New Registrations
Correos phishing domains
Newly registered lookalikes - tracked daily
Correos phishing domains
Newly registered lookalikes - tracked daily
Tracked (7d)
23
New (24h)
1
vs avg
—
- Countries
United States 
Germany
Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.
| Last check (UTC) | First seen (UTC) ▾ | URL | Screenshot | Flags | Details |
|---|---|---|---|---|---|
| 2026-08-31 13:02 | 2026-08-31 13:02 |  |
Details | ||
| 2026-08-30 13:06 | 2026-08-30 13:06 |  |
Details | ||
| 2026-08-29 13:27 | 2026-08-29 13:27 |  |
Details | ||
| 2026-08-28 13:22 | 2026-08-28 13:22 |  |
Details | ||
| 2026-08-28 13:22 | 2026-08-28 13:22 | |
GSB | Details | |
| 2026-08-28 13:21 | 2026-08-28 13:21 |  |
Details | ||
| 2026-08-28 13:21 | 2026-08-28 13:21 | |
Details | ||
| 2026-08-28 13:21 | 2026-08-28 13:21 |  |
Details | ||
| 2026-08-27 01:21 | 2026-08-27 01:21 |  |
Details | ||
| 2026-08-27 01:21 | 2026-08-27 01:21 | |
Details | ||
| 2026-08-27 01:21 | 2026-08-27 01:21 | |
Details | ||
| 2026-08-27 01:21 | 2026-08-27 01:21 | |
Details | ||
| 2026-08-27 01:21 | 2026-08-27 01:21 | |
Details | ||
| 2026-08-27 01:21 | 2026-08-27 01:21 | |
GSB | Details | |
| 2026-08-27 01:21 | 2026-08-27 01:21 |  |
Details | ||
| 2026-08-27 01:21 | 2026-08-27 01:21 | |
Details | ||
| 2026-08-25 01:06 | 2026-08-25 01:06 | |
Details | ||
| 2026-08-25 01:06 | 2026-08-25 01:06 | |
Details | ||
| 2026-08-25 01:06 | 2026-08-25 01:06 | |
Details | ||
| 2026-08-25 01:06 | 2026-08-25 01:06 | |
Details | ||
| 2026-08-25 01:06 | 2026-08-25 01:06 | |
Details | ||
| 2026-08-25 01:06 | 2026-08-25 01:06 | |
Details | ||
| 2026-08-25 01:06 | 2026-08-25 01:06 | |
Details |
Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.
| URL | Screenshot | Details |
|---|---|---|
| https://correos-ccl.shop
|
|
Details |
| https://correospy.top
|
|
Details |
| https://correos24h-recogida.h…
|
|
Details |
| https://correosportlabs49.for…
|
|
Details |
| https://correosgob-bo.com
GSB |
|
Details |
| https://correoscodepremium6.f…
|
|
Details |
| https://correosar.top
|
|
Details |
| https://correos-cr.com
|
|
Details |
| https://correosxxseguro.com
|
|
Details |
| https://correosxxoficial.com
|
|
Details |
| https://correosxxempresarial.…
|
|
Details |
| https://correosxemail.com
|
|
Details |
| https://correosempresariales.…
|
|
Details |
| https://correoschilexs.lol
GSB |
|
Details |
| https://correos10251.sbs
|
|
Details |
| https://correos-correos.com
|
|
Details |
| https://correosvvt.top
|
|
Details |
| https://correosvuz.top
|
|
Details |
| https://correosuin.top
|
|
Details |
| https://correosfct.top
|
|
Details |
| https://correosevo.top
|
|
Details |
| https://correosene.top
|
|
Details |
| https://correoseei.top
|
|
Details |
AIHow to verify a real Correos URL
- Legitimate Correos URLs always end in
correos.es(e.g.www.correos.es,account.correos.es). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like.xyz/.top/.vip— is not Correos. - The domains listed above were registered within the last 7 days. New-domain age is itself a signal — Correos has owned
correos.esfor years; brand-new look-alikes are almost never legitimate. - If you got the link from email, SMS, or social media, do not click it. Open
correos.esfrom your browser bookmark or type the domain manually. - Real Correos pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.