corroes.site44.com/
200 OK 7.2 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8991)
Hash ec80caa416dd25f55b32423722a8e8fb
a6867a558c1b16032021a5ffe2f10f95c16e1160
7820c82ed435ad2c946d78cede42d465128fea49f40765b39f0207cb932a5777
GET / HTTP/1.1
Host: corroes.site44.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Sat, 05 Nov 2022 22:17:23 GMT
Date: Sun, 06 Nov 2022 04:33:32 GMT
Keep-Alive: timeout=5
Vary: Accept-Encoding
Content-Encoding: gzip
ETag: W/"34610e8feb7c0f12ea8029d913522f65"
X-Varnish: 23790327 21484477
Age: 69083
Via: 1.1 varnish-v4
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=22569
Content-Length: 7209
Connection: keep-alive
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9e164a845d32db8fa51fdb5b1aa218d9
169099b4d2f8e119ab6cf6fca279b6fb535b1759
402ffbf1404cf05c0516c5a8cd5344bd53537ac5150d387730a90c81c17dc9e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "402FFBF1404CF05C0516C5A8CD5344BD53537AC5150D387730A90C81C17DC9E4"
Last-Modified: Sun, 06 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2264
Expires: Mon, 07 Nov 2022 00:22:39 GMT
Date: Sun, 06 Nov 2022 23:44:55 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 05978511215be8462d0b69e33b3a91a3
61535ba131d547f1c5108d9e7763ee3fc8d8c824
cfdbf0f9e88e3c1ae8eb03e46c352633a75d4b2edbfbd57c1c6b52ff1623a109
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3598
Cache-Control: max-age=128766
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 23:44:55 GMT
Etag: "63678ce7-1d7"
Expires: Tue, 08 Nov 2022 11:31:01 GMT
Last-Modified: Sun, 06 Nov 2022 10:31:03 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d8c32b2fb818533a5b3fe5c69157bde9
93594fd3fc50d9d444c28660eabba1edbe4f0588
df8b8ce7a83d11fbe075c8780103c509654f288b5d757d64b696d861a11f3c7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF8B8CE7A83D11FBE075C8780103C509654F288B5D757D64B696D861A11F3C7F"
Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19497
Expires: Mon, 07 Nov 2022 05:09:52 GMT
Date: Sun, 06 Nov 2022 23:44:55 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: sLskOgQMkGETJuYK21WvbSxii4qaOi7raGD6la8vvBtUC3Ztm3xiubgn6oovNyJBORWKAgBjgpU=
x-amz-request-id: 10X4Y77WANY7HQVC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 06 Nov 2022 23:10:38 GMT
age: 2057
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 23:44:55 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
corroes.site44.com/favicon.ico
200 OK 1.2 kB URL HTTP/1.1 corroes.site44.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 96f9b849bdad00d82156acff16f63e9d
5a70a773c772121f5aabc9d61b44b494c5f7bfc7
3e44591d11ce07576de4c2c210b62199c752e73087593bd719073d158cf07a1d
GET /favicon.ico HTTP/1.1
Host: corroes.site44.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://corroes.site44.com/
HTTP/1.1 200 OK
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Tue, 08 May 2012 04:40:28 GMT
Date: Sun, 06 Nov 2022 23:44:55 GMT
Keep-Alive: timeout=5
X-Varnish: 23697193
Age: 0
Via: 1.1 varnish-v4
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Connection: keep-alive
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash d862f992e9902530594e7aca425f129b
25b414fe833d30b52928535d659a1ee281b82e3a
0c6286152fe8bb5fdf1505f2001d530a65ee53aa6d9601bbb1eecb683036071d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5530
Cache-Control: max-age=125645
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 23:44:56 GMT
Etag: "6367792b-1d7"
Expires: Tue, 08 Nov 2022 10:39:01 GMT
Last-Modified: Sun, 06 Nov 2022 09:06:51 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: d6c2pwvCtG3RgOlEfX8OTA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 2JHjS1IBjgO8VKtV0hrDhOVy3II=
ocsp.sectigo.com/
200 OK 471 B IP
Hash 437dd13f8d4d23a3cc96729298df5e3f
9811c10578ee2209a81f40308e3182487a9e8314
0e0f9cb7cbff923f23bfb36fad8896f26f89dbb980a2a1a599172381f4acf074
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 06 Nov 2022 23:44:57 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 06 Nov 2022 21:28:13 GMT
Expires: Sun, 13 Nov 2022 21:28:12 GMT
Etag: "9811c10578ee2209a81f40308e3182487a9e8314"
Cache-Control: max-age=595994,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7661b3357ae4b505-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3044
Expires: Mon, 07 Nov 2022 00:35:41 GMT
Date: Sun, 06 Nov 2022 23:44:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3044
Expires: Mon, 07 Nov 2022 00:35:41 GMT
Date: Sun, 06 Nov 2022 23:44:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3044
Expires: Mon, 07 Nov 2022 00:35:41 GMT
Date: Sun, 06 Nov 2022 23:44:57 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce407165-4cf5-4a06-b191-964755c49697.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce407165-4cf5-4a06-b191-964755c49697.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0518cc57d2cfd5ac6af952483a879e35
78e79bcbfb7ce1ae0101dff32bf43e32e7c705e9
23c95e2d379463858da33db969bc8a40ce7dad4f8a1715b1578f9ea54032905c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce407165-4cf5-4a06-b191-964755c49697.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4497
x-amzn-requestid: 77c9d3fd-5546-406c-8cfc-2ceada5db72f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJOf6ElgoAMFyYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366c465-22a07bd571270e8d2304f5da;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 20:15:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: GljQVBgGz8Bc0wAXiiyJNeD6Eo19eKetCYqCd-HcYyjxIna4DOlJuw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 11:34:56 GMT
age: 43801
etag: "78e79bcbfb7ce1ae0101dff32bf43e32e7c705e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9bbb756-5249-4b34-8849-4de6e2b8bea6.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9bbb756-5249-4b34-8849-4de6e2b8bea6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f89b1eca136f5f378e0630a65e6c65d3
d985016eff9cb2c84e9cb0f1852f73b16eebfd6d
9cd925c0d860cde07875cab7d701a828e15bdffa95b8ba135bfde472813284dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9bbb756-5249-4b34-8849-4de6e2b8bea6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6347
x-amzn-requestid: 41292db8-3d29-4fce-9465-4e33405f42c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bDyeFFP3oAMFuLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364978d-455e931830b585987128ed34;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 04:39:41 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Qych14kRSODXc6HCyuslzfjzsmB5jJEsJ_v8BYTFwjTcQEV51LAfGA==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 16:46:47 GMT
age: 25090
etag: "d985016eff9cb2c84e9cb0f1852f73b16eebfd6d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e2853cc6ec6223160471401e6871f4b
f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 6dc7dc5c-88e9-4550-abf0-f16965ab7cd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bF_38GKXoAMFwSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636579cc-28ea4125437c31cc34683fb7;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 20:45:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: cLOqm36ioY751X1yA1WcQpaXiFYuvzFn8xLQ56MyDTpvi1J4Ruvc9Q==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 06:27:59 GMT
age: 62218
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff18e0e79-3b8c-4713-9c62-00a46f8af202.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff18e0e79-3b8c-4713-9c62-00a46f8af202.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 164b87b6b30f809ec4e8661f2430884e
d3482267a28ba926e6843a0f06a087bb2f500d37
620c8bbd61d3488f8a414cc5dc613279c021d2397bbeaa442cea951a785b8baf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff18e0e79-3b8c-4713-9c62-00a46f8af202.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9735
x-amzn-requestid: bb3ebb5d-21cd-4165-af1a-743643609bbc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJ8WpFIMoAMFZVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63670dc3-53ea9f057443fc8033581e15;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 01:28:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: QtLEK22_ytClwooA0ABF_qIlHq6bzkbq_eJ407JaYPAm89YpAoi5_A==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 09:13:04 GMT
age: 52313
etag: "d3482267a28ba926e6843a0f06a087bb2f500d37"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0cee920-59af-44a8-b927-8cca201ce610.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0cee920-59af-44a8-b927-8cca201ce610.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78d54d3bbd154ae8ac4366cb204ff7a0
f88269b0e066e777dd74b36648b6dbdcf10647b5
f1c14829ae75863531bde481455b5ae20254eb3472604d01b77a6028e4e56bf6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0cee920-59af-44a8-b927-8cca201ce610.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9612
x-amzn-requestid: dd4e6718-3415-413b-bbac-2fdf17dca523
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a9iOjEtoIAMF-LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63621729-35a6494a7e699fdf52b9b68b;Sampled=0
x-amzn-remapped-date: Wed, 02 Nov 2022 07:07:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: eDEsT0S4pW3FVaI4FUHfvqZTRLWM0EwKww7Gfpr2lyk6axQG7MMmwA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 21:48:32 GMT
age: 6985
etag: "f88269b0e066e777dd74b36648b6dbdcf10647b5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3a3eda5-ceb7-4dc4-b1cd-6ce67037090b.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3a3eda5-ceb7-4dc4-b1cd-6ce67037090b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f04b5777f2d31ceeea81eb44f95b1ad
9c8cc6ad24cf350b2e6fa41ec522e097cbbfa826
0f51d5d4491c9ce5265d81b8eb657417187cdbddc9c5853d39f343d1946515fb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3a3eda5-ceb7-4dc4-b1cd-6ce67037090b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6045
x-amzn-requestid: d21b8ecd-77b4-446c-a450-fa0ce2ec1115
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bD9nUFBvoAMFb_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364a961-474388240bca896e6ee6c1e8;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 05:55:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: WKG24BhDslTmmGoFvVcy6vrlkQCtewxZ0_SRtLqiKC7c_G7J9YYm4w==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 12:36:19 GMT
age: 40118
etag: "9c8cc6ad24cf350b2e6fa41ec522e097cbbfa826"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/
302 Found 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/ HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 06 Nov 2022 23:44:57 GMT
content-type: text/html; charset=UTF-8
location: Bienvenido a Correos.es - El Portal Online de Correos.html
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
age: 0
x-cache: MISS
content-length: 0
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 33cd16f0c2e8e5b739ae9cca79d209e0
5c3fc73b47532a6321b07f95810e5363edc8d2e0
ab4f3a598be98852001b4f5b57911dead2dc30a1845a0011781abdf4e03642c7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AB4F3A598BE98852001B4F5B57911DEAD2DC30A1845A0011781ABDF4E03642C7"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5388
Expires: Mon, 07 Nov 2022 01:14:46 GMT
Date: Sun, 06 Nov 2022 23:44:58 GMT
Connection: keep-alive
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
200 OK 53 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
IP
File type PHP script text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (58707)
Hash 9d4f91aa67dc4a94c3e25bc99ccafcb8
0d5f851817fcf5e80fc6119bf67997912354d6ae
e718519c6b7b52dbd3a17a26ced2f04623fd95b4a2ce154d1d04607e64f3450c
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:41 GMT
content-type: text/html
last-modified: Sat, 05 Nov 2022 21:39:47 GMT
vary: Accept-Encoding
etag: W/"6366d823-8a526"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
x-cacheable: YES
age: 55096
x-cache: HIT
accept-ranges: bytes
content-length: 53207
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
uimarketpro.com/js/31d93afad6b167cce0ac3580169a7ce4.js?referrer=https://www.google.com/
200 OK 28 kB URL HTTP/1.1 uimarketpro.com/js/31d93afad6b167cce0ac3580169a7ce4.js?referrer=https://www.google.com/
IP
File type ASCII text, with very long lines (62823)
Hash 2a89cee57cb2642e8ac9b50d54549cd3
5b8da0e466fadade991a5f4666373bd2769bc4c8
f2c530354b7c73e02e632504eab2e5c822f2ca5fe67e3486ba6478b6ce717ea6
GET /js/31d93afad6b167cce0ac3580169a7ce4.js?referrer=https://www.google.com/ HTTP/1.1
Host: uimarketpro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 06 Nov 2022 23:44:58 GMT
Content-Type: application/javascript
Last-Modified: Wed, 22 Jun 2022 13:23:30 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
ETag: W/"62b317d2-f568"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, OPTIONS, GET
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css
200 OK 18 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash e58df9cec56c886bd5325c4199f1d977
e28a2bbf9b128a710f8fe74769df90cc1ed6ae59
f31949bf870133dec95482487d27998b6ae73fe98c1bfb8e3280f5c51e269615
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: text/css
last-modified: Sat, 05 Nov 2022 20:20:54 GMT
vary: Accept-Encoding
etag: W/"6366c5a6-1fb46"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 55096
x-cache: HIT
accept-ranges: bytes
content-length: 18526
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-base.css
200 OK 2.1 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-base.css
IP
File type ASCII text, with very long lines (1469)
Hash 2162e2ed5c6a5b5c3427e560ede12f61
d3987bb89d0f60fbeeb3b004be43d3e9da524db2
5f4a3e24bb0df65b3c2e36b0b1676d909df86bb259dcde764cd55ece1d381089
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-base.css HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: text/css
last-modified: Sat, 05 Nov 2022 20:20:54 GMT
vary: Accept-Encoding
etag: W/"6366c5a6-1456"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 55096
x-cache: HIT
accept-ranges: bytes
content-length: 2084
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.css
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.css
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.css HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 06 Nov 2022 23:44:58 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.css
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.css
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.css HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 06 Nov 2022 23:44:58 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.js.t%C3%A9l%C3%A9chargement
200 OK 34 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (32759)
Hash 4635bffccc756e9a52eae8011adb9137
8c6d308daac07e23764c6dcf2f0d305931dfddb7
92c5b25edbc4647c55be848b92ea22fd4618cc3252a2364025262e18a7430f84
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 33481
last-modified: Sat, 05 Nov 2022 20:20:53 GMT
etag: "6366c5a5-82c9"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.js.t%C3%A9l%C3%A9chargement
200 OK 372 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.js.t%C3%A9l%C3%A9chargement
IP
Hash 51d697b6110e35dc0a87a172487ee4aa
dc6b25c5414b9b559774e9320987fbe325192a44
5e472f1a234f9be27a0c865ff5c8d8ca674c09b3960bdd63e0d0f6ea8e1a02ac
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 372
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-174"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js.t%C3%A9l%C3%A9chargement
200 OK 64 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (58777)
Hash 0b8a8dee8199692e9dedee3e516c35ca
4d8b6bc1842d1f91e617e556ca5918810615fe3b
e547fe50a764e43c4a31eee65d715869f35c7ad8d781584453561b87c4fcf7f3
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 64055
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-fa37"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/usuario.png
200 OK 2.3 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/usuario.png
IP
File type PNG image data, 40 x 47, 8-bit/color RGBA, non-interlaced\012- data
Hash 24b1f6b9e40c680c7669234cb261e9c1
9d5f261cf1f8cf60204c5aa4eeb4b7c890ef5948
263ba4741dba44c404dc7175d9223bd179a9c05c879e0b23ccd6ef44fdf3cbbb
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/usuario.png HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/png
content-length: 2285
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-8ed"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.min.js.t%C3%A9l%C3%A9chargement
200 OK 372 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.min.js.t%C3%A9l%C3%A9chargement
IP
Hash 51d697b6110e35dc0a87a172487ee4aa
dc6b25c5414b9b559774e9320987fbe325192a44
5e472f1a234f9be27a0c865ff5c8d8ca674c09b3960bdd63e0d0f6ea8e1a02ac
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.min.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 372
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-174"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/LogoCornamusa.svg
200 OK 1.2 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/LogoCornamusa.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2761), with CRLF line terminators
Hash 947ef162543253ab828a76e306ea0578
c8134fbb3c6c1cad9b667a21f4e54eaf283577d7
4afd52dd55956a5e253f5290f5c2140fd1712cb165c58839e595e41e95686487
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/LogoCornamusa.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-d50"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
content-length: 1239
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/google_play.jpg
200 OK 12 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/google_play.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 270x80, components 3\012- data
Hash 71405560fcf941f01e531e8564ad9e3f
a970b8084d6e7cdd714dbd1add272ac630cd9fe9
bda17ffead5e3809b288330e7aa2d2b689c45cfadcef8249416d07afe34477a7
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/google_play.jpg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/jpeg
content-length: 11827
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-2e33"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/deco_bars.svg
200 OK 390 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/deco_bars.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82304b9a0023912a7a5ecf6bc3423a4d
74cdfe76217be9aef762ccc76c807b54bc627a35
0fbc2616c8ad67b276f458ff1896e233a0f803314318197dc00a13d53d026097
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/deco_bars.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-391"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
content-length: 390
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/mastercard.svg
200 OK 6.9 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/mastercard.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (1312), with CRLF line terminators
Hash fc7f0e07f6e0efb9ca91a3a1404e00b3
c7d7c9cfe004695b784b6e207dcf77b2ac66c47a
3304180cc11e7f15a02f3012522f1dbee84e849a7f2dbfa6244a7a50b03db972
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/mastercard.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-46ce"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
content-length: 6903
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/apple_store.jpg
200 OK 11 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/apple_store.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 250x82, components 3\012- data
Hash 498c4a8cc089ec2fc0b87f460924b9b4
324b0ef1cf07829216653bf3fca04add4ebf553f
509066150aa1da2b163e681cff62f67f0becd0bb65cded95be964371835798f6
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/apple_store.jpg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/jpeg
content-length: 11255
last-modified: Sat, 05 Nov 2022 20:20:53 GMT
etag: "6366c5a5-2bf7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/deco_triangles.svg
200 OK 451 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/deco_triangles.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 9f484954ec83afedf792b8a54262b528
e6bbe505e712c396e0dca15915f68fa897f5ed77
e9fd41da5588466d5e7fda079a6555b926a422449e22e61e13c8356411fce3a8
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/deco_triangles.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-4bb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
content-length: 451
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/paypal.svg
200 OK 2.6 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/paypal.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (1241), with CRLF line terminators
Hash 3b5cc9c768101ad99dec6f71fb89e017
dfb773903162cf322d3e65a1909d568e05c5eb3c
3481cd3cd3131f6ce35aa4753d7a326f7e0b8e9ecf0cc048d467d9211a6afc86
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/paypal.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-196c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
content-length: 2629
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/maestro.svg
200 OK 5.1 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/maestro.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (1301), with CRLF line terminators
Hash 22041b12bca6f171fef02997650fd6f1
8a1d301c18d8ed7f72b94e2ad72b7b4848cea8a7
94ee583cf1e89e57d0e2090fdf6d49fc23c7b1affb7b12ff0ad0e605238bf20e
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/maestro.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-3200"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
content-length: 5069
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/huawei.svg
200 OK 9.9 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/huawei.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (2050), with CRLF line terminators
Hash ec48cd7f9e55e5a0fed3748fe377362f
c4cf5d3a82a05996133e8afd441e064734d17c43
9d18a83a0fa960887ca5b4f86d261c7c52c32bfc74c3dd610a3b87bc4fc38d99
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/huawei.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-62a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
content-length: 9858
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/visa.svg
200 OK 1.4 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/visa.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (989), with CRLF line terminators
Hash a95d85570b0c3df7a53065a80171afa6
af7a613fe88309714f3c96d30d5c78c8957a2ce2
f70678ce5ee585470eec043aea512b8009bbc82d58855458cafa9f7a3bb48cbc
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/visa.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-c92"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
content-length: 1442
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/ico-splash.svg
200 OK 776 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/ico-splash.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1299), with CRLF line terminators
Hash 6a39d90eaa5689d12961123917cc3660
b73924456cbacc2f92c2c3b066b4ac869f05dc5e
e4dbe445c7c478bc0ae4fded706a24c2a0596ca9f8f4e3cc8db3dee466723b1a
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/ico-splash.svg HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/svg+xml
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
vary: Accept-Encoding
etag: W/"6366c5a8-5d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-encoding: gzip
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
content-length: 776
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/EAwards.png
200 OK 6.1 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/EAwards.png
IP
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 67a30e9b7d955f7b0e7e7cc4f46f6bea
26a488d3727605f5c0918ce247112cda3e81cf26
a612c443b0ef94f8b2d4ab4b13fa53b0b91a27bf0626269ac62981a2ba3a595a
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/EAwards.png HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/png
content-length: 6080
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-17c0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-provider-correosid.js.t%C3%A9l%C3%A9chargement
200 OK 1.1 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-provider-correosid.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (544)
Hash ed8e3f9c92c02f27ac1f60e6503eb3e8
b292b50ffe2cc1266df6594385b5abc115c828b2
1a8c9179d1d4fef9308485f10fc5a296254604b7b02f449f0c325d704fe9d1fc
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-provider-correosid.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 1137
last-modified: Sat, 05 Nov 2022 20:20:54 GMT
etag: "6366c5a6-471"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/container.js.t%C3%A9l%C3%A9chargement
200 OK 752 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/container.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (514)
Hash 64e934d0a16266574945c8fb92e68316
56cd0c08e7bf1a5f363ec4bdafb6c926814713ea
c69737729bfeffad46e66417ed01bff74a95b62b5265abafe011777f5d87f09f
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/container.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 752
last-modified: Sat, 05 Nov 2022 20:20:54 GMT
etag: "6366c5a6-2f0"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/ario2020.png
200 OK 33 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/ario2020.png
IP
File type PNG image data, 400 x 350, 8-bit/color RGBA, interlaced\012- data
Hash 3719fadf2f228ad6608aabced589b630
da67e6e65c24bf6dee6ba33a8bf339ab8e3dee0e
15ad4c1d5c432561e857f8e94c00ef57abf90c5eb82ae0457f51b1fccde3d5f3
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/ario2020.png HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: image/png
content-length: 32574
last-modified: Sat, 05 Nov 2022 20:20:54 GMT
etag: "6366c5a6-7f3e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 12a1f191d3251cadd0fce23ca14e1a5d
a95b5c8eafe5d0ae8d78c77d4965ba1c486ec864
95b318059b6735c7221e60eabe0489c228c705c47a5f6adc8f829ac0f3c5f77c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 23:44:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-MX9JL63
200 OK 38 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MX9JL63
IP
File type ASCII text, with very long lines (1921)
Hash ebce1bdf527bf70302928830412451da
5820ffabb6b58348107ee3dc76b643334cbbbbab
fadb9a7c187c8234b3b6c970caf35535d5a9b1bd0456a8177e6cec79108afbaf
GET /gtm.js?id=GTM-MX9JL63 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 06 Nov 2022 23:44:59 GMT
expires: Sun, 06 Nov 2022 23:44:59 GMT
cache-control: private, max-age=900
last-modified: Sun, 06 Nov 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 37674
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 12a1f191d3251cadd0fce23ca14e1a5d
a95b5c8eafe5d0ae8d78c77d4965ba1c486ec864
95b318059b6735c7221e60eabe0489c228c705c47a5f6adc8f829ac0f3c5f77c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 23:44:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/31d93afad6b167cce0ac3580169a7ce4.js.t%C3%A9l%C3%A9chargement
200 OK 63 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/31d93afad6b167cce0ac3580169a7ce4.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (62823)
Hash d6ddaa3e42dd1f5800f2d0486f9dd27f
a2ed0834fa9945634337839fb60c450b05758a17
e31ae1d6b64683fd9de74c8795491cad2210bb8a065dcec1220c4a0f251aed20
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/31d93afad6b167cce0ac3580169a7ce4.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 62824
last-modified: Sat, 05 Nov 2022 20:20:53 GMT
etag: "6366c5a5-f568"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55097
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.css
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.css
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.css HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 06 Nov 2022 23:44:59 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.css
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.css
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.css HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 06 Nov 2022 23:44:59 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.js.t%C3%A9l%C3%A9chargement
200 OK 372 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.js.t%C3%A9l%C3%A9chargement
IP
Hash 51d697b6110e35dc0a87a172487ee4aa
dc6b25c5414b9b559774e9320987fbe325192a44
5e472f1a234f9be27a0c865ff5c8d8ca674c09b3960bdd63e0d0f6ea8e1a02ac
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 372
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-174"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55096
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.js.t%C3%A9l%C3%A9chargement
200 OK 33 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (32647), with CRLF, LF line terminators
Hash db9d1d4af58b004a52e5e6b2f9e1bb3c
7a60c646c2848ee27476c8fd671d0e595b1f7eb3
37a3e2ee43d04198440258814f0fe2712422818142e0daf1233baa78512f089c
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 33481
last-modified: Sat, 05 Nov 2022 20:20:53 GMT
etag: "6366c5a5-82c9"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55096
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff2
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff2
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff2 HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 06 Nov 2022 23:44:59 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/gtm.js.t%C3%A9l%C3%A9chargement
200 OK 200 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/gtm.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (32699)
Size 200 kB (199692 bytes)
Hash 9bf678e1cf8ebf044b95cff99a0ebc99
2e769b9e067bf03cf617dcf04afe5fa36977dba3
f7efbece215fdafe455139a0d24181229ac4eb34767acec2010bc1177070d55e
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/gtm.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 83223
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-14517"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55096
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js.t%C3%A9l%C3%A9chargement
200 OK 45 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js.t%C3%A9l%C3%A9chargement
IP
File type ASCII text, with very long lines (43487), with CRLF, LF line terminators
Hash 4a532217e7c87b78388c0ad24c23fe25
af8f3da49c6d7f4192a2953654f6d93133b46bac
d1f41990aa68622d77e712c03e607a6c23fedec2e404e7becf0d008a8752df43
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 102077
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-18ebd"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55096
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422
200 OK 118 kB URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422
IP
File type ASCII text, with very long lines (64471)
Size 118 kB (118479 bytes)
Hash e8c4d48e1456c360a309ccc3d368f65f
e22a17fb8d9a1a8b4e92e7483ce7971d8025b87c
4da4f7642cc5c5041bf55dc4df2f15d3a5c017271562346884ce5bb93fd50204
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422 HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 294444
last-modified: Sat, 05 Nov 2022 20:20:53 GMT
etag: "6366c5a5-47e2c"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55096
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-regular-webfont.woff HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 06 Nov 2022 23:45:00 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-light-webfont.woff HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 06 Nov 2022 23:45:00 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/cartero-bold-webfont.woff HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 06 Nov 2022 23:45:00 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1655128335527.woff
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1655128335527.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1655128335527.woff HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 06 Nov 2022 23:45:00 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1655128335527.ttf
404 Not Found 146 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1655128335527.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert fortinet Phishing
GET /etc.clientlibs/correos/clientlibs/clientlib-base/resources/assets/fonts/correos-icons.1655128335527.ttf HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 06 Nov 2022 23:45:00 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js(1).t%C3%A9l%C3%A9chargement
429 Too Many Requests 117 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js(1).t%C3%A9l%C3%A9chargement
IP
File type HTML document, ASCII text
Hash 2dccf9a2e169c68dd4f3bd5ea163e45e
4ddcf984285a5c544ed1132f5f6efd7a5d01b470
ae138caf8767f7be2fe6f47f1663b0e2e28d903264707aa9b6f73bb7b223902c
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js(1).t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 429 Too Many Requests
content-length: 117
cache-control: no-cache
content-type: text/html
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js(1).t%C3%A9l%C3%A9chargement
429 Too Many Requests 117 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js(1).t%C3%A9l%C3%A9chargement
IP
File type HTML document, ASCII text
Hash 2dccf9a2e169c68dd4f3bd5ea163e45e
4ddcf984285a5c544ed1132f5f6efd7a5d01b470
ae138caf8767f7be2fe6f47f1663b0e2e28d903264707aa9b6f73bb7b223902c
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js(1).t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 429 Too Many Requests
content-length: 117
cache-control: no-cache
content-type: text/html
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.min.js.t%C3%A9l%C3%A9chargement
429 Too Many Requests 117 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.min.js.t%C3%A9l%C3%A9chargement
IP
File type HTML document, ASCII text
Hash 2dccf9a2e169c68dd4f3bd5ea163e45e
4ddcf984285a5c544ed1132f5f6efd7a5d01b470
ae138caf8767f7be2fe6f47f1663b0e2e28d903264707aa9b6f73bb7b223902c
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/RC1a1c48c0265b429692b066dca69dafb4-source.min.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 429 Too Many Requests
content-length: 117
cache-control: no-cache
content-type: text/html
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.js.t%C3%A9l%C3%A9chargement
429 Too Many Requests 117 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.js.t%C3%A9l%C3%A9chargement
IP
File type HTML document, ASCII text
Hash 2dccf9a2e169c68dd4f3bd5ea163e45e
4ddcf984285a5c544ed1132f5f6efd7a5d01b470
ae138caf8767f7be2fe6f47f1663b0e2e28d903264707aa9b6f73bb7b223902c
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 429 Too Many Requests
content-length: 117
cache-control: no-cache
content-type: text/html
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a90e5e9881ca2ceb761e2bbdac2117cc
75719c1c90b3cd710a31802f7317cdb2faf6dbae
09ae7502fc9bb4dfdf2735da228ce5f91cdeb16dd1b777f9cce888105c467a81
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=161482
Date: Sun, 06 Nov 2022 23:45:03 GMT
Etag: "63681ac9-1d7"
Expires: Tue, 08 Nov 2022 20:36:25 GMT
Last-Modified: Sun, 06 Nov 2022 20:36:25 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 5P-pS6LUzFD__HFmEr35YXsmgA9paJVepZD6F1vmIpO35pVycbxfQQ==
www.correos.es/content/dam/correos/imagenes/iconos/CORREOS-favicon.ico
200 OK 18 kB URL HTTP/2 www.correos.es/content/dam/correos/imagenes/iconos/CORREOS-favicon.ico
IP
File type MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel\012- data
Hash f73085e029c5a02fc8203fbe9e2f0a44
34bf21870c8d6e304c13cdf5adefa57821abd34f
46829a75450c4665c2d0b7ae641fb49b287423d471446465b1c330d116bb3eb0
GET /content/dam/correos/imagenes/iconos/CORREOS-favicon.ico HTTP/1.1
Host: www.correos.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/x-icon
content-length: 17992
date: Sun, 06 Nov 2022 23:45:03 GMT
server: Apache
x-server: server1
x-content-type-options: nosniff
last-modified: Wed, 14 Apr 2021 14:00:47 GMT
accept-ranges: bytes
content-encoding: gzip
x-frame-options: SAMEORIGIN
etag: "1adc5-5bfef2c6d41c0-gzip"
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iyjqErM_kirO8AbKljhPY7xQ2GLAhDuSrJd20Wjh-73BXC7DqjIRBA==
age: 869432
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-provider-correosid.js.t%C3%A9l%C3%A9chargement
429 Too Many Requests 117 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-provider-correosid.js.t%C3%A9l%C3%A9chargement
IP
File type HTML document, ASCII text
Hash 2dccf9a2e169c68dd4f3bd5ea163e45e
4ddcf984285a5c544ed1132f5f6efd7a5d01b470
ae138caf8767f7be2fe6f47f1663b0e2e28d903264707aa9b6f73bb7b223902c
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-provider-correosid.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 429 Too Many Requests
content-length: 117
cache-control: no-cache
content-type: text/html
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141f574b-1b55-4186-956e-8642177cdb25.jpeg
200 OK 3.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141f574b-1b55-4186-956e-8642177cdb25.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 94959d4cb29e07f42189a4096cb351e3
6b029e3b6dce5dade03b7ab7409b45e9906b7303
d1d3590af3a65ec3bc37da401e5d9d9394feea447bd8ca3173819f8a9f2612f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141f574b-1b55-4186-956e-8642177cdb25.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 3644
x-amzn-requestid: a899a1f5-71c6-4c64-99fa-227cbf3ff69d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bMtV9HJPIAMF-Kw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636828f2-5e7d31f948cd08d9767deed6;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 21:36:50 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: fiqF9sb2I-lRc-9pak_PPKpPFsiwpRblak8dB0WvRqIfFgPcHSOBbQ==
via: 1.1 ec2a2c75c16156e4d43504606c118b90.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 21:48:23 GMT
etag: "6b029e3b6dce5dade03b7ab7409b45e9906b7303"
content-type: image/jpeg
age: 7001
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422.js.t%C3%A9l%C3%A9chargement
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422.js.t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 294444
last-modified: Sat, 05 Nov 2022 20:20:53 GMT
etag: "6366c5a5-47e2c"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js(1).t%C3%A9l%C3%A9chargement
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js(1).t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/identity.js(1).t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 64055
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-fa37"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-base.js.t%C3%A9l%C3%A9chargement
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-base.js.t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-base.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 128839
last-modified: Sat, 05 Nov 2022 20:20:54 GMT
etag: "6366c5a6-1f747"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/launch-22ce7a1a18b2.js.t%C3%A9l%C3%A9chargement
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/launch-22ce7a1a18b2.js.t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/launch-22ce7a1a18b2.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 244154
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-3b9ba"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js.t%C3%A9l%C3%A9chargement
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js.t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 102077
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-18ebd"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.js.t%C3%A9l%C3%A9chargement
404 Not Found 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.js.t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-dependencies.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 06 Nov 2022 23:44:58 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://golden-corroes-be96ec.ingress-erytho.ewp.live/wp-json/>; rel="https://api.w.org/"
content-encoding: gzip
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.js.t%C3%A9l%C3%A9chargement
404 Not Found 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.js.t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/clientlib-site.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 06 Nov 2022 23:44:58 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://golden-corroes-be96ec.ingress-erytho.ewp.live/wp-json/>; rel="https://api.w.org/"
content-encoding: gzip
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.min.js.t%C3%A9l%C3%A9chargement
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.min.js.t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.min.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 33481
last-modified: Sat, 05 Nov 2022 20:20:54 GMT
etag: "6366c5a6-82c9"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55096
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/31d93afad6b167cce0ac3580169a7ce4.js.t%C3%A9l%C3%A9chargement
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/31d93afad6b167cce0ac3580169a7ce4.js.t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/31d93afad6b167cce0ac3580169a7ce4.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 62824
last-modified: Sat, 05 Nov 2022 20:20:53 GMT
etag: "6366c5a5-f568"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55096
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/786617442172422 HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 294444
last-modified: Sat, 05 Nov 2022 20:20:53 GMT
etag: "6366c5a5-47e2c"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js(1).t%C3%A9l%C3%A9chargement
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js(1).t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/fbevents.js(1).t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 102077
last-modified: Sat, 05 Nov 2022 20:20:56 GMT
etag: "6366c5a8-18ebd"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.js.t%C3%A9l%C3%A9chargement
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.js.t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/correos-ui-kit.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 104323
last-modified: Sat, 05 Nov 2022 20:20:54 GMT
etag: "6366c5a6-19783"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55096
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.min.js.t%C3%A9l%C3%A9chargement
200 OK 0 B URL HTTP/2 golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.min.js.t%C3%A9l%C3%A9chargement
IP
Analyzer Verdict Alert fortinet Phishing
GET /CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos_files/AppMeasurement.min.js.t%C3%A9l%C3%A9chargement HTTP/1.1
Host: golden-corroes-be96ec.ingress-erytho.ewp.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://golden-corroes-be96ec.ingress-erytho.ewp.live/CORSAS/cor/Bienvenido%20a%20Correos.es%20-%20El%20Portal%20Online%20de%20Correos.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 08:26:42 GMT
content-type: application/octet-stream
content-length: 33481
last-modified: Sat, 05 Nov 2022 20:20:54 GMT
etag: "6366c5a6-82c9"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
x-cacheable: YES
age: 55095
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
3.230.29.177
18.202.7.144
23.36.76.226
93.184.220.29