{"report_id":"b17b2d2d-1670-468d-b9a5-046e7c4bf4da","version":6,"status":"done","tags":[],"date":"2026-01-04T15:35:57Z","url":{"schema":"http","addr":"correosprepago.bnext.es","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"correosprepago.bnext.es/","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"title":"Mi tarjeta | Correos Prepago","dom":{"size":625,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (625), with no line terminators","md5":"7b6bb9fda7c1a0b4be9947b80b3cbe8d","sha1":"edac1dcf83e1742a2e44b1eca506acd90124f117","sha256":"833f9cf3eab57350db3010a93240bcf6090ff5d3bf8ee017eec14c0f603118ab","sha512":"083084dfa4d5ffde6c8e076752992362c8d60804d28759a3db1a0840a35fd3815ef187d731466fecf81b43418eefe537277eb217a83493b3a19fdc57ab58b915","ssdeep":"","tlshash":"13f0dd5e20891b2ccb70c2f97c8b333921680110a4198de42197d2d06ca5ec68962fc6","dom_hash":"domhash48ac854a4779f478aeefcee14490c06d","first_seen":"2025-10-26T13:40:47.336932Z","last_seen":"2026-08-12T14:42:46.898534Z","times_seen":17720,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"correosprepago.bnext.es","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-08T15:35:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Correos","trigger":"correosprepago.bnext.es","verdict":"phishing","severity":"medium","comment":"Correos","link":"https://openphish.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Correos","trigger":"correosprepago.bnext.es/","verdict":"phishing","severity":"medium","comment":"Correos","link":"https://openphish.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"consent.cookiebot.com","ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-01-21","domain_rank":29038,"first_seen":"2014-02-26T14:48:42Z","last_seen":"2025-12-29T00:53:40.781476Z","alert_count":0,"request_count":2,"received_data":485698,"sent_data":1042,"comment":"","tags":null,"fingerprints":null},{"fqdn":"consentcdn.cookiebot.com","ip":{"addr":"2.20.163.160","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2010-01-21","domain_rank":35798,"first_seen":"2018-05-23T05:13:43Z","last_seen":"2025-12-29T02:16:45.532344Z","alert_count":0,"request_count":2,"received_data":2436,"sent_data":1074,"comment":"","tags":null,"fingerprints":[{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]}]},{"fqdn":"imgsct.cookiebot.com","ip":{"addr":"2.20.163.160","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2010-01-21","domain_rank":38100,"first_seen":"2023-11-22T13:44:39Z","last_seen":"2025-12-29T07:01:18.58969Z","alert_count":0,"request_count":1,"received_data":766,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-28T22:17:36.419718Z","alert_count":0,"request_count":5,"received_data":1906995,"sent_data":2235,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"correosprepago.bnext.es","ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":2337796,"first_seen":"2023-04-22T13:29:54Z","last_seen":"2025-12-14T23:53:13.766657Z","alert_count":24,"request_count":8,"received_data":1620012,"sent_data":3925,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"www.google.com","ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-12-28T22:22:31.188277Z","alert_count":0,"request_count":3,"received_data":1644,"sent_data":2945,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"correosprepago.bnext.es/","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2424433fe4ddfcb5dfd26e1e1bd69b29","sha1":"42df9fe0d7d9ac32c9f3347ea0d86b59f74326ff","sha256":"b8c95af3fd9a7b554620d255577c41cc6fc2da6cb8b3b65b0fce03bda4882ab7","sha512":"f7f2f8522330704e3a659c0585370b5c7f775ea00a62ab19be8e4f9fd58932bc7cc953d8b29b7de32d6002a751a50bf40ccdad7b7524bd5bfc584e0f5767800a","ssdeep":"","tlshash":"7ff023977a9914742e4b917557394d1921a2312ba44510337dfcc5252f0876a4954ef8","size":553,"data":"","first_seen":"2025-04-06T10:15:29.815562Z","last_seen":"2026-04-08T16:41:51.015917Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"28b6cc63ab9bd9b7c5c747d8b767a9f3","sha1":"f977f2bbc718cebaebdc2b7602567f63d0cc312b","sha256":"19ff5b5544083f5b1280af693c2c900fb0f87c2fd92e4ef63492593ce5544481","sha512":"9848c5b25670266e84d829250e0df0e45188868719f72e31506fc4d30fabcb06cc55c2261f4af9bfc48b4b619238824ec7893c946261087e20bde951119137fd","ssdeep":"","tlshash":"90c011b82238200c08002200880e2a8030c2a2030e0028e8380c8303af3e80baaaabc8","size":131,"data":"","first_seen":"2025-04-06T10:15:29.817523Z","last_seen":"2026-04-08T16:41:51.020379Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b24692dda0130b91da3affc910dd79cb","sha1":"53dd5a844b372fa8c6ff122a4e934b80de212e43","sha256":"5e393cb5a3d9cf8a41a858e54b04c34706062147a18cfabff07ca01a6c134b5b","sha512":"fe53a9ea5cbee472604d053a08253ef92d432ff62f449862f57e62fcee176d007f5ff99d2d656727ce373f539c1b909a54502a75010db78bc58ad626936d9a42","ssdeep":"","tlshash":"6f110845cf3b29f44118a29f3bc7610031b290df8c9d94843b5d5e6c7f6e41626b296c","size":885,"data":"","first_seen":"2025-10-04T10:09:38.335984Z","last_seen":"2026-04-08T16:41:51.025215Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f301074a8a13124a3e1303cd18dee96f","sha1":"af46e375e4fc64e0c0f80a4af5fab0c2b2a574a1","sha256":"c85dcf1550537ec7355eaead45c95845d0953adbfadc4c35e7f7be04cfa956c4","sha512":"05f6eff105640ebe3f3d913e669fe37faacc9e3b6fa7a3e83326d0b7a55c2dafe9b56ef4bbee13da070bcd6dda003fec0d2c6042d68f89df8430c3cd3f317799","ssdeep":"","tlshash":"37e0a3191c1eb42127b41a68f6378d1530d5120625461655c7c7c4543970cca58c5b4c","size":422,"data":"","first_seen":"2025-10-04T10:09:38.340488Z","last_seen":"2026-06-25T01:10:02.481891Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=DC-14618615","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7f9a101583eed773a4055b3ae558aff","sha1":"f8b753b3622108ce8f56693404ea02a808d000dc","sha256":"25ecdc22e051cdf9e9e5621f6ca4b846cb8bd2de4f5733682350c90ac22ac5f7","sha512":"aa0dfdc5f7462d04790c9feb4da0334b295ce90a7892d89fe9d485162a2b0c8c56dfcaf4a7e45e11713f721aede3c7b5ade26de0c9dcfdeadd78ab332214f21f","ssdeep":"6144:PIeJF2bulKYE1u99O5HDmHYmyBFzfns9X2Wov2RypJkH:gvbu7E1mYDnsgWcpc","tlshash":"856408cdb3c674668393a478403f114ba17b6a92f84cc895f186cce42d74aaa4277f7d","size":336424,"data":"","first_seen":"2026-01-04T15:36:05.653583Z","last_seen":"2026-01-04T15:36:05.653583Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-PDQRXXSD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f346c7cba233f2baea919864e3dab6e4","sha1":"87bbf332e486a31f52312dea97f2584af2eea5a6","sha256":"e34f7b03f4cf942765dfb1a0d98e6715d9408fff99766bffbe75a3f087842db4","sha512":"4d91fde96b65aad682f57d832ecf7588d49c4ecf906be9feda419ff61513d4a626f8952fa1b3642416f38fa881ef2f6694fc18d6d3e7d1a25df5c9b1bd22aa10","ssdeep":"6144:gq4xrIeJK2bulKYXV1u99Yye5HDmHYmyBFz0nss20WllzpRXd:14bu7l1mcAnsEWrpz","tlshash":"028419cdb3c6706683a2a478503f114ba57b6ad1f44cc895f186cce42e74aaa0277f7d","size":383454,"data":"","first_seen":"2026-01-04T15:36:05.677964Z","last_seen":"2026-01-04T15:36:05.677964Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e058db184ef8a0a97a633b81c83f055","sha1":"cb105cee81539f4f9c3d35386f90b02e508b91e8","sha256":"3fed1f434b26d4d8e0a0d507c1324e8bdf9f9b6910bd2271425be8c9794a1297","sha512":"f51b13d47580b0f10c68dc359c2dfdd1f4508b8fc9cc54ae4c4dce7a58aeac95da3f9b29de61a25cb24740ebfe16dcf7339efedbffb332beebe2038e14864025","ssdeep":"","tlshash":"1ff00e5a2c43b45b33e96139c367962a2b22070368c2c909ba0d88043fd88962c46ece","size":594,"data":"","first_seen":"2025-11-26T15:41:02.619443Z","last_seen":"2026-04-08T16:41:51.028516Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"330c56b16a4c99e09f6b7ae605dd9a8c","sha1":"4ba47e16760cc359076fd16ba7bccebb43c9f2af","sha256":"6599bd8710d2bb51ca195984fee190d4636c718189f16dcac270c2d5e47cfd80","sha512":"124e65b90d7beb33d4dd7305b42152b55beae5e8c41b0091276304b564699b8752c2a3292ecd65570125f43d1cb464c7df020d5fadcf6c89a80f77551f8aed0e","ssdeep":"","tlshash":"2e017d490d37483c8deb164faf3fd845666220177542d1013e8ea7145f40b4bad12d54","size":837,"data":"","first_seen":"2025-10-04T10:09:38.33878Z","last_seen":"2026-04-08T16:41:51.031564Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/assets/index-j48fKogV.js","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eaf9393b05b83a95696bfddc34942dc3","sha1":"f11c4eb792dc3bb59897947dc6e257f8e998f46f","sha256":"d5e2db0e5bfb58ad1ecec4c5c8f34bd4e357893eb2cb9d5455fbce9fc7bebdd8","sha512":"a0885d1ade7f7c0bf2ba21638706746a70dfc99131ca8e15ba53092110eafbd519b65321f7a5db68fdeeaeb6a3376ea574f2553a89f0e9573f04d0975be99572","ssdeep":"24576:nfVb6w5caaev+XWdM86dW7SJLed95Kbt7TraKfakC/R93BztwtW3H0Le8K/rpgVM:fVb6w5caaev+XWdM86dW7SJLed95KbtM","tlshash":"a2658ce83292b1b656b261e5403f4106b33d2c25b80cc458f2fdddee39a5846617bfb9","size":1502868,"data":"","first_seen":"2025-11-28T05:40:01.952146Z","last_seen":"2026-01-12T06:03:06.353079Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.cookiebot.com/uc.js?cbid=0eba5902-eab7-47f3-a3e1-b72f0082f2dc\u0026implementation=gtm\u0026consentmode-dataredaction=dynamic","fqdn":"consent.cookiebot.com","domain":"cookiebot.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdd58d0822380c3cb5cd06311f24f847","sha1":"a1d5f150d05fe3391fedcd4da649097f6e399414","sha256":"d368c59e7d4370df82cea7ad2eb5d7854b28e9c2ba61898294f0efa7c73ea2c9","sha512":"184ff75d492fd6cf7d15cb451ed7dadae983d8771078cd3023a3f67e1a39e64b183bd248cc07730f95164336a78199f248b43e157b3de335bc15c9ad3718e5a9","ssdeep":"1536:emmcIXtZ3UF2fzRJj9qs6MoCzs6BITnPG0omiuYMdXqD1nEqZUgJeW5QKF9xFRDk:+RCTn/ox+f2XmX","tlshash":"a6b3a3a67284a6791bea11f5762b1759323223952844c1bdb878ecf01424f873877ffb","size":117757,"data":"","first_seen":"2025-12-18T08:05:59.554701Z","last_seen":"2026-01-15T09:20:55.97548Z","times_seen":2908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16724062921\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7e0f6348c47b678ed9911cf1a4e8bfb","sha1":"99e42adff94be3dd0e41024cba9c174b68e3e652","sha256":"2712347577959ca9ad14407d5a62f83127ad3c3514462a4ad4efdb9971b0e2ea","sha512":"3598e3137175432c078dd724c55211c02fff9a4a91de1fb20a272bf6ca0a400e2db9cf7b0595a4fbd9f55af8a288d3005badde8c95ff9af58faf574025231a05","ssdeep":"6144:fIeJ92bulKYXV1u99Yye5HDmHYmyBFzfns9R+WllypX7:wpbu7l1mcDnsyWapL","tlshash":"da6419cd73c6746a83a3a478503f114ba17b6e91f84cc884f186d8e42d74aaa4277f7d","size":335675,"data":"","first_seen":"2026-01-04T15:36:05.679516Z","last_seen":"2026-01-04T15:36:05.679516Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consentcdn.cookiebot.com/sdk/bc-v4.min.html","fqdn":"consentcdn.cookiebot.com","domain":"cookiebot.com","tld":"com"},"ip":{"addr":"2.20.163.160","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3ec01c3d295c22ea26afa0db60f3cd2","sha1":"1b4b3461aa8d9b25a1c5f9e7472fabb0fe410053","sha256":"2eca2b34bebf4e267d33b18974f96e62281bb48795c85db0c5c4c9ef1f9d4ef4","sha512":"502ad1f0130560b0e52e4a5f0dc98d9d5b4f7e0813e83eebeaf5a88f9d7422887c30ff9331614598ee5742bfca0548c7bae1c66534d7fbfa761da52471fbbe03","ssdeep":"","tlshash":"84f0a60a218e1f2ccba1c2feb88b333521a90110a41a4df46167c2d06ca5ec69662bc6","size":569,"data":"","first_seen":"2025-03-02T06:54:27.457465Z","last_seen":"2026-08-12T17:39:16.253775Z","times_seen":67014,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"25897424bd951e6693cfb39209750935","sha1":"3ade4bb94f4641dd89a2e9e206b1cc57b61c2ad6","sha256":"46e86c586ae5a328a8ed50ad0b3b650d424cb3f5548d0fe5d9551c43fe8203ac","sha512":"6bb3e34359493bcb3c4fe11fe5f428e2ba579c64255958992ccd4e76948f71dbf6c2c9a925f36691cce6d8fb5d0d958cff62dfebe0df079f38fc8d33cefa477d","ssdeep":"","tlshash":"6e21910f0cbbc034ca6b524bbf7fc018b292206b3002e0a6764e9f189f80b169c49de0","size":1124,"data":"","first_seen":"2025-11-26T15:41:02.623312Z","last_seen":"2026-04-08T16:41:51.03338Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=DC-10089018","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd85dd0c2a810e0a01b43a895187f33b","sha1":"36496064836538313232bbd6af021f71f4c98f38","sha256":"a8636d02a6f7c233ea68fd8c30118d7751fdd5576f79a491a90243799bf5d18b","sha512":"cce1fde77eded18ae745374115ac437ec89b1ddbfa1a256eb5c8d50689740d53d8c7c76e9d48a92fcb79c5b2282f81ce2d4542b8e47faa3e0812e414615aace6","ssdeep":"6144:8IeJ92bulKYE1u99O5HDmHYmyBFzfns/LnWov2RypJfe:dpbu7E1mYDnsTWcpo","tlshash":"c67408cdb3ca74668392a478403f114ba17b6ad1f84cc895f186cce42d74aaa4277f7d","size":337271,"data":"","first_seen":"2026-01-04T15:36:05.674539Z","last_seen":"2026-01-04T20:08:06.76383Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1D7WNE3ED6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"75c4441d274c77d8d6e75d31c16a51c7","sha1":"5566fefa6ed68ec3323282b50b78036d6f8a35f4","sha256":"3c5e40c4cf2a7dd80fb01c5e884c874e60f22bfb19f3426f0e8aefa42a22dd1f","sha512":"a0e939ba6b544d0fe581d9e8d73cf5e37a820d1aa3a5f7abcfdefb8a548204746b0c71f8f4c3ff3c463b809d64209668a5368a9af05913d32fc84ff195a9e36f","ssdeep":"6144:e1Ie7ma2bulKYX61u99Yye5HDmHYmyBFzvnszzO6jcWllEKPad4XEPD6M:hC8bu7q1mcrnszlgWawEx","tlshash":"21b40a8e73c63426539af478502f02cba9bb29e2b45dc89ab1c9ccf01d7459b4167f78","size":510987,"data":"","first_seen":"2026-01-04T15:36:05.670226Z","last_seen":"2026-01-04T20:08:06.77751Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.cookiebot.com/0eba5902-eab7-47f3-a3e1-b72f0082f2dc/cc.js?renew=false\u0026referer=correosprepago.bnext.es\u0026dnt=true\u0026init=false","fqdn":"consent.cookiebot.com","domain":"cookiebot.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9e3756b9a81594074e974bec33987cb","sha1":"56de5d3040d52d85ce8a6e0830658a96f4ba4b3b","sha256":"8afb2e40b55bc2406a15adc97a5a85775ce73eed3f030b956cbe92513fd6c04c","sha512":"5ffa5c5eab2094e63377f5f8ed00bc2d48a7e0c658c3a94b24ffc82c0224687d9db0d93e5fe73a62c77be1186612f577c1d9200b86860bb6948cdfb9ee9efa9f","ssdeep":"6144:6s50/kL/h85ex4pC2irITI7+QFZ9ueK2UmPCPBDNBOFpmy+pftESQSCsv6:fEkBrITI7+QF82Um4v6","tlshash":"3c74f6a5329a327e0be76bf46a41c306beb114d00d8056cda4599b7429d0e0f6cbe7f7","size":367009,"data":"","first_seen":"2025-12-24T19:20:19.992176Z","last_seen":"2026-01-12T06:03:06.346742Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=DC-14618615","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:34.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=DC-14618615 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 15:35:34 GMT\r\nexpires: Sun, 04 Jan 2026 15:35:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 04 Jan 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 117373\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":336424,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"e7f9a101583eed773a4055b3ae558aff","sha1":"f8b753b3622108ce8f56693404ea02a808d000dc","sha256":"25ecdc22e051cdf9e9e5621f6ca4b846cb8bd2de4f5733682350c90ac22ac5f7","sha512":"aa0dfdc5f7462d04790c9feb4da0334b295ce90a7892d89fe9d485162a2b0c8c56dfcaf4a7e45e11713f721aede3c7b5ade26de0c9dcfdeadd78ab332214f21f","ssdeep":"6144:PIeJF2bulKYE1u99O5HDmHYmyBFzfns9X2Wov2RypJkH:gvbu7E1mYDnsgWcpc","tlshash":"856408cdb3c674668393a478403f114ba17b6a92f84cc895f186cce42d74aaa4277f7d","first_seen":"2026-01-04T15:36:05.653583Z","last_seen":"2026-01-04T15:36:05.653583Z","times_seen":1,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":218,"dns":9,"connect":44,"send":0,"wait":35,"receive":35,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/assets/CarteroLight-B3_zgnWT.woff","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:35.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"correosprepago.bnext.es","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:13:43 GMT","end":"Fri, 13 Mar 2026 19:13:05 GMT"},"fingerprint":{"sha1":"02:53:8F:E6:EA:F9:DB:BE:23:C7:F8:B3:F5:78:3E:F9:E5:94:A2:3E","sha256":"1A:8D:74:CE:F3:C2:6A:32:AB:BF:39:5A:D1:7F:39:60:4B:0A:86:E5:65:F1:64:92:B6:B6:90:FB:96:43:44:DD"}}},"request":{"raw":"GET /assets/CarteroLight-B3_zgnWT.woff HTTP/1.1\r\nHost: correosprepago.bnext.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/assets/index-Uofbwc41.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 13172\r\ncache-control: max-age=3600\r\ncontent-type: font/woff\r\netag: \"48ebaab36b3b9ca484b18cb338e531cb2da983f9dc9954108c49bcb778eb9a07\"\r\nlast-modified: Thu, 27 Nov 2025 11:12:58 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:35:35 GMT\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767540935.258788,VS0,VE113\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":13172,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 13172, version 0.0","md5":"2b0b539661116a717e97554c74f694f8","sha1":"e05f48147026d86b02c0d6a599b7c709a78b084e","sha256":"23d99567a93e8499dd00c677f9315beaf838e07f35e333d4c15bccfc78be3336","sha512":"55d6f48e5592a98d7abf3c29cf464b198a646a9fbfe427ed400f459352583b143a8c0fa60dd48f968bed759adda6d8a420d13b9e04b3936951a7a7b1b046c3b8","ssdeep":"384:rbOWSkYprou97LI0BLWfLUkfkXEpDUMyDcRP4s9+n7admZk5dxr:rLYSc79MLl8XEBUMyD6qnGdmOTr","tlshash":"9a42c00bcce11b62d68b5c3988f5abd59bd8760c189304bc867dc53d2f78a279712d2e","first_seen":"2025-04-06T10:15:29.812445Z","last_seen":"2026-06-25T01:10:02.467826Z","times_seen":14,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Correos","trigger":"correosprepago.bnext.es","verdict":"phishing","severity":"medium","comment":"Correos","link":"https://openphish.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T15:35:34.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"correosprepago.bnext.es","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:13:43 GMT","end":"Fri, 13 Mar 2026 19:13:05 GMT"},"fingerprint":{"sha1":"02:53:8F:E6:EA:F9:DB:BE:23:C7:F8:B3:F5:78:3E:F9:E5:94:A2:3E","sha256":"1A:8D:74:CE:F3:C2:6A:32:AB:BF:39:5A:D1:7F:39:60:4B:0A:86:E5:65:F1:64:92:B6:B6:90:FB:96:43:44:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: correosprepago.bnext.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\netag: \"a6b8a813c131e5508ddb1c132cbe6aab537774a24fb3512c1532a5a16683c549-br\"\r\nlast-modified: Thu, 27 Nov 2025 11:12:58 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:35:34 GMT\r\nx-served-by: cache-hel1410022-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1767540934.311325,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 2384\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":12080,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (424)","md5":"3dc03418e66125adf9c3f3b02100aabb","sha1":"0904b94fdd2dd83d37c673d23a89ddc6d76d8a2f","sha256":"f913a61cea13fb72e1ebd21e9782171ef66821c0a6951b1421650bd66aefd2da","sha512":"d4ef35e29bd8dbffd4986eeb2d0b49da5812ca33f0cfc1c72980014d100a37c7d722c4acd3892e44e98951ebc96b548a90ed57e7923125fa5902a99360bbef7b","ssdeep":"192:2EzCETSZAbrPMFhtVOquYZgA9g1lz1J5cU:2miAbrEue25D","tlshash":"f2424e974ebad4b5a30cc229affaf904d513609fad84d40075cc492d3fd2a559893fe8","first_seen":"2025-11-28T05:40:01.947501Z","last_seen":"2026-01-12T06:03:06.347559Z","times_seen":22,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":131,"dns":96,"connect":13,"send":0,"wait":14,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Correos","trigger":"correosprepago.bnext.es/","verdict":"phishing","severity":"medium","comment":"Correos","link":"https://openphish.com","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/assets/index-Uofbwc41.css","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:34.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"correosprepago.bnext.es","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:13:43 GMT","end":"Fri, 13 Mar 2026 19:13:05 GMT"},"fingerprint":{"sha1":"02:53:8F:E6:EA:F9:DB:BE:23:C7:F8:B3:F5:78:3E:F9:E5:94:A2:3E","sha256":"1A:8D:74:CE:F3:C2:6A:32:AB:BF:39:5A:D1:7F:39:60:4B:0A:86:E5:65:F1:64:92:B6:B6:90:FB:96:43:44:DD"}}},"request":{"raw":"GET /assets/index-Uofbwc41.css HTTP/1.1\r\nHost: correosprepago.bnext.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"6ceda6840919e31236270f72ed20012ff579e574151f09cfd6ea0e34f7934816-br\"\r\nlast-modified: Thu, 27 Nov 2025 11:12:58 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:35:34 GMT\r\nx-served-by: cache-hel1410022-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1767540935.621114,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 7277\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":36139,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Algol 68 source, ASCII text, with very long lines (36138)","md5":"ca2e67eb8e9bc76c8cb01f0fb33b2c4f","sha1":"7408d245dd2bebcf7b00b15c70f25a7e86271bd2","sha256":"a530bd9e2536aba4bf44787004c7d94db5cee7a7542a893b19e0801acf700434","sha512":"decc71c59dd693ec06201f4e47551980e2f147e2399842a6b21003c9f0a4a9b31a0a44a04080e0cee56d3837fe7b1b688358729ef16c9538554f6e9e5f1c3ad7","ssdeep":"384:VIm+S5n/yxv2dIxhpSQsXiK6TwFYDZ+LMlDOvtMRb4rGyknfvtZwuazxugvUKETT:AhZ+LMdOlMKrGyk9LazxuG1ETFR","tlshash":"d0f20aae5605102d9c57caf7a1f0a1dcb122b4c4ea274bf5ed4760209dc71f42bebe16","first_seen":"2025-11-26T15:41:02.608331Z","last_seen":"2026-02-23T00:36:00.852003Z","times_seen":26,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Correos","trigger":"correosprepago.bnext.es","verdict":"phishing","severity":"medium","comment":"Correos","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/assets/login-BnzEj9hG.svg","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:35.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"correosprepago.bnext.es","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:13:43 GMT","end":"Fri, 13 Mar 2026 19:13:05 GMT"},"fingerprint":{"sha1":"02:53:8F:E6:EA:F9:DB:BE:23:C7:F8:B3:F5:78:3E:F9:E5:94:A2:3E","sha256":"1A:8D:74:CE:F3:C2:6A:32:AB:BF:39:5A:D1:7F:39:60:4B:0A:86:E5:65:F1:64:92:B6:B6:90:FB:96:43:44:DD"}}},"request":{"raw":"GET /assets/login-BnzEj9hG.svg HTTP/1.1\r\nHost: correosprepago.bnext.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5479\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"0af445fc3762401a5f627adfaa8511ea4a90d7884cf6c0144b4711329c3399f3-br\"\r\nlast-modified: Thu, 27 Nov 2025 11:12:58 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:35:35 GMT\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767540935.251358,VS0,VE117\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":16456,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7afc31406c93d3d80423a6828120eec","sha1":"7db6dec040a9e8258afd6e0213020b5b5140f447","sha256":"e1a455708976981945036f44fd87eb787190ddeda584e6f1c54b4c009e1e5264","sha512":"b15a0bb9b65d8e43eb4d5e94d1d2c5a8b966f4a5b343bec47a6810b68c1082665b099019e9114c9eb5b28a46d6ba2bfb7c5c4bd70ed7ad098c81837dd59e617f","ssdeep":"384:qsDwW1/UJp4Eg3Iq9GO/IQUHbFfCW9fhubVCJKj:IW9UYEg4q9fQPbFaXgoj","tlshash":"977231ed2b704cd19dc9c7fbff1941dd7023917b68918a58d3ac9a0c389197ec85aac2","first_seen":"2023-07-10T14:36:21Z","last_seen":"2026-06-25T01:10:02.464602Z","times_seen":26,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Correos","trigger":"correosprepago.bnext.es","verdict":"phishing","severity":"medium","comment":"Correos","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/assets/CarteroRegular-C8ylGG4C.woff","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:35.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"correosprepago.bnext.es","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:13:43 GMT","end":"Fri, 13 Mar 2026 19:13:05 GMT"},"fingerprint":{"sha1":"02:53:8F:E6:EA:F9:DB:BE:23:C7:F8:B3:F5:78:3E:F9:E5:94:A2:3E","sha256":"1A:8D:74:CE:F3:C2:6A:32:AB:BF:39:5A:D1:7F:39:60:4B:0A:86:E5:65:F1:64:92:B6:B6:90:FB:96:43:44:DD"}}},"request":{"raw":"GET /assets/CarteroRegular-C8ylGG4C.woff HTTP/1.1\r\nHost: correosprepago.bnext.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/assets/index-Uofbwc41.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 13012\r\ncache-control: max-age=3600\r\ncontent-type: font/woff\r\netag: \"2a42c7a608a324677a478da54f30adcd12122b0cc729b73b7b308d890fc2a139\"\r\nlast-modified: Thu, 27 Nov 2025 11:12:58 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:35:35 GMT\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767540935.256468,VS0,VE87\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":13012,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 13012, version 0.0","md5":"4cfb86d40c75e2cd6e36c1263bb53068","sha1":"a37e6336d79ab31a28b39d3bb7dda73b887e9463","sha256":"86315c5313cb023075f22852d87bf412508cad50d49174e3d99b30bcf4ad6ea9","sha512":"847921b0ea8828b2546889aab2127e848a880dea540a2f8e644db93d999c102b6282f418963a9bbaf37d09128af350769804063066a76bb361c2fec906bba3a0","ssdeep":"384:8Jmx5ZVNYY+Icgnx+qH4WUtfYHqRJCJMU2:emxLVNYYPnx+qHMM/w","tlshash":"8b42d00ac4b34706f204d4f604edd3f56d9827109712eae8ae2978f896cd6816dadcdb","first_seen":"2025-04-06T10:15:29.804942Z","last_seen":"2026-06-25T01:10:02.466167Z","times_seen":23,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Correos","trigger":"correosprepago.bnext.es","verdict":"phishing","severity":"medium","comment":"Correos","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026tid=DC-10089018\u0026en=page_view\u0026dl=https%3A%2F%2Fcorreosprepago.bnext.es%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=883771652.1767540935\u0026dt=Mi%20tarjeta%20%7C%20Correos%20Prepago\u0026auid=1275658284.1767540935\u0026navt=n\u0026npa=1\u0026gtm=45fe5ca1v9181800071za200zd9181800071xec\u0026gcd=13l3lPl2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391252~115583767~115616985~115938465~115938469~116184927~116184929~116251938~116251940~116744866\u0026tft=1767540935266\u0026tfd=1148\u0026apve=1\u0026apvf=f\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:36.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026tid=DC-10089018\u0026en=page_view\u0026dl=https%3A%2F%2Fcorreosprepago.bnext.es%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=883771652.1767540935\u0026dt=Mi%20tarjeta%20%7C%20Correos%20Prepago\u0026auid=1275658284.1767540935\u0026navt=n\u0026npa=1\u0026gtm=45fe5ca1v9181800071za200zd9181800071xec\u0026gcd=13l3lPl2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391252~115583767~115616985~115938465~115938469~116184927~116184929~116251938~116251940~116744866\u0026tft=1767540935266\u0026tfd=1148\u0026apve=1\u0026apvf=f\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain\r\ndate: Sun, 04 Jan 2026 15:35:36 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T17:53:53.021164Z","times_seen":17858794,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/assets/index-j48fKogV.js","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:34.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"correosprepago.bnext.es","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:13:43 GMT","end":"Fri, 13 Mar 2026 19:13:05 GMT"},"fingerprint":{"sha1":"02:53:8F:E6:EA:F9:DB:BE:23:C7:F8:B3:F5:78:3E:F9:E5:94:A2:3E","sha256":"1A:8D:74:CE:F3:C2:6A:32:AB:BF:39:5A:D1:7F:39:60:4B:0A:86:E5:65:F1:64:92:B6:B6:90:FB:96:43:44:DD"}}},"request":{"raw":"GET /assets/index-j48fKogV.js HTTP/1.1\r\nHost: correosprepago.bnext.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"4df3876154f7852b0c7202e1c3676518504b8e862182e29dd4c86abbf750a523-br\"\r\nlast-modified: Thu, 27 Nov 2025 11:12:58 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:35:34 GMT\r\nx-served-by: cache-hel1410022-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1767540935.619761,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 381666\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1502868,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37550)","md5":"b1823fedd2bcf13795ba2380ddf6e128","sha1":"baed173c653f45af875df06399b2bc59597afdd7","sha256":"5e05c7f1e7da0d521b7172d0c951ee8178905619174a0e1ab690df8e8e5386a6","sha512":"a72a737bb5480627a3eba069b5607b7d84ffcbb0123d846ab762340afb33002024ffb5ed8ef4b95945f7bd4d8f3af0b4178c1f2576b2e3f55929fd162e649f0d","ssdeep":"24576:nfVb6w5caaev+XWdM86dW7SJLed95Kbt7TraKfakC/R9N:fVb6w5caaev+XWdM86dW7SJLed95KbtK","tlshash":"cc259ee832d1f2a657e266e4403f510ab37d1c25e85c9050e3eaec9e3974845a07ffb9","first_seen":"2025-11-28T05:40:01.931812Z","last_seen":"2026-01-12T06:03:06.341847Z","times_seen":16,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Correos","trigger":"correosprepago.bnext.es","verdict":"phishing","severity":"medium","comment":"Correos","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"consent.cookiebot.com/uc.js?cbid=0eba5902-eab7-47f3-a3e1-b72f0082f2dc\u0026implementation=gtm\u0026consentmode-dataredaction=dynamic","fqdn":"consent.cookiebot.com","domain":"cookiebot.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:35.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"consent.cookiebot.com","organization":"Usercentrics A/S"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:B0:C9:64:33:60:A2:00:F1:11:99:8F:31:9D:57:25:CE:81:91:22","sha256":"58:16:D7:CC:46:7D:DF:A4:32:75:AD:7F:1D:37:C8:8D:B1:79:DF:A2:1E:40:15:4C:14:13:C3:B0:1C:5E:14:89"}}},"request":{"raw":"GET /uc.js?cbid=0eba5902-eab7-47f3-a3e1-b72f0082f2dc\u0026implementation=gtm\u0026consentmode-dataredaction=dynamic HTTP/1.1\r\nHost: consent.cookiebot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 18 Dec 2025 05:38:42 GMT\r\naccept-ranges: bytes\r\netag: \"09d9391e06fdc1:0\"\r\nvary: Accept-Encoding\r\nrequest-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef\r\naccess-control-expose-headers: Request-Context\r\ncontent-length: 35969\r\ncache-control: public, max-age=913\r\nexpires: Sun, 04 Jan 2026 15:50:48 GMT\r\ndate: Sun, 04 Jan 2026 15:35:35 GMT\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117757,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65498)","md5":"cdd58d0822380c3cb5cd06311f24f847","sha1":"a1d5f150d05fe3391fedcd4da649097f6e399414","sha256":"d368c59e7d4370df82cea7ad2eb5d7854b28e9c2ba61898294f0efa7c73ea2c9","sha512":"184ff75d492fd6cf7d15cb451ed7dadae983d8771078cd3023a3f67e1a39e64b183bd248cc07730f95164336a78199f248b43e157b3de335bc15c9ad3718e5a9","ssdeep":"1536:emmcIXtZ3UF2fzRJj9qs6MoCzs6BITnPG0omiuYMdXqD1nEqZUgJeW5QKF9xFRDk:+RCTn/ox+f2XmX","tlshash":"a6b3a3a67284a6791bea11f5762b1759323223952844c1bdb878ecf01424f873877ffb","first_seen":"2025-12-18T08:05:59.554701Z","last_seen":"2026-01-15T09:20:55.97548Z","times_seen":2908,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":66,"dns":32,"connect":1,"send":0,"wait":18,"receive":3,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gmp/conversion;src=10089018;type=invmedia;cat=es_co00f;ord=1705728217641;npa=1;auiddc=1275658284.1767540935;u2=%5BURL_Info%5D;pscdl=noapi;frm=0;_tu=IFA;gtm=45fe5ca1v9181800071za200zd9181800071xec;gcd=13l3lPl2l1l1;dma_cps=syphamo;dma=1;dc_fmt=4;tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391252~115583767~115616985~115938465~115938469~116184927~116184929~116251938~116251940~116744866;epver=2;dc_random=1767540935_5jvSrE9QzOg_51Bw1YIHKczsdQ_oBKeDIQ;~oref=https%3A%2F%2Fcorreosprepago.bnext.es%2F?","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:36.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"POST /gmp/conversion;src=10089018;type=invmedia;cat=es_co00f;ord=1705728217641;npa=1;auiddc=1275658284.1767540935;u2=%5BURL_Info%5D;pscdl=noapi;frm=0;_tu=IFA;gtm=45fe5ca1v9181800071za200zd9181800071xec;gcd=13l3lPl2l1l1;dma_cps=syphamo;dma=1;dc_fmt=4;tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391252~115583767~115616985~115938465~115938469~116184927~116184929~116251938~116251940~116744866;epver=2;dc_random=1767540935_5jvSrE9QzOg_51Bw1YIHKczsdQ_oBKeDIQ;~oref=https%3A%2F%2Fcorreosprepago.bnext.es%2F? HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://correosprepago.bnext.es/\r\nOrigin: https://correosprepago.bnext.es\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 04 Jan 2026 15:35:36 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://correosprepago.bnext.es\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-12T17:53:41.866653Z","times_seen":1028495,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/assets/CarteroBold-DB0x_Ayl.woff","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:35.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"correosprepago.bnext.es","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:13:43 GMT","end":"Fri, 13 Mar 2026 19:13:05 GMT"},"fingerprint":{"sha1":"02:53:8F:E6:EA:F9:DB:BE:23:C7:F8:B3:F5:78:3E:F9:E5:94:A2:3E","sha256":"1A:8D:74:CE:F3:C2:6A:32:AB:BF:39:5A:D1:7F:39:60:4B:0A:86:E5:65:F1:64:92:B6:B6:90:FB:96:43:44:DD"}}},"request":{"raw":"GET /assets/CarteroBold-DB0x_Ayl.woff HTTP/1.1\r\nHost: correosprepago.bnext.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/assets/index-Uofbwc41.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 13144\r\ncache-control: max-age=3600\r\ncontent-type: font/woff\r\netag: \"b36a42e9685c8c41b9110c29325932ba341d8f287a846fa90cb9479e5d88253a\"\r\nlast-modified: Thu, 27 Nov 2025 11:12:58 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:35:35 GMT\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767540935.261342,VS0,VE181\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":13144,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 13144, version 0.0","md5":"8ac00e25566a7c586249101d87e1e322","sha1":"b8f8fa2535f17eab3acbd46397ddc7147ac51830","sha256":"c7123c874b61effca194f29f4a32c882d2a2fd854a7acec45d6fbea635cf5599","sha512":"4a39b749c2e3b0c7c08a7c90428aed12e4e6f930feed8bf0d736da7b7dd5ff215b99c2ab981219752e458469f63cbf28af9e451a0516515b96ac6c229660e078","ssdeep":"384:APsXT5u2E2NWdMVSeu0i3ndh+uXqDjPEsyHw:MsXTghLSUdh+58Tw","tlshash":"cb42c07bad8d23d5e02698b84bb84b8870ed44d657f685de581b23179034a0b58f61f4","first_seen":"2025-04-06T10:15:29.803874Z","last_seen":"2026-06-25T01:10:02.460241Z","times_seen":14,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Correos","trigger":"correosprepago.bnext.es","verdict":"phishing","severity":"medium","comment":"Correos","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"consentcdn.cookiebot.com/consentconfig/0eba5902-eab7-47f3-a3e1-b72f0082f2dc/settings.json","fqdn":"consentcdn.cookiebot.com","domain":"cookiebot.com","tld":"com"},"ip":{"addr":"2.20.163.160","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:35.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cookiebot.com","organization":"CYBOT A/S"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B0:2A:A0:5B:3C:1A:28:74:61:A5:80:C5:25:1B:66:82:F9:A8:C4:9B","sha256":"E4:D5:3F:67:E2:A9:04:DC:6D:7E:B1:68:C7:DF:BD:13:6E:6C:C1:54:EE:F2:41:19:68:0B:D0:E2:65:7B:BC:68"}}},"request":{"raw":"GET /consentconfig/0eba5902-eab7-47f3-a3e1-b72f0082f2dc/settings.json HTTP/1.1\r\nHost: consentcdn.cookiebot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://correosprepago.bnext.es\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: application/json\r\netag: \"0fe20e1bad3d3e99cb1dcc444b50a3cc:1760021196.617576\"\r\nlast-modified: Thu, 09 Oct 2025 14:46:36 GMT\r\nserver: AkamaiNetStorage\r\ncontent-length: 605\r\ncache-control: max-age=4456\r\nexpires: Sun, 04 Jan 2026 16:49:51 GMT\r\ndate: Sun, 04 Jan 2026 15:35:35 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=33, origin; dur=0, ak_p; desc=\"1767540935848_388255494_1660963127_3221_692_4_33_21\";dur=1\r\naccess-control-allow-origin: https://correosprepago.bnext.es\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":605,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0fe20e1bad3d3e99cb1dcc444b50a3cc","sha1":"1dddef8c488defa00f3e3e5cf335b991e6fca56b","sha256":"ff4ecbc86f7bc82e268e7cf6e3b86f6312ee5ece2621e20e410fe1d9893ee16e","sha512":"6047ff48e7e32dff68f59e1b3723c36e722323b344e723eb7520ce5b1d6abaf88fc0828f5b73fd936f4b7794d1d29ce2379c44d13832579c12f6861815e0f450","ssdeep":"","tlshash":"f8f0c298634d0caea7db55de52602e52082b30a4e4dd4df98a1fa070f49641cdd5a709","first_seen":"2025-12-24T19:20:19.999181Z","last_seen":"2026-08-02T19:29:28.766183Z","times_seen":31,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":40,"dns":11,"connect":4,"send":0,"wait":47,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1D7WNE3ED6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:34.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-1D7WNE3ED6 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 15:35:34 GMT\r\nexpires: Sun, 04 Jan 2026 15:35:34 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 161668\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":510987,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"75c4441d274c77d8d6e75d31c16a51c7","sha1":"5566fefa6ed68ec3323282b50b78036d6f8a35f4","sha256":"3c5e40c4cf2a7dd80fb01c5e884c874e60f22bfb19f3426f0e8aefa42a22dd1f","sha512":"a0e939ba6b544d0fe581d9e8d73cf5e37a820d1aa3a5f7abcfdefb8a548204746b0c71f8f4c3ff3c463b809d64209668a5368a9af05913d32fc84ff195a9e36f","ssdeep":"6144:e1Ie7ma2bulKYX61u99Yye5HDmHYmyBFzvnszzO6jcWllEKPad4XEPD6M:hC8bu7q1mcrnszlgWawEx","tlshash":"21b40a8e73c63426539af478502f02cba9bb29e2b45dc89ab1c9ccf01d7459b4167f78","first_seen":"2026-01-04T15:36:05.670226Z","last_seen":"2026-01-04T20:08:06.77751Z","times_seen":2,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":247,"dns":9,"connect":44,"send":0,"wait":61,"receive":10,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/assets/logo-correos-prepago-CojVsOXb.svg","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:35.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"correosprepago.bnext.es","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:13:43 GMT","end":"Fri, 13 Mar 2026 19:13:05 GMT"},"fingerprint":{"sha1":"02:53:8F:E6:EA:F9:DB:BE:23:C7:F8:B3:F5:78:3E:F9:E5:94:A2:3E","sha256":"1A:8D:74:CE:F3:C2:6A:32:AB:BF:39:5A:D1:7F:39:60:4B:0A:86:E5:65:F1:64:92:B6:B6:90:FB:96:43:44:DD"}}},"request":{"raw":"GET /assets/logo-correos-prepago-CojVsOXb.svg HTTP/1.1\r\nHost: correosprepago.bnext.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2578\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"82ac23745acb0d8e7c44ce124776e2268049cb49c0339c12c6f76f468aa3d7e9-br\"\r\nlast-modified: Thu, 27 Nov 2025 11:12:58 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:35:35 GMT\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1767540935.246022,VS0,VE3\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":8586,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7150a26475035856cbcadf5095ad59e3","sha1":"f7722ffbcb47a79a8d960246133ec46f9f3cbc42","sha256":"dac0fc9d71ddc0216c9b0fb35ad869f44ccf8155049429e83cca80c23bccec60","sha512":"4ddd1be2ede6c1b5db02ecad3e77df74c07f490a309b95312b18b2f92aa30a61b085891120564eca4534671ccc74569a12e076575039c03fd80d112db1b5471d","ssdeep":"192:aq+/ROkQy3rOInyT/o5q7TSsiv9Bo3jgcmjwt:aqq8k5OInYmqas49eTt","tlshash":"6d02fc94361157fab88476ed4e1791e0a8c2a8fdbf33818582c1d621bc518dd8c58ef7","first_seen":"2025-11-28T05:40:01.926156Z","last_seen":"2026-06-25T01:10:02.462517Z","times_seen":14,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-04","alert":"Phishing - Correos","trigger":"correosprepago.bnext.es","verdict":"phishing","severity":"medium","comment":"Correos","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=DC-10089018","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:34.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=DC-10089018 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 15:35:34 GMT\r\nexpires: Sun, 04 Jan 2026 15:35:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 04 Jan 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 117562\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":337271,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"fd85dd0c2a810e0a01b43a895187f33b","sha1":"36496064836538313232bbd6af021f71f4c98f38","sha256":"a8636d02a6f7c233ea68fd8c30118d7751fdd5576f79a491a90243799bf5d18b","sha512":"cce1fde77eded18ae745374115ac437ec89b1ddbfa1a256eb5c8d50689740d53d8c7c76e9d48a92fcb79c5b2282f81ce2d4542b8e47faa3e0812e414615aace6","ssdeep":"6144:8IeJ92bulKYE1u99O5HDmHYmyBFzfns/LnWov2RypJfe:dpbu7E1mYDnsTWcpo","tlshash":"c67408cdb3ca74668392a478403f114ba17b6ad1f84cc895f186cce42d74aaa4277f7d","first_seen":"2026-01-04T15:36:05.674539Z","last_seen":"2026-01-04T20:08:06.76383Z","times_seen":2,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":218,"dns":3,"connect":8,"send":0,"wait":28,"receive":39,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-PDQRXXSD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:34.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtm.js?id=GTM-PDQRXXSD HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 15:35:34 GMT\r\nexpires: Sun, 04 Jan 2026 15:35:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 04 Jan 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 132021\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":383454,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5340)","md5":"f346c7cba233f2baea919864e3dab6e4","sha1":"87bbf332e486a31f52312dea97f2584af2eea5a6","sha256":"e34f7b03f4cf942765dfb1a0d98e6715d9408fff99766bffbe75a3f087842db4","sha512":"4d91fde96b65aad682f57d832ecf7588d49c4ecf906be9feda419ff61513d4a626f8952fa1b3642416f38fa881ef2f6694fc18d6d3e7d1a25df5c9b1bd22aa10","ssdeep":"6144:gq4xrIeJK2bulKYXV1u99Yye5HDmHYmyBFz0nss20WllzpRXd:14bu7l1mcAnsEWrpz","tlshash":"028419cdb3c6706683a2a478503f114ba57b6ad1f44cc895f186cce42e74aaa0277f7d","first_seen":"2026-01-04T15:36:05.677964Z","last_seen":"2026-01-04T15:36:05.677964Z","times_seen":1,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":149,"dns":30,"connect":7,"send":0,"wait":53,"receive":26,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026tid=DC-10089018\u0026en=page_view\u0026dl=https%3A%2F%2Fcorreosprepago.bnext.es%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=883771652.1767540935\u0026dt=Mi%20tarjeta%20%7C%20Correos%20Prepago\u0026auid=1275658284.1767540935\u0026navt=n\u0026npa=1\u0026gtm=45fe5ca1v9181800071za200zd9181800071xec\u0026gcd=13l3lPl2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391252~115583767~115616985~115938465~115938469~116184927~116184929~116251938~116251940~116744866\u0026tft=1767540935266\u0026tfd=1148\u0026apve=1\u0026apvf=f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:35.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:20 GMT","end":"Wed, 25 Feb 2026 15:57:19 GMT"},"fingerprint":{"sha1":"13:5B:80:5A:23:15:61:AE:98:37:1B:0A:3C:F6:E2:BD:63:8E:3B:D6","sha256":"22:03:24:94:F7:E3:5F:66:1B:39:CE:18:75:20:3D:01:AC:FE:93:AA:1A:73:8C:D5:34:98:AB:2B:E5:19:37:12"}}},"request":{"raw":"POST /ccm/collect?frm=0\u0026tid=DC-10089018\u0026en=page_view\u0026dl=https%3A%2F%2Fcorreosprepago.bnext.es%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=883771652.1767540935\u0026dt=Mi%20tarjeta%20%7C%20Correos%20Prepago\u0026auid=1275658284.1767540935\u0026navt=n\u0026npa=1\u0026gtm=45fe5ca1v9181800071za200zd9181800071xec\u0026gcd=13l3lPl2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391252~115583767~115616985~115938465~115938469~116184927~116184929~116251938~116251940~116744866\u0026tft=1767540935266\u0026tfd=1148\u0026apve=1\u0026apvf=f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://correosprepago.bnext.es/\r\nOrigin: https://correosprepago.bnext.es\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Sun, 04 Jan 2026 15:35:35 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://correosprepago.bnext.es\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T17:53:53.021164Z","times_seen":17858794,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":61,"dns":0,"connect":8,"send":0,"wait":16,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16724062921\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:35.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=AW-16724062921\u0026cx=c\u0026gtm=4e5ca1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 15:35:35 GMT\r\nexpires: Sun, 04 Jan 2026 15:35:35 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 04 Jan 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 119003\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":335675,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"a7e0f6348c47b678ed9911cf1a4e8bfb","sha1":"99e42adff94be3dd0e41024cba9c174b68e3e652","sha256":"2712347577959ca9ad14407d5a62f83127ad3c3514462a4ad4efdb9971b0e2ea","sha512":"3598e3137175432c078dd724c55211c02fff9a4a91de1fb20a272bf6ca0a400e2db9cf7b0595a4fbd9f55af8a288d3005badde8c95ff9af58faf574025231a05","ssdeep":"6144:fIeJ92bulKYXV1u99Yye5HDmHYmyBFzfns9R+WllypX7:wpbu7l1mcDnsyWapL","tlshash":"da6419cd73c6746a83a3a478503f114ba17b6e91f84cc884f186d8e42d74aaa4277f7d","first_seen":"2026-01-04T15:36:05.679516Z","last_seen":"2026-01-04T15:36:05.679516Z","times_seen":1,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consentcdn.cookiebot.com/sdk/bc-v4.min.html","fqdn":"consentcdn.cookiebot.com","domain":"cookiebot.com","tld":"com"},"ip":{"addr":"2.20.163.160","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:35.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cookiebot.com","organization":"CYBOT A/S"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B0:2A:A0:5B:3C:1A:28:74:61:A5:80:C5:25:1B:66:82:F9:A8:C4:9B","sha256":"E4:D5:3F:67:E2:A9:04:DC:6D:7E:B1:68:C7:DF:BD:13:6E:6C:C1:54:EE:F2:41:19:68:0B:D0:E2:65:7B:BC:68"}}},"request":{"raw":"GET /sdk/bc-v4.min.html HTTP/1.1\r\nHost: consentcdn.cookiebot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: text/html\r\netag: \"3d08665fa4c7bcf9fa2dcbbc7efe1d0f:1649057029.895163\"\r\nlast-modified: Mon, 04 Apr 2022 07:23:49 GMT\r\nserver: AkamaiNetStorage\r\nx-akamai-transformed: 9 - 0 pmb=mRUM,1\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=31536000\r\nexpires: Mon, 04 Jan 2027 15:35:35 GMT\r\ndate: Sun, 04 Jan 2026 15:35:35 GMT\r\ncontent-length: 392\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1767540935844_388255494_1660963143_68_884_1_42_21\";dur=1\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]}],"data":{"size":627,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (627), with no line terminators","md5":"3d08665fa4c7bcf9fa2dcbbc7efe1d0f","sha1":"ba57ecee011a4b99d4bb56707325c8e4d0fb8a2b","sha256":"738e5435f2d18427d291a0d6289eee0ebbc87b596d6003919f255760ac293104","sha512":"e86fc61d20680f6f486c61e3730aca4cdebee3ad0670c69ec177691ae979f81951dbd409f8cda648ab2ebed13c5a2bfb57174fb5167eecb15300b807fc7bbf3e","ssdeep":"","tlshash":"3ff0dd4a20891b2ccb70c2f97ccb333821695110a8198de42197c2e02ca1ec69962fc6","first_seen":"2023-04-05T07:33:46Z","last_seen":"2026-08-12T17:39:16.23707Z","times_seen":75952,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":59,"dns":18,"connect":1,"send":0,"wait":4,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.cookiebot.com/0eba5902-eab7-47f3-a3e1-b72f0082f2dc/cc.js?renew=false\u0026referer=correosprepago.bnext.es\u0026dnt=true\u0026init=false","fqdn":"consent.cookiebot.com","domain":"cookiebot.com","tld":"com"},"ip":{"addr":"23.36.77.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:35.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"consent.cookiebot.com","organization":"Usercentrics A/S"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:B0:C9:64:33:60:A2:00:F1:11:99:8F:31:9D:57:25:CE:81:91:22","sha256":"58:16:D7:CC:46:7D:DF:A4:32:75:AD:7F:1D:37:C8:8D:B1:79:DF:A2:1E:40:15:4C:14:13:C3:B0:1C:5E:14:89"}}},"request":{"raw":"GET /0eba5902-eab7-47f3-a3e1-b72f0082f2dc/cc.js?renew=false\u0026referer=correosprepago.bnext.es\u0026dnt=true\u0026init=false HTTP/1.1\r\nHost: consent.cookiebot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private, max-age=1200\r\ncontent-type: application/x-javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 04 Jan 2026 15:35:35 GMT\r\nvary: Accept-Encoding\r\nrequest-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef\r\naccess-control-expose-headers: Request-Context\r\ndate: Sun, 04 Jan 2026 15:35:35 GMT\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":367009,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65498)","md5":"d9e3756b9a81594074e974bec33987cb","sha1":"56de5d3040d52d85ce8a6e0830658a96f4ba4b3b","sha256":"8afb2e40b55bc2406a15adc97a5a85775ce73eed3f030b956cbe92513fd6c04c","sha512":"5ffa5c5eab2094e63377f5f8ed00bc2d48a7e0c658c3a94b24ffc82c0224687d9db0d93e5fe73a62c77be1186612f577c1d9200b86860bb6948cdfb9ee9efa9f","ssdeep":"6144:6s50/kL/h85ex4pC2irITI7+QFZ9ueK2UmPCPBDNBOFpmy+pftESQSCsv6:fEkBrITI7+QF82Um4v6","tlshash":"3c74f6a5329a327e0be76bf46a41c306beb114d00d8056cda4599b7429d0e0f6cbe7f7","first_seen":"2025-12-24T19:20:19.992176Z","last_seen":"2026-01-12T06:03:06.346742Z","times_seen":4,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgsct.cookiebot.com/1.gif?dgi=0eba5902-eab7-47f3-a3e1-b72f0082f2dc","fqdn":"imgsct.cookiebot.com","domain":"cookiebot.com","tld":"com"},"ip":{"addr":"2.20.163.160","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://correosprepago.bnext.es/","date":"2026-01-04T15:35:36.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cookiebot.com","organization":"CYBOT A/S"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B0:2A:A0:5B:3C:1A:28:74:61:A5:80:C5:25:1B:66:82:F9:A8:C4:9B","sha256":"E4:D5:3F:67:E2:A9:04:DC:6D:7E:B1:68:C7:DF:BD:13:6E:6C:C1:54:EE:F2:41:19:68:0B:D0:E2:65:7B:BC:68"}}},"request":{"raw":"GET /1.gif?dgi=0eba5902-eab7-47f3-a3e1-b72f0082f2dc HTTP/1.1\r\nHost: imgsct.cookiebot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://correosprepago.bnext.es/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxNVDbOfWuN3EDp6QBAaEdQBEOmXBziG6bsSlPNxq4KUYsFD5J10fH1S2jJS6w8dbvFcR9ajivg\r\nx-goog-generation: 1698061172769999\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 35\r\nx-goog-hash: crc32c=rX4K2g==, md5=whlt6LpBLGDCKrSRr3sUCQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 35\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\nlast-modified: Mon, 23 Oct 2023 11:39:32 GMT\r\netag: \"c2196de8ba412c60c22ab491af7b1409\"\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 04 Jan 2026 15:35:36 GMT\r\ncache-control: public,max-age=1800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":35,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"c2196de8ba412c60c22ab491af7b1409","sha1":"5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b","sha256":"6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992","sha512":"84e24a70b78e9de9c9d0dfeb49f3f4247dbc1c715d8844471ee40669270682e199d48f5fbec62bd984c9c0270534b407c4d2561dd6c05adec3c83c1534f32d5c","ssdeep":"","tlshash":"d4800003e280c002c2a2c0300e0ccb802b88b0208a28030fb0ec2baeec3a2a00c02000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-08-12T17:49:24.092676Z","times_seen":186502,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}