o7E6T0VCoMUKOx+mxpE=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/trial-y412xt64/Last_Correos/
151.139.128.10200 OK 0 B URL HTTP/2 demo2.cloudwp.dev/trial-y412xt64/Last_Correos/
IP 151.139.128.10:0
Analyzer Verdict Alert openphish Correos
fortinet Phishing
GET /trial-y412xt64/Last_Correos/ HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:06 GMT
cache-control: no-store, no-cache, max-age=0, must-revalidate, private, max-stale=0, post-check=0, pre-check=0
content-encoding: gzip
content-type: text/html; charset=UTF-8
set-cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; path=/; HttpOnly; SameSite=Lax;
SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; path=/; HttpOnly; SameSite=Lax;
spcsrf=dcbbc092b123acf5a5b41fe499ea619d; path=/; SameSite=Strict; HttpOnly; expires=Fri, 30-Dec-22 22:13:06 GMT
adOtr=obsvl; path=/; SameSite=Lax; expires=Thu, 2 Aug 2001 20:47:11 UTC
UTGv2=D-h49af9deabaf334f1ee4fcbb16366e59fb37; path=/; SameSite=Lax; expires=Wed, 28-Jun-23 20:13:06 GMT
server: fbs
x-accel-expires: 0
link: <https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/>; rel="canonical"
x-hw: 1672431186.cds013.sk1.hn,1672431186.cds255.sk1.sc,1672431186.cdn2-wafbe02-arn1.stackpath.systems.-.w,1672431186.cds255.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COKovZ0GEoYBCiQ1NzFiMWMwOC1kYzBmLTQ5M2QtYjM4Ni1hZDAzZjdhMzkwYjkQ2J+KgafZ+wIaBgjSjL2dBiIMOTEuOTAuNDIuMTU0KNF7MAM4BEIWVExTX0FFU18xMjhfR0NNX1NIQTI1NlogYzdkMmI0YzQ4NGE0MTNlMTkxZGU2YWNmZjJkYjIwMDkaJhIkNGEwZWYxOGItNDAxOS00YTE1LTkzMmItZmU2NmYyOThkMjk0IhoIAhIUY2RzMjU1LnNrMS5od2Nkbi5uZXQYCA==.VxE1W0UwnpdJr4ICNSPY/ZcmHfaZw4PhIWaAZQ1V2D4=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/sbbi/?sbbpg=utMedia&vii=bh1459daefe91d0e1a1bba8fd313148ff1eede74bf7c0bdb51a69326e61eb5c9hfybq3h7
151.139.128.10200 OK 0 B URL HTTP/2 demo2.cloudwp.dev/sbbi/?sbbpg=utMedia&vii=bh1459daefe91d0e1a1bba8fd313148ff1eede74bf7c0bdb51a69326e61eb5c9hfybq3h7
IP 151.139.128.10:0
GET /sbbi/?sbbpg=utMedia&vii=bh1459daefe91d0e1a1bba8fd313148ff1eede74bf7c0bdb51a69326e61eb5c9hfybq3h7 HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=dcbbc092b123acf5a5b41fe499ea619d; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=wG
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:06 GMT
cache-control: no-store, no-cache, max-age=0, must-revalidate, private, max-stale=0, post-check=0, pre-check=0
content-type: image/gif
server: fbs
x-accel-expires: 0
link: <https://demo2.cloudwp.dev/sbbi/>; rel="canonical"
x-hw: 1672431186.cds013.sk1.hn,1672431186.cds224.sk1.sc,1672431186.cdn2-wafbe02-arn1.stackpath.systems.-.i,1672431186.cds224.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COKovZ0GEoYBCiQ5NzgxMDFiYy04MzdjLTRiNWItYjRjNS0wYjNmODkyYTE5NTgQ2J+KgafZ+wIaBgjSjL2dBiIMOTEuOTAuNDIuMTU0KNF7MAM4BEIWVExTX0FFU18xMjhfR0NNX1NIQTI1NlogYzdkMmI0YzQ4NGE0MTNlMTkxZGU2YWNmZjJkYjIwMDkaJhIkZDgyOTc3NjEtMDlhOS00MDcyLWFhY2YtMWE0YjI2Mzk4NTE1IhoIAhIUY2RzMjI0LnNrMS5od2Nkbi5uZXQYCA==.tVLj9XDz1ACTrOTNRiqZIilOya9wbUqCZKwmFahwmYs=
X-Firefox-Spdy: h2
demo2.cloudwp.dev/inactive.htm
151.139.128.10200 OK 0 B URL HTTP/2 demo2.cloudwp.dev/inactive.htm
IP 151.139.128.10:0
Analyzer Verdict Alert fortinet Phishing
GET /inactive.htm HTTP/1.1
Host: demo2.cloudwp.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://demo2.cloudwp.dev/trial-y412xt64/Last_Correos/assets/recibir_paquete_files/correos-ui-kit.css
Connection: keep-alive
Cookie: SPSI=b15dee1011b8d118fed7b70d5a92e1bc; SPSE=qIiytCRIta1zF7+U1n42pdTHbfxQNyUUMreV/5sH95Vg/H1FWUmW0odrc7g3ykUW4WR5wPMI5gIen0Nh/e3flQ==; spcsrf=c929abac32fb96b0643ab32a25e4d301; UTGv2=h49af9deabaf334f1ee4fcbb16366e59fb37; sbtsck=jav8vLli7O05ydstvpa9TpV+EFv5TBsbz4vFRdSpd8NCe0=; PRLST=; adOtr=ed1eb0511b1; PHPSESSID=60f8f3c599248a788199b427b5258fc9; sp_lit=ket16UY8NN5O8dHS8CYfsw==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Dec 2022 20:13:14 GMT
cache-control: private
content-encoding: gzip
content-type: text/html; charset=utf-8
last-modified: Fri, 09 Jul 2021 17:42:39 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
strict-transport-security: max-age=31536000; includeSubDomains
server: fbs
set-cookie: spcsrf=4530abe950db9b46de3dc99ed5c396b2; path=/; SameSite=Strict; HttpOnly; expires=Fri, 30-Dec-22 22:13:13 GMT
PRLST=; Tue, 27-Dec-22 20:13:13 GMT; path=/; SameSite=Lax;
sp_lit=ii74RY3wsiH5We5njqT+aw==; path=/; SameSite=Strict; HttpOnly; expires=Fri, 30-Dec-22 20:18:14 GMT
link: <https://demo2.cloudwp.dev/inactive.htm>; rel="canonical"
x-hw: 1672431193.cds209.sk1.hc,1672431193.cds018.sk1.sc,1672431194.cdn2-wafbe04-arn1.stackpath.systems.-.wx,1672431194.cds018.sk1.p
access-control-allow-origin: *
x-sp-metadata: HS256.COqovZ0GEocBCiQxMDc3YjlkOS1hNWIyLTQzZTctOGQ1OC1mMzU1OWRiZWQzYjUQ2J+KgafZ+wIaBgjZjL2dBiIMOTEuOTAuNDIuMTU0KMqgAjADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGIyZTMyMTQ2MDdjMjc0ZTNiNzJmMTQ0NzFhMGFkZDlkGigIARIkNzZlZmI3YTctZmQzNy00NjNjLTk0ZWItMmIzYzE3MzI4MmQ5IhoIAhIUY2RzMDE4LnNrMS5od2Nkbi5uZXQYCA==.EKwX+EEd0H6KkGN1a2NWsvPsLnlOCIe4+vxyaTk0Vww=
X-Firefox-Spdy: h2