Suspicious
Phishings targeting Correos
Suspicious and active websites
Phishings targeting Correos
Suspicious and active websites
Active
4
New (7d)
1
Trend (7d)
—
- Countries
United States
Possible campaigns
3 of these are in a suspected cluster
0a12ee5e7e96
Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.
Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.
AIHow to verify a real Correos URL
- Legitimate Correos URLs always end in
correos.es(e.g.www.correos.es,account.correos.es). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like.xyz/.top/.vip— is not Correos. - The padlock icon proves TLS is active, not that the site is safe. Free DV certificates are issued to attackers in minutes; every active site listed above has a valid TLS certificate.
- If you got the link from email, SMS, or social media, do not click it. Open
correos.esfrom your browser bookmark or type the domain manually. - Real Correos pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.