Phishing detection: correosprepago.bnext.es

Correos
https://correosprepago.bnext.es/pwd?token=xbe6vb2chqe6tn2gpvdq5dmogw Access site
Screenshot
Screenshot of correosprepago.bnext.es
Investigate
Domain correosprepago.bnext.es76 CT hosts on apex
URL https://correosprepago.bnext.es/pwd?token=xbe6vb2chqe6tn2gp…
Phishunt analysis Beta
28 low suspicionheuristic risk score · not a probability
Keyword matchBrand impersonation in pathOpenPhish
19 signals fired · detector v2.0.0
AI analysis AIBeta
Delivery scam

Correos (Spanish postal service) phishing hosted on a subdomain of bnext.es, a Spanish fintech domain, with a token in the URL path indicating a targeted victim. Site reproduces Correos branding, is hosted in the US despite targeting Spanish users, and is confirmed by OpenPhish.

OpenPhishBrand in cert SANCountry mismatch
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 72%
Domain & Network
Whois
Network
Country United StatesUnited States
Hosting Fastly, Inc.
ASN AS54113
TLS Cert WR3
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
Network / ASN Fastly, Inc.

Tracked from 2026-06-25 01:01 UTC  ·  Last refreshed 2026-08-05 07:30 UTC