Security Report: correoscostarica.cyou - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/890b356c-94ed-4318-afde-7cf2d4051254 Domain and IP registration (RDAP)/api/v1/rdap/890b356c-94ed-4318-afde-7cf2d4051254How often this domain was scanned/api/v1/domain/stats/correoscostarica.cyou Scan history for this domain/api/v1/domain/history/correoscostarica.cyou?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is correoscostarica.cyou and was registered 3 weeks ago.

Submitted URL: https://correoscostarica.cyou/5-vx_sgv6rvbtdv/VYb-5Vh6EvNTv_T5G5-RFY/user-936598//formulario-envio.php

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Fake 'Correos de Costa Rica' page on a 5-day-old .cyou domain harvesting recipient name, address, phone and email via a hidden control-panel endpoint — brand impersonation and data phishing.

Risk Factors (5)

Impersonation of a different entity's brand (Correos de Costa Rica) on a non-official domain

Domain age 5 days with brand impersonation

Data-harvesting form submitting to a hidden control-panel endpoint outside normal site navigation

Obfuscated per-victim URL path structure

Unranked domain claiming to be a national postal operator

Domain age information unavailable

Details

Page Title

Información de Envío | Correos de Costa Rica

Scan Type

public

Domain Name Analysis

You're looking at domain 'correoscostarica.cyou' on the .cyou top-level domain. The second-level label 'correoscostarica' is 16 characters long with seven vowels and 9 consonants. Splitting it apart reveals 4 words: corre, os, costa, rica. Expect 4.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.12s

Total Load Time

15 KB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:965 chars

Detector Agreement:100%

Website Classification

Primary Category

social media network91% confidence

Type: static

Method: ml+structural

All Detected Categories

social media network

91%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	95.216.27.99	Helsinki, Uusimaa, Finland	AS24940Hetzner Online GmbH
3	1	-	-

Detected Technologies2

PHPv7.4.7

40%

Apache HTTP Server

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1721298A1BAF7157274529B643BEB578A3654D403C00AD6093BEC2369CFC6AD1EE4374C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:ctaJUKhn8Iusw9J+WnWr6VvygCR/ttg2QAnrgwoZ71nlRLf:ck1d6ERlKDAn8woZ75lRLf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9292:EBw2BY+gQDqMeWAUQ1QZ5hADNMAIsREARBCCWG4nAB4JAR2LMJAQcgMTwwBaoDFaQwgAqIARNSiYTAIORAB0mnHhKJaYYAwB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000cffffffffff

Perceptual Hash:982e2a2ea6b3e6b1

Difference Hash:2333101038309919

Wavelet Hash:000000dedefedfcf

Color Hash:#1f5393

Other Hashes

Crop Resistant:2333101038309919,000585252525c501,110931b331310101

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: correoscostarica.cyou