Report - correos-esxpress.tempurl.host/es/Recibir

Report Overview

Submitted URL
correos-esxpress.tempurl.host/es/Recibir_paquete.php
IP
141.164.54.122
ASN
#20473 AS-CHOOPA
Submitted
2024-04-26 15:36:42
Access
public
Website Title
Correos | Recibir Paquete
Final URL
correos-esxpress.tempurl.host/es/Recibir_paquete.php
Tags
correos logistics phishing suspicious
urlquery detections
Phishing - Correos
Suspicious - Anti-debugging code

Detections

urlquery
26
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
correos-esxpress.tempurl.host	unknown	unknown	No data	No data	17 kB	1.8 MB	141.164.54.122

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	correos-esxpress.tempurl.host/es/Recibir_paquete.php	158 B	2023-03-07	2024-05-02
Pretty URL correos-esxpress.tempurl.host/es/Recibir_paquete.php IP 141.164.54.122 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 13:50:57 Last Seen2024-05-02 02:04:04 Times Seen497 Hash 40b7fbe5cec5de3fda98192e021347de 85f87fdf333deeb80a46709d1e52b63314d43b10 985e9345c7f8462093e12718fe986cdb0a3ffa2c5aeaf0618675f30a8166432a Loading...

	correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/clientlib-provider-correosid.js	1.1 kB	2023-03-07	2024-05-02
Pretty URL correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/clientlib-provider-correosid.js IP 141.164.54.122 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:50:57 Last Seen2024-05-02 02:04:04 Times Seen975 Hash ed8e3f9c92c02f27ac1f60e6503eb3e8 b292b50ffe2cc1266df6594385b5abc115c828b2 1a8c9179d1d4fef9308485f10fc5a296254604b7b02f449f0c325d704fe9d1fc Loading...

	correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/container.js	752 B	2023-03-07	2024-05-03
Pretty URL correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/container.js IP 141.164.54.122 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:04:03 Last Seen2024-05-03 22:40:17 Times Seen992 Hash 64e934d0a16266574945c8fb92e68316 56cd0c08e7bf1a5f363ec4bdafb6c926814713ea c69737729bfeffad46e66417ed01bff74a95b62b5265abafe011777f5d87f09f Loading...

	correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/clientlib-base.js	129 kB	2023-03-07	2024-05-02
Pretty URL correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/clientlib-base.js IP 141.164.54.122 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:50:57 Last Seen2024-05-02 02:04:04 Times Seen664 Hash 89d276b13019c13329aa76cba8e710b1 89c8f1ecd8b23c7e9ca5e0aae53cdc6c10b9aaf0 b39606ee6e552345db72d3cadf4f1eb7a02a8ef2e44410d891cb9a835cf91216 Loading...

	correos-esxpress.tempurl.host/es/Recibir_paquete.php	158 B	2023-03-07	2024-05-02
Pretty URL correos-esxpress.tempurl.host/es/Recibir_paquete.php IP 141.164.54.122 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 13:50:57 Last Seen2024-05-02 02:04:04 Times Seen497 Hash dbd1093114a2533e78cf499cd6a21933 06736e6fcf265f46b189ab6d7f44583ab0765f88 a5cd3d32da6a8d31345aa9a116cf49ba271bf999ef67d330b225cce0d772104c Loading...

	correos-esxpress.tempurl.host/es/Recibir_paquete.php	248 B	2023-03-07	2024-05-02
Pretty URL correos-esxpress.tempurl.host/es/Recibir_paquete.php IP 141.164.54.122 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 13:50:57 Last Seen2024-05-02 02:04:04 Times Seen493 Hash 6d16830ef26bef7f7aafa872485c0001 686be41eb853d883beba2e33570a40c4310fdab6 a2efe38d46fd3e105cd1aa0f2d1ee6e88981694b105bc585ba53177b4b9abbac Loading...

	correos-esxpress.tempurl.host/es/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1.js	248 kB	2023-03-07	2024-05-02
Pretty URL correos-esxpress.tempurl.host/es/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1.js IP 141.164.54.122 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:26:40 Last Seen2024-05-02 02:04:05 Times Seen1368 Hash 273e017fd0bef143258516bdee173a1e b47730ffaec4272a8a01756af2ef13ecea1c4e92 9fcc241093405946885039df428cfa7f0051a1f2bdbcc5a313a177a9e35f8806 Loading...

	correos-esxpress.tempurl.host/es/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1_002.js	94 kB	2023-03-07	2024-05-07
Pretty URL correos-esxpress.tempurl.host/es/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1_002.js IP 141.164.54.122 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:13 Last Seen2024-05-07 13:25:06 Times Seen10646 Hash ddb84c1587287b2df08966081ef063bf 9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f 88171413fc76dda23ab32baa17b11e4fff89141c633ece737852445f1ba6c1bd Loading...

	correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/gtm.js	80 kB	2023-03-07	2024-05-02
Pretty URL correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/gtm.js IP 141.164.54.122 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:50:57 Last Seen2024-05-02 02:04:05 Times Seen827 Hash bd9368eb37645cdf268345f880851e03 2b3d6120eb736e9f218f48f9056b64860d0ae619 f60fb122312d6f897d7ed61b9ee0a89b6551649fdd3a6be513c50bb73b7d2654 Loading...

	correos-esxpress.tempurl.host/es/Recibir_paquete.php	607 B	2023-03-07	2024-05-02
Pretty URL correos-esxpress.tempurl.host/es/Recibir_paquete.php IP 141.164.54.122 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 13:50:57 Last Seen2024-05-02 02:04:04 Times Seen498 Hash ab5136c060691d980c5bddf2d6b0d681 e300c723daac4bc8a90556ad14c627b38dcfe9c5 af23d9c987fa833327513f4f9b4635fdfd0f96f9b2e5f7a0f69cf5533da65432 Loading...

	correos-esxpress.tempurl.host/es/Recibir_paquete.php	3.2 kB	2023-03-07	2024-05-02
Pretty URL correos-esxpress.tempurl.host/es/Recibir_paquete.php IP 141.164.54.122 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 13:50:57 Last Seen2024-05-02 02:04:04 Times Seen498 Hash ac30bbf901aa89b9eba5f58f213f76c1 b65ddf046c70ac2477b2ef1d22dcf3410e801c05 2acf644164240497401f38302fe8d0d339813f6ce534ac4fef02098717029b26 Loading...

	correos-esxpress.tempurl.host/es/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-ui-1.js	211 kB	2023-03-07	2024-05-02
Pretty URL correos-esxpress.tempurl.host/es/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-ui-1.js IP 141.164.54.122 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:42:15 Last Seen2024-05-02 12:50:40 Times Seen1146 Hash 0cd3f4fce2e0fe4a3826df5e2b5cc9bf a4a80afd87d6d3a986defb2741d5b76d18a96125 794bf1ff4b8bbc981cb280b4efeb6e5b040afb34b85f6e3cd2546ace15910301 Loading...

HTTP Transactions (28)

URL IP Response Size

correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/apple_store.jpg

141.164.54.122

200 OK

11 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/apple_store.jpg
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 250x82, components 3
Size
11 kB (11255 bytes)
Hash
498c4a8cc089ec2fc0b87f460924b9b4
324b0ef1cf07829216653bf3fca04add4ebf553f
509066150aa1da2b163e681cff62f67f0becd0bb65cded95be964371835798f6

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Correos

HTTP Headers

GET /es/assets/recibir_paquete_files/apple_store.jpg HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: image/jpeg
content-length: 11255
last-modified: Mon, 23 May 2022 11:59:06 GMT
etag: "628b770a-2bf7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/google_play.jpg

141.164.54.122

200 OK

12 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/google_play.jpg
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 270x80, components 3
Size
12 kB (11827 bytes)
Hash
71405560fcf941f01e531e8564ad9e3f
a970b8084d6e7cdd714dbd1add272ac630cd9fe9
bda17ffead5e3809b288330e7aa2d2b689c45cfadcef8249416d07afe34477a7

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Correos

HTTP Headers

GET /es/assets/recibir_paquete_files/google_play.jpg HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: image/jpeg
content-length: 11827
last-modified: Mon, 23 May 2022 11:59:06 GMT
etag: "628b770a-2e33"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/es/assets/pic_image/package.jpg

141.164.54.122

200 OK

80 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/es/assets/pic_image/package.jpg
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x960, components 3
Size
80 kB (79701 bytes)
Hash
c8f62200abc0901f82eb57cfd63f11da
b57afb6c671cc84aff03656945c36af57ec0c68d
0e343f72b8fe95c764a97e83ec0b5f47910e7615045487174fb48e1ce6075372

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Correos

HTTP Headers

GET /es/assets/pic_image/package.jpg HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: image/jpeg
content-length: 79701
last-modified: Mon, 23 May 2022 11:59:06 GMT
etag: "628b770a-13755"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff2

141.164.54.122

404 Not Found

1.7 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff2
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (933)
Size
1.7 kB (1674 bytes)
Hash
213d40bf448e8cac57d964d095370cc4
d6f36c5c02235168c988a9971c12612df5542294
4a9e2d5225b40af835215586529b6ac2ae265ecb10d9d0e14c8f43806f4cabfd

HTTP Headers

GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff2 HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: text/html; charset=UTF-8
content-length: 1674
vary: Accept-Encoding
etag: "66213f0f-68a"
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff2

141.164.54.122

404 Not Found

1.7 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff2
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (933)
Size
1.7 kB (1674 bytes)
Hash
213d40bf448e8cac57d964d095370cc4
d6f36c5c02235168c988a9971c12612df5542294
4a9e2d5225b40af835215586529b6ac2ae265ecb10d9d0e14c8f43806f4cabfd

HTTP Headers

GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff2 HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: text/html; charset=UTF-8
content-length: 1674
vary: Accept-Encoding
etag: "66213f0f-68a"
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff2

141.164.54.122

404 Not Found

1.7 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff2
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (933)
Size
1.7 kB (1674 bytes)
Hash
213d40bf448e8cac57d964d095370cc4
d6f36c5c02235168c988a9971c12612df5542294
4a9e2d5225b40af835215586529b6ac2ae265ecb10d9d0e14c8f43806f4cabfd

HTTP Headers

GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff2 HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: text/html; charset=UTF-8
content-length: 1674
vary: Accept-Encoding
etag: "66213f0f-68a"
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/clientlib-provider-correosid.js

141.164.54.122

200 OK

2.0 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/clientlib-provider-correosid.js
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
2.0 kB (2033 bytes)
Hash
380361ef07e740897e954668c0d3b984
cebab82c2cdfd300887a661435dcf4bd9b15ae72
c27a034989f6dd3b7b9b6acb784b59a51cab7e11ef8f04b13a7791769f0f608a

HTTP Headers

GET /es/assets/recibir_paquete_files/clientlib-provider-correosid.js HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 23 May 2022 11:59:06 GMT
vary: Accept-Encoding
etag: W/"628b770a-471"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
content-encoding: gzip
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff

141.164.54.122

404 Not Found

1.7 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (933)
Size
1.7 kB (1674 bytes)
Hash
213d40bf448e8cac57d964d095370cc4
d6f36c5c02235168c988a9971c12612df5542294
4a9e2d5225b40af835215586529b6ac2ae265ecb10d9d0e14c8f43806f4cabfd

HTTP Headers

GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Fri, 26 Apr 2024 15:36:18 GMT
content-type: text/html; charset=UTF-8
content-length: 1674
vary: Accept-Encoding
etag: "66213f0f-68a"
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff

141.164.54.122

404 Not Found

1.7 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (933)
Size
1.7 kB (1674 bytes)
Hash
213d40bf448e8cac57d964d095370cc4
d6f36c5c02235168c988a9971c12612df5542294
4a9e2d5225b40af835215586529b6ac2ae265ecb10d9d0e14c8f43806f4cabfd

HTTP Headers

GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Fri, 26 Apr 2024 15:36:18 GMT
content-type: text/html; charset=UTF-8
content-length: 1674
vary: Accept-Encoding
etag: "66213f0f-68a"
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff

141.164.54.122

404 Not Found

1.7 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (933)
Size
1.7 kB (1674 bytes)
Hash
213d40bf448e8cac57d964d095370cc4
d6f36c5c02235168c988a9971c12612df5542294
4a9e2d5225b40af835215586529b6ac2ae265ecb10d9d0e14c8f43806f4cabfd

HTTP Headers

GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Fri, 26 Apr 2024 15:36:18 GMT
content-type: text/html; charset=UTF-8
content-length: 1674
vary: Accept-Encoding
etag: "66213f0f-68a"
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff

141.164.54.122

404 Not Found

1.7 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (933)
Size
1.7 kB (1674 bytes)
Hash
213d40bf448e8cac57d964d095370cc4
d6f36c5c02235168c988a9971c12612df5542294
4a9e2d5225b40af835215586529b6ac2ae265ecb10d9d0e14c8f43806f4cabfd

HTTP Headers

GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Fri, 26 Apr 2024 15:36:18 GMT
content-type: text/html; charset=UTF-8
content-length: 1674
vary: Accept-Encoding
etag: "66213f0f-68a"
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.ttf

141.164.54.122

404 Not Found

6.0 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.ttf
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
6.0 kB (6039 bytes)
Hash
11963f1d4f27fdd4e1706421e87b2219
689097f25800f31a9ab8af3efc65ac7a430987f3
25add8ea2ebe20b161fbebc61647c116ebb7a6ace59d5dadc3abb1ae90472358

HTTP Headers

GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.ttf HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Fri, 26 Apr 2024 15:36:18 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
etag: W/"66213f0f-68a"
content-encoding: gzip
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/es/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1_002.js

141.164.54.122

200 OK

94 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/es/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1_002.js
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type

Size
94 kB (93868 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /es/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1_002.js HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 23 May 2022 11:59:06 GMT
vary: Accept-Encoding
etag: W/"628b770a-16eac"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
content-encoding: gzip
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/deco_triangles.svg

141.164.54.122

200 OK

1.2 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/deco_triangles.svg
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
1.2 kB (1211 bytes)
Hash
b08e055dfbbe00594cc43d7183589af8
e868a1f3753f2a4b0d3719001346bd1d82e3e88b
cb1a04de8b8780e5e8c6791474fb16db22cc559e8c6d3610b4f0bf8b450ecd54

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Correos

HTTP Headers

GET /es/assets/recibir_paquete_files/deco_triangles.svg HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: image/svg+xml
last-modified: Mon, 23 May 2022 11:59:06 GMT
vary: Accept-Encoding
etag: W/"628b770a-4bb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/es/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-ui-1.js

141.164.54.122

200 OK

211 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/es/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-ui-1.js
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (18557)
Size
211 kB (210902 bytes)
Hash
0cd3f4fce2e0fe4a3826df5e2b5cc9bf
a4a80afd87d6d3a986defb2741d5b76d18a96125
794bf1ff4b8bbc981cb280b4efeb6e5b040afb34b85f6e3cd2546ace15910301

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Correos

HTTP Headers

GET /es/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-ui-1.js HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 23 May 2022 11:59:06 GMT
vary: Accept-Encoding
etag: W/"628b770a-337d6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
content-encoding: gzip
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/CORREOS-favicon.ico

141.164.54.122

200 OK

110 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/CORREOS-favicon.ico
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel
Size
110 kB (110021 bytes)
Hash
349246ee336d8b2986e584a4fa436128
598b9f95458a2426bf1688d616c4f6f3fea3580e
68554c17c00a589c2b29e1f74ac5efbcd8d30252792626f5fff81955e4d89ae7

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Correos

HTTP Headers

GET /es/assets/recibir_paquete_files/CORREOS-favicon.ico HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:36:18 GMT
content-type: image/x-icon
last-modified: Mon, 23 May 2022 11:59:06 GMT
vary: Accept-Encoding
etag: W/"628b770a-1adc5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/es/Recibir_paquete.php

141.164.54.122

200 OK

598 kB

URL User Request GET HTTP/2
correos-esxpress.tempurl.host/es/Recibir_paquete.php
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type

Size
598 kB (597783 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Anti-debugging code

HTTP Headers

GET /es/Recibir_paquete.php HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:36:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-robots-tag: noindex, nofollow, nosnippet, noarchive
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/clientlib-site.js

141.164.54.122

404 Not Found

1.7 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/clientlib-site.js
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1767), with no line terminators
Size
1.7 kB (1674 bytes)
Hash
433220840e1ed3ccb81a6466a3eb2aec
6270d28f6a2f4074b3497fb16af91099333fcd0a
db73c710a0c7ccc522263dfd6f15b70f2121d2fc24e6039251c4174fb3084da5

HTTP Headers

GET /es/assets/recibir_paquete_files/clientlib-site.js HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
etag: W/"66213f0f-68a"
content-encoding: gzip
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/es/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1.js

141.164.54.122

200 OK

248 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/es/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1.js
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text
Size
248 kB (248235 bytes)
Hash
273e017fd0bef143258516bdee173a1e
b47730ffaec4272a8a01756af2ef13ecea1c4e92
9fcc241093405946885039df428cfa7f0051a1f2bdbcc5a313a177a9e35f8806

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Correos

HTTP Headers

GET /es/assets/Seleccione%20medio%20de%20pago_fichiers/jquery-1.js HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 23 May 2022 11:59:06 GMT
vary: Accept-Encoding
etag: W/"628b770a-3c9ab"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
content-encoding: gzip
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff2

141.164.54.122

404 Not Found

1.7 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff2
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1767), with no line terminators
Size
1.7 kB (1674 bytes)
Hash
433220840e1ed3ccb81a6466a3eb2aec
6270d28f6a2f4074b3497fb16af91099333fcd0a
db73c710a0c7ccc522263dfd6f15b70f2121d2fc24e6039251c4174fb3084da5

HTTP Headers

GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1648744842199.woff2 HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/correos-ui-kit.css
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: text/html; charset=UTF-8
content-length: 1674
vary: Accept-Encoding
etag: "66213f0f-68a"
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/clientlib-base.js

141.164.54.122

200 OK

129 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/clientlib-base.js
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type

Size
129 kB (128839 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /es/assets/recibir_paquete_files/clientlib-base.js HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 23 May 2022 11:59:06 GMT
vary: Accept-Encoding
etag: W/"628b770a-1f747"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
content-encoding: gzip
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/deco_bars.svg

141.164.54.122

200 OK

913 B

URL GET HTTP/2
correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/deco_bars.svg
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
913 B (913 bytes)
Hash
5e2e64c3b1e75bfdd35960b8981e4eab
1f573efee61d928abdf6d44ceaa193b5153d7bf0
be86cea889070d2e4a05f251927b6ecbdcaab2659124016d34605dfda00622d2

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Correos

HTTP Headers

GET /es/assets/recibir_paquete_files/deco_bars.svg HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: image/svg+xml
last-modified: Mon, 23 May 2022 11:59:06 GMT
vary: Accept-Encoding
etag: W/"628b770a-391"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/correos-ui-kit.css

141.164.54.122

200 OK

129 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/correos-ui-kit.css
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type

Size
129 kB (128571 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /es/assets/recibir_paquete_files/correos-ui-kit.css HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: text/css
last-modified: Mon, 23 May 2022 11:59:06 GMT
vary: Accept-Encoding
etag: W/"628b770a-1f63b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
content-encoding: gzip
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/gtm.js

141.164.54.122

200 OK

80 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/gtm.js
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (1555)
Size
80 kB (79483 bytes)
Hash
bd9368eb37645cdf268345f880851e03
2b3d6120eb736e9f218f48f9056b64860d0ae619
f60fb122312d6f897d7ed61b9ee0a89b6551649fdd3a6be513c50bb73b7d2654

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Correos

HTTP Headers

GET /es/assets/recibir_paquete_files/gtm.js HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 23 May 2022 11:59:06 GMT
vary: Accept-Encoding
etag: W/"628b770a-1367b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
content-encoding: gzip
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/container.js

141.164.54.122

200 OK

752 B

URL GET HTTP/2
correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/container.js
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (755), with no line terminators
Size
752 B (752 bytes)
Hash
f1e1b5df33d403a259a97f11212c23b4
18777dc94048804c2d75e7fcf05c33859ae90b0b
e02521ad04fe43dc502424669dab2d7f7ef67804c3f7f9a54c01706a9db726d5

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Correos

HTTP Headers

GET /es/assets/recibir_paquete_files/container.js HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 23 May 2022 11:59:06 GMT
vary: Accept-Encoding
etag: W/"628b770a-2f0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
content-encoding: gzip
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/libs/granite/csrf/token.json

141.164.54.122

404 Not Found

1.7 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/libs/granite/csrf/token.json
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1767), with no line terminators
Size
1.7 kB (1674 bytes)
Hash
433220840e1ed3ccb81a6466a3eb2aec
6270d28f6a2f4074b3497fb16af91099333fcd0a
db73c710a0c7ccc522263dfd6f15b70f2121d2fc24e6039251c4174fb3084da5

HTTP Headers

GET /libs/granite/csrf/token.json HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
etag: W/"66213f0f-68a"
content-encoding: gzip
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/CORREOS-favicon.ico

141.164.54.122

200 OK

110 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/es/assets/recibir_paquete_files/CORREOS-favicon.ico
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel
Size
110 kB (110021 bytes)
Hash
349246ee336d8b2986e584a4fa436128
598b9f95458a2426bf1688d616c4f6f3fea3580e
68554c17c00a589c2b29e1f74ac5efbcd8d30252792626f5fff81955e4d89ae7

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Correos

HTTP Headers

GET /es/assets/recibir_paquete_files/CORREOS-favicon.ico HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 15:36:18 GMT
content-type: image/x-icon
last-modified: Mon, 23 May 2022 11:59:06 GMT
vary: Accept-Encoding
etag: W/"628b770a-1adc5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2

correos-esxpress.tempurl.host/es/Seleccione%20medio%20de%20pago_fichiers/main.css

141.164.54.122

404 Not Found

1.7 kB

URL GET HTTP/2
correos-esxpress.tempurl.host/es/Seleccione%20medio%20de%20pago_fichiers/main.css
IP
141.164.54.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Certificate
IssuerDigiCert Inc
Subject*.tempurl.host
Fingerprint9E:9A:38:39:92:C6:0E:CE:3A:C2:ED:11:0F:88:3D:D8:62:B5:9B:42
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1767), with no line terminators
Size
1.7 kB (1674 bytes)
Hash
433220840e1ed3ccb81a6466a3eb2aec
6270d28f6a2f4074b3497fb16af91099333fcd0a
db73c710a0c7ccc522263dfd6f15b70f2121d2fc24e6039251c4174fb3084da5

HTTP Headers

GET /es/Seleccione%20medio%20de%20pago_fichiers/main.css HTTP/1.1
Host: correos-esxpress.tempurl.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://correos-esxpress.tempurl.host/es/Recibir_paquete.php
Cookie: PHPSESSID=9fc1c40b4c69a224d44ccc673163c059
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Fri, 26 Apr 2024 15:36:17 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
etag: W/"66213f0f-68a"
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML