Phishing detection: correosncr.cc
Correos Screenshot
Screenshot captured by urlscan.io on 2026-11-05T17:48 UTC: our own render of this page came back blank.
Investigate
Domain
correosncr.cc1 CT host on apex
urlscan
VirusTotal
Whois
IP
47.79.122.127
ipinfo
Greynoise
URL
https://correosncr.cc
Phishunt analysis Beta
36
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +4.1 Brand in screenshot
- +4.0 Young domain
- +3.7 Brand in domain label
- +3.5 ASN reputation
- +2.2 Country mismatch
- +2.0 Site cluster
- +0.9 Young certificate
- +0.9 No registrar lock
- +0.7 Brand in cert SAN
- +0.7 Unrecognised DNS provider
- +0.6 Registrar reputation
- +0.6 Suspicious TLD
- +0.3 Free CA
- +0.3 Long domain
17 signals fired · detector v3.0.0
AI analysis AIBeta
Delivery scam
Correos (Spanish postal service) lookalike domain on a .cc TLD, registered about four days ago and hosted in Singapore. Certificate names the brand and Google Safe Browsing flags it. Likely a parcel delivery scam harvesting personal or card details.
Brand in domain labelBrand in cert SANGoogle Safe Browsing
AI-generated from stored detector signals - the AI never visited the site. · 2026-11-04 · confidence 70%
Domain & Network
Whois
Registrar
Dominet (HK) Limited
Network
Country
Singapore
Singapore
ASN
AS45102
TLS Cert
YE2
External detection
Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists