{"report_id":"f5c4aa0a-ba2f-408b-ade4-fd0075262208","version":0,"status":"done","tags":[],"date":"2026-09-18T08:11:25Z","url":{"schema":"http","addr":"correosprepago.bnext.es/pwd/","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"Fastly, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"correosprepago.bnext.es/change-password/add-password","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"title":"Mi tarjeta | Correos Prepago","dom":{"size":23413,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6990)","md5":"2d51d12edd6e991e1520db5b3ed023cb","sha1":"6fbbd4f6dd76e32639b8aa4605169f83a8b95067","sha256":"969100d40a61186c19e1dfdbcfc463ad2c2adb93aa92d5058fb17a2453ea153e","sha512":"60e08f90416100eba959db7a1e6dab65b632e1bab1924de80c330c153ef48de3de61ecfb841248ec4c831a2d39496a864dc79fc9601bac579f5fa4cde0e71de3","ssdeep":"384:6WyhfkoKuv6fbzYUzojyofjMgKffyYu5WYzYuYH:6WWnCsUiyIKSYusYzYuYH","tlshash":"50b2e8643b040c2d1a43c7d1b7e1b60dda5af30bcd6a884ab2dc68db1fc29d4a763795","dom_hash":"domhash8790fa152768aeae4b9761541633e49c","first_seen":"2026-09-18T00:18:56.458742Z","last_seen":"2026-09-18T08:11:29.975735Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"correosprepago.bnext.es/pwd/","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"Fastly, Inc.","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-23T08:11:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"correosprepago.bnext.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"correosprepago.bnext.es","ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":2337796,"first_seen":"2023-04-22T13:29:54Z","last_seen":"2026-09-18T00:18:56.335779Z","alert_count":24,"request_count":8,"received_data":1748939,"sent_data":4184,"comment":"","tags":null,"fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.correos.es","ip":{"addr":"13.249.8.48","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":120103,"first_seen":"2013-07-05T06:35:20Z","last_seen":"2026-09-18T00:18:56.363286Z","alert_count":0,"request_count":2,"received_data":221432,"sent_data":1176,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"correosprepago.bnext.es/pwd/","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc98becf7e2a48ca83060b5c8c240bc8","sha1":"89193aa94c533a5202139f5f485c0de1913fc571","sha256":"34c19f3e57966845c5acf48c65539bb55235a4013f27421ebaf1042a8cc6e14f","sha512":"dcc9e6cca00bf3404b7eb445e6c0da6d80f34bac80297d34f80e8d1db9903665294c2da54308cd9e7e9e6620dd174356407e501be3d69f91b5b54389f6723d89","ssdeep":"","tlshash":"fdb012d9040d42011df921899302668520a248e96040c56251a140113411c87c21f545","size":89,"data":"","first_seen":"2026-08-29T00:42:36.116434Z","last_seen":"2026-09-18T08:11:29.991505Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/pwd/","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"009e755ecd0314f412097284e17184dd","sha1":"1b8b9f12df449734945bf7c301787a572232f134","sha256":"b5b7a8a639f6e972711f602e87d09fa67564f5087a9a76ff53c15132c10d560c","sha512":"a97db1a5e056d11c49779c5c7cd5fd7fe3223a0688c00697abf8e773fd0bb3133c65609f6f9c15a7dfd071e36fb567fd34b136262b44a019f61a65865468e2d4","ssdeep":"","tlshash":"abb022f8323c200c08003200800e2a8030c023030e0030f8300c8303af3ec0b32abbcc","size":109,"data":"","first_seen":"2026-06-25T01:10:02.485251Z","last_seen":"2026-09-18T08:11:29.993746Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/assets/index-CpebUx44.js","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00bde640553f82b25c2d0603efce3f9e","sha1":"6a7766d7b39a49c84e4b16a56f2c7babf3f960b8","sha256":"a71e456bcc17ad66dadfdbc6db1c009cd2ef204d4e529491a7ec195f67ea05af","sha512":"ed7c3e63b3e4f1530e33bbef5436af126a4979b0961fcbb375e905eb2513a56d3fb13c6b5f8cee54097eacfe647c24e623ba2c1158a4bc84f1dc9b45c8cb204a","ssdeep":"49152:qCM8r4FV1QB293l+7WsMH8/677yyp8cSHg+2wSbt1TfINTAMJ+OIZeXa4sJL:vNE1Ag+2wSbtF/","tlshash":"81758de93292b5ba56b255d1003f4106b32d2d55b80cc498f3eddcee39a8842617bff9","size":1603914,"data":"","first_seen":"2026-09-18T00:18:56.471235Z","last_seen":"2026-09-18T08:11:29.994799Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"correosprepago.bnext.es/assets/index-Z-1wRrjD.css","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://correosprepago.bnext.es/pwd/","date":"2026-09-18T08:10:49.669Z","timestamp":1789719049669,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"correosprepago.bnext.es","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:54:50 GMT","end":"Mon, 26 Oct 2026 10:54:12 GMT"},"fingerprint":{"sha1":"95:89:AD:39:8F:8C:A6:A6:AD:39:18:0A:49:43:97:9B:6C:DC:84:78","sha256":"94:5A:68:44:52:7C:A6:86:BC:1C:0E:3A:8A:F6:84:E5:37:57:7F:0D:DA:91:6E:12:73:F3:80:C3:73:10:1E:EE"}}},"request":{"raw":"GET /assets/index-Z-1wRrjD.css HTTP/1.1\r\nHost: correosprepago.bnext.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://correosprepago.bnext.es/pwd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://dynamic.criteo.com https://js.adsrvr.org https://*.ada.support https://*.braze.eu; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://cnext-pub-prod.bnext.es https://*.braze.eu https://*.ada.support https://www.googletagmanager.com https://www.facebook.com https://insight.adsrvr.org; frame-src 'self' https://www.googletagmanager.com https://*.ada.support; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'\r\ncontent-type: text/css; charset=utf-8\r\netag: \"e6dcbfa074ba256e271e156cb777eb233b5f5a00bff821089eb42a70edd4425e-br\"\r\nlast-modified: Tue, 15 Sep 2026 10:48:45 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ndate: Fri, 18 Sep 2026 08:10:49 GMT\r\nx-served-by: cache-bma-essb1270079-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789719050.688705,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 10467\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61614,"size_decoded":11873,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (61613)","md5":"5851bcf9db5c161c8bb6c7a50f8c07ed","sha1":"b35b6040cb2e64ba3981f991d1908388d03cf5ea","sha256":"eacb62f670d3a8c5da7d0ad6975a4cbd418f35c9ae980db3ad71e4c132c98195","sha512":"fcbb84c415fca8aa5aea608a65a77bd86a50ef18c8f448904aa2ea5015651b084ba1c4f530f72a0dc64ab3a858688a15136b5db9d8ef3c6edd4f470c5ff404e8","ssdeep":"1536:cezoJ2l+s8Lbjk3aMGykv87aGJxuGNhVETFf:hoJ2l+s8Lbj0aMw87aGJxuGNhVETFf","tlshash":"e653e86e5545112eac2bc5f7a5a0b59cb23670c4ff2797e9fc836020e9c61b01efba14","first_seen":"2026-09-18T00:18:56.462587Z","last_seen":"2026-09-18T08:11:29.979396Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2987,"receive":467,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"correosprepago.bnext.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/assets/CarteroRegular-C8ylGG4C.woff","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://correosprepago.bnext.es/pwd/","date":"2026-09-18T08:10:59.875Z","timestamp":1789719059875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"correosprepago.bnext.es","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:54:50 GMT","end":"Mon, 26 Oct 2026 10:54:12 GMT"},"fingerprint":{"sha1":"95:89:AD:39:8F:8C:A6:A6:AD:39:18:0A:49:43:97:9B:6C:DC:84:78","sha256":"94:5A:68:44:52:7C:A6:86:BC:1C:0E:3A:8A:F6:84:E5:37:57:7F:0D:DA:91:6E:12:73:F3:80:C3:73:10:1E:EE"}}},"request":{"raw":"GET /assets/CarteroRegular-C8ylGG4C.woff HTTP/1.1\r\nHost: correosprepago.bnext.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://correosprepago.bnext.es/assets/index-Z-1wRrjD.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-cache\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://dynamic.criteo.com https://js.adsrvr.org https://*.ada.support https://*.braze.eu; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://cnext-pub-prod.bnext.es https://*.braze.eu https://*.ada.support https://www.googletagmanager.com https://www.facebook.com https://insight.adsrvr.org; frame-src 'self' https://www.googletagmanager.com https://*.ada.support; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'\r\ncontent-type: font/woff\r\netag: \"2a42c7a608a324677a478da54f30adcd12122b0cc729b73b7b308d890fc2a139\"\r\nlast-modified: Tue, 15 Sep 2026 10:48:45 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ndate: Fri, 18 Sep 2026 08:10:59 GMT\r\nx-served-by: cache-bma-essb1270035-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1789719060.895295,VS0,VE72\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13012,"size_decoded":14311,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 13012, version 0.0","md5":"4cfb86d40c75e2cd6e36c1263bb53068","sha1":"a37e6336d79ab31a28b39d3bb7dda73b887e9463","sha256":"86315c5313cb023075f22852d87bf412508cad50d49174e3d99b30bcf4ad6ea9","sha512":"847921b0ea8828b2546889aab2127e848a880dea540a2f8e644db93d999c102b6282f418963a9bbaf37d09128af350769804063066a76bb361c2fec906bba3a0","ssdeep":"384:8Jmx5ZVNYY+Icgnx+qH4WUtfYHqRJCJMU2:emxLVNYYPnx+qHMM/w","tlshash":"8b42d00ac4b34706f204d4f604edd3f56d9827109712eae8ae2978f896cd6816dadcdb","first_seen":"2025-04-06T10:15:29.804942Z","last_seen":"2026-09-18T08:11:29.981059Z","times_seen":29,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"correosprepago.bnext.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/assets/CarteroLight-B3_zgnWT.woff","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://correosprepago.bnext.es/pwd/","date":"2026-09-18T08:10:59.877Z","timestamp":1789719059877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"correosprepago.bnext.es","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:54:50 GMT","end":"Mon, 26 Oct 2026 10:54:12 GMT"},"fingerprint":{"sha1":"95:89:AD:39:8F:8C:A6:A6:AD:39:18:0A:49:43:97:9B:6C:DC:84:78","sha256":"94:5A:68:44:52:7C:A6:86:BC:1C:0E:3A:8A:F6:84:E5:37:57:7F:0D:DA:91:6E:12:73:F3:80:C3:73:10:1E:EE"}}},"request":{"raw":"GET /assets/CarteroLight-B3_zgnWT.woff HTTP/1.1\r\nHost: correosprepago.bnext.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://correosprepago.bnext.es/assets/index-Z-1wRrjD.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-cache\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://dynamic.criteo.com https://js.adsrvr.org https://*.ada.support https://*.braze.eu; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://cnext-pub-prod.bnext.es https://*.braze.eu https://*.ada.support https://www.googletagmanager.com https://www.facebook.com https://insight.adsrvr.org; frame-src 'self' https://www.googletagmanager.com https://*.ada.support; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'\r\ncontent-type: font/woff\r\netag: \"48ebaab36b3b9ca484b18cb338e531cb2da983f9dc9954108c49bcb778eb9a07\"\r\nlast-modified: Tue, 15 Sep 2026 10:48:45 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ndate: Fri, 18 Sep 2026 08:11:00 GMT\r\nx-served-by: cache-bma-essb1270035-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1789719060.896615,VS0,VE133\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":13172,"size_decoded":14472,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 13172, version 0.0","md5":"2b0b539661116a717e97554c74f694f8","sha1":"e05f48147026d86b02c0d6a599b7c709a78b084e","sha256":"23d99567a93e8499dd00c677f9315beaf838e07f35e333d4c15bccfc78be3336","sha512":"55d6f48e5592a98d7abf3c29cf464b198a646a9fbfe427ed400f459352583b143a8c0fa60dd48f968bed759adda6d8a420d13b9e04b3936951a7a7b1b046c3b8","ssdeep":"384:rbOWSkYprou97LI0BLWfLUkfkXEpDUMyDcRP4s9+n7admZk5dxr:rLYSc79MLl8XEBUMyD6qnGdmOTr","tlshash":"9a42c00bcce11b62d68b5c3988f5abd59bd8760c189304bc867dc53d2f78a279712d2e","first_seen":"2025-04-06T10:15:29.812445Z","last_seen":"2026-09-18T08:11:29.981852Z","times_seen":20,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"correosprepago.bnext.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/assets/CarteroBold-DB0x_Ayl.woff","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://correosprepago.bnext.es/pwd/","date":"2026-09-18T08:10:59.878Z","timestamp":1789719059878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"correosprepago.bnext.es","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:54:50 GMT","end":"Mon, 26 Oct 2026 10:54:12 GMT"},"fingerprint":{"sha1":"95:89:AD:39:8F:8C:A6:A6:AD:39:18:0A:49:43:97:9B:6C:DC:84:78","sha256":"94:5A:68:44:52:7C:A6:86:BC:1C:0E:3A:8A:F6:84:E5:37:57:7F:0D:DA:91:6E:12:73:F3:80:C3:73:10:1E:EE"}}},"request":{"raw":"GET /assets/CarteroBold-DB0x_Ayl.woff HTTP/1.1\r\nHost: correosprepago.bnext.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://correosprepago.bnext.es/assets/index-Z-1wRrjD.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-cache\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://dynamic.criteo.com https://js.adsrvr.org https://*.ada.support https://*.braze.eu; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://cnext-pub-prod.bnext.es https://*.braze.eu https://*.ada.support https://www.googletagmanager.com https://www.facebook.com https://insight.adsrvr.org; frame-src 'self' https://www.googletagmanager.com https://*.ada.support; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'\r\ncontent-type: font/woff\r\netag: \"b36a42e9685c8c41b9110c29325932ba341d8f287a846fa90cb9479e5d88253a\"\r\nlast-modified: Tue, 15 Sep 2026 10:48:45 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ndate: Fri, 18 Sep 2026 08:10:59 GMT\r\nx-served-by: cache-bma-essb1270035-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1789719060.897874,VS0,VE49\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":13144,"size_decoded":14443,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 13144, version 0.0","md5":"8ac00e25566a7c586249101d87e1e322","sha1":"b8f8fa2535f17eab3acbd46397ddc7147ac51830","sha256":"c7123c874b61effca194f29f4a32c882d2a2fd854a7acec45d6fbea635cf5599","sha512":"4a39b749c2e3b0c7c08a7c90428aed12e4e6f930feed8bf0d736da7b7dd5ff215b99c2ab981219752e458469f63cbf28af9e451a0516515b96ac6c229660e078","ssdeep":"384:APsXT5u2E2NWdMVSeu0i3ndh+uXqDjPEsyHw:MsXTghLSUdh+58Tw","tlshash":"cb42c07bad8d23d5e02698b84bb84b8870ed44d657f685de581b23179034a0b58f61f4","first_seen":"2025-04-06T10:15:29.803874Z","last_seen":"2026-09-18T08:11:29.983594Z","times_seen":20,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":375,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"correosprepago.bnext.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/pwd/","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-18T08:10:47.017Z","timestamp":1789719047017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"correosprepago.bnext.es","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:54:50 GMT","end":"Mon, 26 Oct 2026 10:54:12 GMT"},"fingerprint":{"sha1":"95:89:AD:39:8F:8C:A6:A6:AD:39:18:0A:49:43:97:9B:6C:DC:84:78","sha256":"94:5A:68:44:52:7C:A6:86:BC:1C:0E:3A:8A:F6:84:E5:37:57:7F:0D:DA:91:6E:12:73:F3:80:C3:73:10:1E:EE"}}},"request":{"raw":"GET /pwd/ HTTP/1.1\r\nHost: correosprepago.bnext.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://dynamic.criteo.com https://js.adsrvr.org https://*.ada.support https://*.braze.eu; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://cnext-pub-prod.bnext.es https://*.braze.eu https://*.ada.support https://www.googletagmanager.com https://www.facebook.com https://insight.adsrvr.org; frame-src 'self' https://www.googletagmanager.com https://*.ada.support; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\netag: \"1ff56ed9bc6980bdd47982a6bc35240d8434426aefc9738d8f276adb233342df-br\"\r\nlast-modified: Tue, 15 Sep 2026 10:48:45 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ndate: Fri, 18 Sep 2026 08:10:49 GMT\r\nx-served-by: cache-bma-essb1270079-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1789719049.065225,VS0,VE57\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1643\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":8192,"size_decoded":3024,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (424)","md5":"0ac1c77ffc6f47587954733bb13b0864","sha1":"4bc0e8db16b2e81da87e3b876755c6e58713dfdd","sha256":"c47ae7da32c4643574b540b27d32f9735d7aa438a0952119336060f09c9d1213","sha512":"7167f83b9b8a9c37572110d2239fa12eb09f1bb8835fc7bdf6dab22dd1c274092b912274dadb1145eff49b2bff42c7e97fd9805197ca7750f8f8b298138d559c","ssdeep":"96:2MX3FYq3FA3Fa3Fle1MQco6f1gvd7t4OgS5yvqaOJ5cJa:2EzCEiyhfkX4Or1J5cU","tlshash":"8ff144e74ba9e4e5630cc2285ad6b944c503a0dbefa4a500b1dc406e7fd2d64d5d3fd8","first_seen":"2026-09-18T00:18:56.460148Z","last_seen":"2026-09-18T08:11:29.985163Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2261,"timings":{"blocked":-1,"dns":124,"connect":41,"send":0,"wait":99,"receive":136,"ssl":1861},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"correosprepago.bnext.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/assets/index-CpebUx44.js","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://correosprepago.bnext.es/pwd/","date":"2026-09-18T08:10:49.668Z","timestamp":1789719049668,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"correosprepago.bnext.es","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:54:50 GMT","end":"Mon, 26 Oct 2026 10:54:12 GMT"},"fingerprint":{"sha1":"95:89:AD:39:8F:8C:A6:A6:AD:39:18:0A:49:43:97:9B:6C:DC:84:78","sha256":"94:5A:68:44:52:7C:A6:86:BC:1C:0E:3A:8A:F6:84:E5:37:57:7F:0D:DA:91:6E:12:73:F3:80:C3:73:10:1E:EE"}}},"request":{"raw":"GET /assets/index-CpebUx44.js HTTP/1.1\r\nHost: correosprepago.bnext.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://correosprepago.bnext.es/pwd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://dynamic.criteo.com https://js.adsrvr.org https://*.ada.support https://*.braze.eu; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://cnext-pub-prod.bnext.es https://*.braze.eu https://*.ada.support https://www.googletagmanager.com https://www.facebook.com https://insight.adsrvr.org; frame-src 'self' https://www.googletagmanager.com https://*.ada.support; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"e1b50a2e7377c3150e1103dac47312e7aafc1bf8ffecc6ef326de810b7affcde-br\"\r\nlast-modified: Tue, 15 Sep 2026 10:48:45 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ndate: Fri, 18 Sep 2026 08:10:49 GMT\r\nx-served-by: cache-bma-essb1270079-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789719050.687562,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 397410\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1603914,"size_decoded":398824,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37550)","md5":"62309b452d599eee5b4303dfc3121ed3","sha1":"981c5f9be32587d3903f46142478bbdb8e75369f","sha256":"74f5e5773ada659edc40af7823a7b934d00a7a9804b1a1a5a02dd2f949505cb5","sha512":"8da7fb6b2b46602b42a64f3ba0742df264585497ee0e8abd985e3599a7fddcc2315febce5074f3dea900fd86400bec678817678b7e3bdf81a4b1d14310750052","ssdeep":"24576:PCBCM8r4FV1QB293l+7/usMH8/677yyp8TIS9pg+2H:qCM8r4FV1QB293l+7WsMH8/677yyp8cZ","tlshash":"3a259ee93290b67a5aa226d5403f5106f32d2d14ec1c8094f2faecde35a4845a17fff9","first_seen":"2026-09-18T00:18:56.461387Z","last_seen":"2026-09-18T08:11:29.986673Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9893,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":9850,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"correosprepago.bnext.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.correos.es/content/dam/correos/imagenes/iconos/CORREOS-favicon.ico","fqdn":"www.correos.es","domain":"correos.es","tld":"es"},"ip":{"addr":"13.249.8.48","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://correosprepago.bnext.es/pwd/","date":"2026-09-18T08:10:51.491Z","timestamp":1789719051491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.correos.es","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 13 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:36:96:A8:4C:76:6B:BC:71:D5:01:9E:1E:49:B8:F7:6F:CD:AD:F4","sha256":"69:C1:E8:9E:F9:EF:AF:CF:7F:44:39:B0:51:80:A7:15:5E:AD:5C:90:65:6B:9D:58:1B:D2:9D:DB:B8:59:94:70"}}},"request":{"raw":"GET /content/dam/correos/imagenes/iconos/CORREOS-favicon.ico HTTP/1.1\r\nHost: www.correos.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://correosprepago.bnext.es/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/x-icon\r\ncontent-length: 17992\r\ndate: Fri, 18 Sep 2026 08:08:42 GMT\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\nserver: Apache\r\nx-server: server1\r\nx-content-type-options: nosniff\r\nlast-modified: Wed, 14 Apr 2021 14:00:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: \"1adc5-5bfef2c6d41c0-gzip\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 adec45310b695a0da9995003556ee7ce.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: DOuJqLRpdeQhS7NZRze1A_VeHIyJ4MFxPsCk3yePQsQwVhqqc9ojRA==\r\nage: 26130705\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":110021,"size_decoded":18687,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"349246ee336d8b2986e584a4fa436128","sha1":"598b9f95458a2426bf1688d616c4f6f3fea3580e","sha256":"68554c17c00a589c2b29e1f74ac5efbcd8d30252792626f5fff81955e4d89ae7","sha512":"97790f92dc07976d23c95e4b6947252c2c798e94924de41948a72dda7d97c63c198c0711b23417de84b77f1e385d7d90eb5854d9b4b64c135a23375674d5b13a","ssdeep":"384:98wyge3gZCZFtUuWwuxGMDGyyyyyyyyyyyyyyyy4yyyyyyyyyyyyyyyyyyyyyyyl:iwtrCZFGuvux//ssTBsOOOPwi4","tlshash":"91b38ebc24fcd0ecc78875b4d44ad6b989db9e50e72070c333b9bd5a3595a04288dae3","first_seen":"2023-04-16T20:07:00Z","last_seen":"2026-09-18T08:11:29.988057Z","times_seen":621,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":46,"connect":43,"send":0,"wait":91,"receive":0,"ssl":332},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.correos.es/content/dam/correos/imagenes/iconos/CORREOS-favicon.ico","fqdn":"www.correos.es","domain":"correos.es","tld":"es"},"ip":{"addr":"13.249.8.48","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://correosprepago.bnext.es/pwd/","date":"2026-09-18T08:10:51.493Z","timestamp":1789719051493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.correos.es","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 13 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4D:36:96:A8:4C:76:6B:BC:71:D5:01:9E:1E:49:B8:F7:6F:CD:AD:F4","sha256":"69:C1:E8:9E:F9:EF:AF:CF:7F:44:39:B0:51:80:A7:15:5E:AD:5C:90:65:6B:9D:58:1B:D2:9D:DB:B8:59:94:70"}}},"request":{"raw":"GET /content/dam/correos/imagenes/iconos/CORREOS-favicon.ico HTTP/1.1\r\nHost: www.correos.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://correosprepago.bnext.es/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/x-icon\r\ncontent-length: 17992\r\ndate: Fri, 18 Sep 2026 08:08:42 GMT\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\nserver: Apache\r\nx-server: server1\r\nx-content-type-options: nosniff\r\nlast-modified: Wed, 14 Apr 2021 14:00:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: \"1adc5-5bfef2c6d41c0-gzip\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 adec45310b695a0da9995003556ee7ce.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: Z6gbRZeqtIENgKgqy00FXiY5RU6q9B_lO-E-Ol9ZoPsfoaOPO8ohpw==\r\nage: 26130705\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110021,"size_decoded":18687,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"349246ee336d8b2986e584a4fa436128","sha1":"598b9f95458a2426bf1688d616c4f6f3fea3580e","sha256":"68554c17c00a589c2b29e1f74ac5efbcd8d30252792626f5fff81955e4d89ae7","sha512":"97790f92dc07976d23c95e4b6947252c2c798e94924de41948a72dda7d97c63c198c0711b23417de84b77f1e385d7d90eb5854d9b4b64c135a23375674d5b13a","ssdeep":"384:98wyge3gZCZFtUuWwuxGMDGyyyyyyyyyyyyyyyy4yyyyyyyyyyyyyyyyyyyyyyyl:iwtrCZFGuvux//ssTBsOOOPwi4","tlshash":"91b38ebc24fcd0ecc78875b4d44ad6b989db9e50e72070c333b9bd5a3595a04288dae3","first_seen":"2023-04-16T20:07:00Z","last_seen":"2026-09-18T08:11:29.988057Z","times_seen":621,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":0,"dns":45,"connect":41,"send":0,"wait":156,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/assets/logo-correos-prepago-CojVsOXb.svg","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://correosprepago.bnext.es/pwd/","date":"2026-09-18T08:10:59.819Z","timestamp":1789719059819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"correosprepago.bnext.es","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:54:50 GMT","end":"Mon, 26 Oct 2026 10:54:12 GMT"},"fingerprint":{"sha1":"95:89:AD:39:8F:8C:A6:A6:AD:39:18:0A:49:43:97:9B:6C:DC:84:78","sha256":"94:5A:68:44:52:7C:A6:86:BC:1C:0E:3A:8A:F6:84:E5:37:57:7F:0D:DA:91:6E:12:73:F3:80:C3:73:10:1E:EE"}}},"request":{"raw":"GET /assets/logo-correos-prepago-CojVsOXb.svg HTTP/1.1\r\nHost: correosprepago.bnext.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://correosprepago.bnext.es/change-password/add-password\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 2578\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://dynamic.criteo.com https://js.adsrvr.org https://*.ada.support https://*.braze.eu; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://cnext-pub-prod.bnext.es https://*.braze.eu https://*.ada.support https://www.googletagmanager.com https://www.facebook.com https://insight.adsrvr.org; frame-src 'self' https://www.googletagmanager.com https://*.ada.support; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'\r\ncontent-type: image/svg+xml\r\netag: \"82ac23745acb0d8e7c44ce124776e2268049cb49c0339c12c6f76f468aa3d7e9-br\"\r\nlast-modified: Tue, 15 Sep 2026 10:48:45 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ndate: Fri, 18 Sep 2026 08:10:59 GMT\r\nx-served-by: cache-bma-essb1270035-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789719060.839971,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8586,"size_decoded":3953,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7150a26475035856cbcadf5095ad59e3","sha1":"f7722ffbcb47a79a8d960246133ec46f9f3cbc42","sha256":"dac0fc9d71ddc0216c9b0fb35ad869f44ccf8155049429e83cca80c23bccec60","sha512":"4ddd1be2ede6c1b5db02ecad3e77df74c07f490a309b95312b18b2f92aa30a61b085891120564eca4534671ccc74569a12e076575039c03fd80d112db1b5471d","ssdeep":"192:aq+/ROkQy3rOInyT/o5q7TSsiv9Bo3jgcmjwt:aqq8k5OInYmqas49eTt","tlshash":"6d02fc94361157fab88476ed4e1791e0a8c2a8fdbf33818582c1d621bc518dd8c58ef7","first_seen":"2025-11-28T05:40:01.926156Z","last_seen":"2026-09-18T08:11:29.989399Z","times_seen":20,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":416,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"correosprepago.bnext.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"correosprepago.bnext.es/assets/login-BnzEj9hG.svg","fqdn":"correosprepago.bnext.es","domain":"bnext.es","tld":"es"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://correosprepago.bnext.es/pwd/","date":"2026-09-18T08:10:59.894Z","timestamp":1789719059894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"correosprepago.bnext.es","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:54:50 GMT","end":"Mon, 26 Oct 2026 10:54:12 GMT"},"fingerprint":{"sha1":"95:89:AD:39:8F:8C:A6:A6:AD:39:18:0A:49:43:97:9B:6C:DC:84:78","sha256":"94:5A:68:44:52:7C:A6:86:BC:1C:0E:3A:8A:F6:84:E5:37:57:7F:0D:DA:91:6E:12:73:F3:80:C3:73:10:1E:EE"}}},"request":{"raw":"GET /assets/login-BnzEj9hG.svg HTTP/1.1\r\nHost: correosprepago.bnext.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://correosprepago.bnext.es/change-password/add-password\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 5479\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://dynamic.criteo.com https://js.adsrvr.org https://*.ada.support https://*.braze.eu; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://cnext-pub-prod.bnext.es https://*.braze.eu https://*.ada.support https://www.googletagmanager.com https://www.facebook.com https://insight.adsrvr.org; frame-src 'self' https://www.googletagmanager.com https://*.ada.support; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'\r\ncontent-type: image/svg+xml\r\netag: \"0af445fc3762401a5f627adfaa8511ea4a90d7884cf6c0144b4711329c3399f3-br\"\r\nlast-modified: Tue, 15 Sep 2026 10:48:45 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ndate: Fri, 18 Sep 2026 08:10:59 GMT\r\nx-served-by: cache-bma-essb1270035-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789719060.913735,VS0,VE3\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16456,"size_decoded":6854,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7afc31406c93d3d80423a6828120eec","sha1":"7db6dec040a9e8258afd6e0213020b5b5140f447","sha256":"e1a455708976981945036f44fd87eb787190ddeda584e6f1c54b4c009e1e5264","sha512":"b15a0bb9b65d8e43eb4d5e94d1d2c5a8b966f4a5b343bec47a6810b68c1082665b099019e9114c9eb5b28a46d6ba2bfb7c5c4bd70ed7ad098c81837dd59e617f","ssdeep":"384:qsDwW1/UJp4Eg3Iq9GO/IQUHbFfCW9fhubVCJKj:IW9UYEg4q9fQPbFaXgoj","tlshash":"977231ed2b704cd19dc9c7fbff1941dd7023917b68918a58d3ac9a0c389197ec85aac2","first_seen":"2023-07-10T14:36:21Z","last_seen":"2026-09-18T08:11:29.990015Z","times_seen":32,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":363,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"correosprepago.bnext.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"correosprepago.bnext.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}