1<!DOCTYPE html><html lang="en" class="light"><head> 2 <meta charset="UTF-8"> 3 <link rel="icon" type="image/x-icon" href="/favicon.ico"> 4 <link rel="apple-touch-icon" href="/apple-touch-icon.png"> 5 <title>Payloads | delivr.to</title> 6 <meta content="Browse 800+ pre-built payloads across 100+ file types, aligned to MITRE ATT&CK. Test your email and web security controls with real threat actor techniques." name="description"> 7 <link rel="canonical" href="https://delivr.to/payloads"> 8 <meta content="Payload Library | delivr.to" property="og:title"> 9 <meta content="Browse 800+ pre-built payloads across 100+ file types, aligned to MITRE ATT&CK. Test your email and web security controls with real threat actor techniques." property="og:description"> 10 <meta property="og:url" content="https://delivr.to/payloads"> 11 <meta content="https://delivr.to/images/web-banner.png" property="og:image"> 12 <meta content="Payload Library | delivr.to" property="twitter:title"> 13 <meta content="Browse 800+ pre-built payloads across 100+ file types, aligned to MITRE ATT&CK. Test your email and web security controls with real threat actor techniques." property="twitter:description"> 14 <meta content="https://delivr.to/images/web-banner.png" property="twitter:image"> 15 <meta property="og:type" content="website"> 16 <meta content="summary_large_image" name="twitter:card"> 17
17<script type="application/ld+json"> 18 { 19 "@context": "https://schema.org", 20 "@graph": [ 21 { 22 "@type": "Organization", 23 "@id": "https://delivr.to/#organization", 24 "name": "delivr.to", 25 "url": "https://delivr.to", 26 "logo": { 27 "@type": "ImageObject", 28 "url": "https://delivr.to/images/web-banner.png", 29 "width": 1200, 30 "height": 630 31 }, 32 "description": "Purple teaming platform for email security testing. Send simulated threat payloads through production email infrastructure to test what actually reaches users' inboxes.", 33 "sameAs": [ 34 "https://www.linkedin.com/company/delivr-to", 35 "https://x.com/delivr_to", 36 "https://github.com/delivr-to" 37 ], 38 "contactPoint": [ 39 { 40 "@type": "ContactPoint", 41 "contactType": "Sales", 42 "email": "[email protected]", 43 "availableLanguage": ["English"], 44 "areaServed": "Worldwide" 45 }, 46 { 47 "@type": "ContactPoint", 48 "contactType": "Support", 49 "email": "[email protected]", 50 "availableLanguage": ["English"], 51 "areaServed": "Worldwide" 52 } 53 ], 54 "founder": [ 55 { "@id": "https://delivr.to/#person-james-coote" }, 56 { "@id": "https://delivr.to/#person-alfie-champion" } 57 ] 58 }, 59 { 60 "@type": "Person", 61 "@id": "https://delivr.to/#person-james-coote", 62 "name": "James Coote", 63 "jobTitle": "Co-Founder", 64 "worksFor": { "@id": "https://delivr.to/#organization" }, 65 "description": "James has a decade of experience delivering attack simulation and purple teaming services, and has spoken on the topic at conferences such as Blackhat, Defcon and TROOPERS. He was also a member of the UK Armed Forces' Joint Cyber Unit.", 66 "sameAs": [ 67 "https://www.linkedin.com/in/james-coote-7a77a657/", 68 "https://twitter.com/jkcoote", 69 "https://github.com/JamesCooteUK" 70 ] 71 }, 72 { 73 "@type": "Person", 74 "@id": "https://delivr.to/#person-alfie-champion", 75 "name": "Alfie Champion", 76 "jobTitle": "Co-Founder", 77 "worksFor": { "@id": "https://delivr.to/#organization" }, 78 "description": "Alfie authored 'Practical Purple Teaming' and specialises in attack detection and adversary emulation. He has delivered talks and training at BlackHat, Defcon and RSA.", 79 "sameAs": [ 80 "https://www.linkedin.com/in/alfie-champion/", 81 "https://twitter.com/ajpc500", 82 "https://github.com/ajpc500" 83 ] 84 }, 85 { 86 "@type": "WebSite", 87 "@id": "https://delivr.to/#website", 88 "name": "delivr.to", 89 "url": "https://delivr.to", 90 "publisher": { "@id": "https://delivr.to/#organization" } 91 }, 92 { 93 "@type": "SoftwareApplication", 94 "@id": "https://delivr.to/#software", 95 "name": "delivr.to", 96 "applicationCategory": "SecurityApplication", 97 "operatingSystem": "Web", 98 "description": "Purple teaming platform that enables security teams to emulate real-world phishing attacks through production email infrastructure, measure email defense effectiveness, and track security improvements over time.", 99 "featureList": [ 100 "Real payload delivery through production email infrastructure", 101 "Microsoft Defender and Sublime Security integration", 102 "MITRE ATT&CK-aligned threat intelligence", 103 "800+ pre-built payloads across 100+ file types", 104 "Team collaboration with role-based access", 105 "Campaign analytics and delivery tracking" 106 ], 107 "screenshot": "https://delivr.to/images/web-banner.png", 108 "publisher": { "@id": "https://delivr.to/#organization" }, 109 "offers": [ 110 { 111 "@type": "Offer", 112 "name": "Starter", 113 "price": "99", 114 "priceCurrency": "GBP", 115 "url": "https://delivr.to/#pricing", 116 "priceSpecification": { 117 "@type": "UnitPriceSpecification", 118 "price": "99", 119 "priceCurrency": "GBP", 120 "billingDuration": "P1M" 121 } 122 }, 123 { 124 "@type": "Offer", 125 "name": "Premium", 126 "price": "299", 127 "priceCurrency": "GBP", 128 "url": "https://delivr.to/#pricing", 129 "priceSpecification": { 130 "@type": "UnitPriceSpecification", 131 "price": "299", 132 "priceCurrency": "GBP", 133 "billingDuration": "P1M" 134 } 135 }, 136 { 137 "@type": "Offer", 138 "name": "Enterprise", 139 "url": "https://calendly.com/delivrto/enterprise", 140 "availability": "https://schema.org/OnlineOnly", 141 "priceCurrency": "GBP", 142 "priceSpecification": { 143 "@type": "PriceSpecification", 144 "priceCurrency": "GBP", 145 "description": "Custom pricing, contact sales for a quote" 146 } 147 } 148 ] 149 } 150 ,{ 151 "@type": "BreadcrumbList", 152 "@id": "https://delivr.to/#breadcrumb", 153 "itemListElement": [ 154 { 155 "@type": "ListItem", 156 "position": 1, 157 "name": "Home", 158 "item": "https://delivr.to/" 159 } 160 ] 161 } 162 ] 163 } 164 </script>
164 165 <meta content="width=device-width, initial-scale=1" name="viewport"> 166 <link rel="preconnect" href="https://cdn-images-1.medium.com" crossorigin=""> 167 <link rel="dns-prefetch" href="https://cdn-images-1.medium.com"> 168 <link rel="stylesheet" href="/fonts/lato.css"> 169
169<script type="module" crossorigin="" src="/assets/index-BNXzEUcY.js"></script>
169 170 <link rel="modulepreload" crossorigin="" href="/assets/vendor-CHI41uxr.js"> 171 <link rel="modulepreload" crossorigin="" href="/assets/query-DmstuUoN.js"> 172 <link rel="modulepreload" crossorigin="" href="/assets/ui-WgsiDFN4.js"> 173 <link rel="stylesheet" crossorigin="" href="/assets/index-Bg7EXu-Z.css"> 174 <style type="text/css">:where(html[dir="ltr"]),:where([data-sonner-toaster][dir="ltr"]){--toast-icon-margin-start: -3px;--toast-icon-margin-end: 4px;--toast-svg-margin-start: -1px;--toast-svg-margin-end: 0px;--toast-button-margin-start: auto;--toast-button-margin-end: 0;--toast-close-button-start: 0;--toast-close-button-end: unset;--toast-close-button-transform: translate(-35%, -35%)}:where(html[dir="rtl"]),:where([data-sonner-toaster][dir="rtl"]){--toast-icon-margin-start: 4px;--toast-icon-margin-end: -3px;--toast-svg-margin-start: 0px;--toast-svg-margin-end: -1px;--toast-button-margin-start: 0;--toast-button-margin-end: auto;--toast-close-button-start: unset;--toast-close-button-end: 0;--toast-close-button-transform: translate(35%, -35%)}:where([data-sonner-toaster]){position:fixed;width:var(--width);font-family:ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;--gray1: hsl(0, 0%, 99%);--gray2: hsl(0, 0%, 97.3%);--gray3: hsl(0, 0%, 95.1%);--gray4: hsl(0, 0%, 93%);--gray5: hsl(0, 0%, 90.9%);--gray6: hsl(0, 0%, 88.7%);--gray7: hsl(0, 0%, 85.8%);--gray8: hsl(0, 0%, 78%);--gray9: hsl(0, 0%, 56.1%);--gray10: hsl(0, 0%, 52.3%);--gray11: hsl(0, 0%, 43.5%);--gray12: hsl(0, 0%, 9%);--border-radius: 8px;box-sizing:border-box;padding:0;margin:0;list-style:none;outline:none;z-index:999999999;transition:transform .4s ease}:where([data-sonner-toaster][data-lifted="true"]){transform:translateY(-10px)}@media (hover: none) and (pointer: coarse){:where([data-sonner-toaster][data-lifted="true"]){transform:none}}:where([data-sonner-toaster][data-x-position="right"]){right:var(--offset-right)}:where([data-sonner-toaster][data-x-position="left"]){left:var(--offset-left)}:where([data-sonner-toaster][data-x-position="center"]){left:50%;transform:translate(-50%)}:where([data-sonner-toaster][data-y-position="top"]){top:var(--offset-top)}:where([data-sonner-toaster][data-y-position="bottom"]){bottom:var(--offset-bottom)}:where([data-sonner-toast]){--y: translateY(100%);--lift-amount: calc(var(--lift) * var(--gap));z-index:var(--z-index);position:absolute;opacity:0;transform:var(--y);filter:blur(0);touch-action:none;transition:transform .4s,opacity .4s,height .4s,box-shadow .2s;box-sizing:border-box;outline:none;overflow-wrap:anywhere}:where([data-sonner-toast][data-styled="true"]){padding:16px;background:var(--normal-bg);border:1px solid var(--normal-border);color:var(--normal-text);border-radius:var(--border-radius);box-shadow:0 4px 12px #0000001a;width:var(--width);font-size:13px;display:flex;align-items:center;gap:6px}:where([data-sonner-toast]:focus-visible){box-shadow:0 4px 12px #0000001a,0 0 0 2px #0003}:where([data-sonner-toast][data-y-position="top"]){top:0;--y: translateY(-100%);--lift: 1;--lift-amount: calc(1 * var(--gap))}:where([data-sonner-toast][data-y-position="bottom"]){bottom:0;--y: translateY(100%);--lift: -1;--lift-amount: calc(var(--lift) * var(--gap))}:where([data-sonner-toast]) :where([data-description]){font-weight:400;line-height:1.4;color:inherit}:where([data-sonner-toast]) :where([data-title]){font-weight:500;line-height:1.5;color:inherit}:where([data-sonner-toast]) :where([data-icon]){display:flex;height:16px;width:16px;position:relative;justify-content:flex-start;align-items:center;flex-shrink:0;margin-left:var(--toast-icon-margin-start);margin-right:var(--toast-icon-margin-end)}:where([data-sonner-toast][data-promise="true"]) :where([data-icon])>svg{opacity:0;transform:scale(.8);transform-origin:center;animation:sonner-fade-in .3s ease forwards}:where([data-sonner-toast]) :where([data-icon])>*{flex-shrink:0}:where([data-sonner-toast]) :where([data-icon]) svg{margin-left:var(--toast-svg-margin-start);margin-right:var(--toast-svg-margin-end)}:where([data-sonner-toast]) :where([data-content]){display:flex;flex-direction:column;gap:2px}[data-sonner-toast][data-styled=true] [data-button]{border-radius:4px;padding-left:8px;padding-right:8px;height:24px;font-size:12px;color:var(--normal-bg);background:var(--normal-text);margin-left:var(--toast-button-margin-start);margin-right:var(--toast-button-margin-end);border:none;cursor:pointer;outline:none;display:flex;align-items:center;flex-shrink:0;transition:opacity .4s,box-shadow .2s}:where([data-sonner-toast]) :where([data-button]):focus-visible{box-shadow:0 0 0 2px #0006}:where([data-sonner-toast]) :where([data-button]):first-of-type{margin-left:var(--toast-button-margin-start);margin-right:var(--toast-button-margin-end)}:where([data-sonner-toast]) :where([data-cancel]){color:var(--normal-text);background:rgba(0,0,0,.08)}:where([data-sonner-toast][data-theme="dark"]) :where([data-cancel]){background:rgba(255,255,255,.3)}:where([data-sonner-toast]) :where([data-close-button]){position:absolute;
174left:var(--toast-close-button-start);right:var(--toast-close-button-end);top:0;height:20px;width:20px;display:flex;justify-content:center;align-items:center;padding:0;color:var(--gray12);border:1px solid var(--gray4);transform:var(--toast-close-button-transform);border-radius:50%;cursor:pointer;z-index:1;transition:opacity .1s,background .2s,border-color .2s}[data-sonner-toast] [data-close-button]{background:var(--gray1)}:where([data-sonner-toast]) :where([data-close-button]):focus-visible{box-shadow:0 4px 12px #0000001a,0 0 0 2px #0003}:where([data-sonner-toast]) :where([data-disabled="true"]){cursor:not-allowed}:where([data-sonner-toast]):hover :where([data-close-button]):hover{background:var(--gray2);border-color:var(--gray5)}:where([data-sonner-toast][data-swiping="true"]):before{content:"";position:absolute;left:-50%;right:-50%;height:100%;z-index:-1}:where([data-sonner-toast][data-y-position="top"][data-swiping="true"]):before{bottom:50%;transform:scaleY(3) translateY(50%)}:where([data-sonner-toast][data-y-position="bottom"][data-swiping="true"]):before{top:50%;transform:scaleY(3) translateY(-50%)}:where([data-sonner-toast][data-swiping="false"][data-removed="true"]):before{content:"";position:absolute;inset:0;transform:scaleY(2)}:where([data-sonner-toast]):after{content:"";position:absolute;left:0;height:calc(var(--gap) + 1px);bottom:100%;width:100%}:where([data-sonner-toast][data-mounted="true"]){--y: translateY(0);opacity:1}:where([data-sonner-toast][data-expanded="false"][data-front="false"]){--scale: var(--toasts-before) * .05 + 1;--y: translateY(calc(var(--lift-amount) * var(--toasts-before))) scale(calc(-1 * var(--scale)));height:var(--front-toast-height)}:where([data-sonner-toast])>*{transition:opacity .4s}:where([data-sonner-toast][data-expanded="false"][data-front="false"][data-styled="true"])>*{opacity:0}
174:where([data-sonner-toast][data-visible="false"]){opacity:0;pointer-events:none}:where([data-sonner-toast][data-mounted="true"][data-expanded="true"]){--y: translateY(calc(var(--lift) * var(--offset)));height:var(--initial-height)}:where([data-sonner-toast][data-removed="true"][data-front="true"][data-swipe-out="false"]){--y: translateY(calc(var(--lift) * -100%));opacity:0}:where([data-sonner-toast][data-removed="true"][data-front="false"][data-swipe-out="false"][data-expanded="true"]){--y: translateY(calc(var(--lift) * var(--offset) + var(--lift) * -100%));opacity:0}:where([data-sonner-toast][data-removed="true"][data-front="false"][data-swipe-out="false"][data-expanded="false"]){--y: translateY(40%);opacity:0;transition:transform .5s,opacity .2s}:where([data-sonner-toast][data-removed="true"][data-front="false"]):before{height:calc(var(--initial-height) + 20%)}[data-sonner-toast][data-swiping=true]{transform:var(--y) translateY(var(--swipe-amount-y, 0px)) translate(var(--swipe-amount-x, 0px));transition:none}[data-sonner-toast][data-swiped=true]{user-select:none}[data-sonner-toast][data-swipe-out=true][data-y-position=bottom],[data-sonner-toast][data-swipe-out=true][data-y-position=top]{animation-duration:.2s;animation-timing-function:ease-out;animation-fill-mode:forwards}[data-sonner-toast][data-swipe-out=true][data-swipe-direction=left]{animation-name:swipe-out-left}[data-sonner-toast][data-swipe-out=true][data-swipe-direction=right]{animation-name:swipe-out-right}[data-sonner-toast][data-swipe-out=true][data-swipe-direction=up]{animation-name:swipe-out-up}[data-sonner-toast][data-swipe-out=true][data-swipe-direction=down]{animation-name:swipe-out-down}@keyframes swipe-out-left{0%{transform:var(--y) translate(var(--swipe-amount-x));opacity:1}to{transform:var(--y) translate(calc(var(--swipe-amount-x) - 100%));opacity:0}}@keyframes swipe-out-right{0%{transform:var(--y) translate(var(--swipe-amount-x));opacity:1}to{transform:var(--y) translate(calc(var(--swipe-amount-x) + 100%));opacity:0}}@keyframes swipe-out-up{0%{transform:var(--y) translateY(var(--swipe-amount-y));opacity:1}to{transform:var(--y) translateY(calc(var(--swipe-amount-y) - 100%));opacity:0}}@keyframes swipe-out-down{0%{transform:var(--y) translateY(var(--swipe-amount-y));opacity:1}to{transform:var(--y) translateY(calc(var(--swipe-amount-y) + 100%));opacity:0}}@media (max-width: 600px){[data-sonner-toaster]{position:fixed;right:var(--mobile-offset-right);left:var(--mobile-offset-left);width:100%}[data-sonner-toaster][dir=rtl]{left:calc(var(--mobile-offset-left) * -1)}[data-sonner-toaster] [data-sonner-toast]{left:0;right:0;width:calc(100% - var(--mobile-offset-left) * 2)}[data-sonner-toaster][data-x-position=left]{left:var(--mobile-offset-left)}[data-sonner-toaster][data-y-position=bottom]{bottom:var(--mobile-offset-bottom)}[data-sonner-toaster][data-y-position=top]{top:var(--mobile-offset-top)}[data-sonner-toaster][data-x-position=center]{left:var(--mobile-offset-left);right:var(--mobile-offset-right);transform:none}}[data-sonner-toaster][data-theme=light]{--normal-bg: #fff;--normal-border: var(--gray4);--normal-text: var(--gray12);--success-bg: hsl(143, 85%, 96%);--success-border: hsl(145, 92%, 91%);--success-text: hsl(140, 100%, 27%);--info-bg: hsl(208, 100%, 97%);--info-border: hsl(221, 91%, 91%);--info-text: hsl(210, 92%, 45%);--warning-bg: hsl(49, 100%, 97%);--warning-border: hsl(49, 91%, 91%);--warning-text: hsl(31, 92%, 45%);--error-bg: hsl(359, 100%, 97%);--error-border: hsl(359, 100%, 94%);--error-text: hsl(360, 100%, 45%)}[data-sonner-toaster][data-theme=light] [data-sonner-toast][data-invert=true]{--normal-bg: #000;--normal-border: hsl(0, 0%, 20%);--normal-text: var(--gray1)}[data-sonner-toaster][data-theme=dark] [data-sonner-toast][data-invert=true]{--normal-bg: #fff;--normal-border: var(--gray3);--normal-text: var(--gray12)}[data-sonner-toaster][data-theme=dark]{--normal-bg: #000;--normal-bg-hover: hsl(0, 0%, 12%);--normal-border: hsl(0, 0%, 20%);--normal-border-hover: hsl(0, 0%, 25%);--normal-text: var(--gray1);--success-bg: hsl(150, 100%, 6%);--success-border: hsl(147, 100%, 12%);--success-text: hsl(150, 86%, 65%);--info-bg: hsl(215, 100%, 6%);--info-border: hsl(223, 100%, 12%);--info-text: hsl(216, 87%, 65%);--warning-bg: hsl(64, 100%, 6%);--warning-border: hsl(60, 100%, 12%);--warning-text: hsl(46, 87%, 65%);--error-bg: hsl(358, 76%, 10%);--error-border: hsl(357, 89%, 16%);
174--error-text: hsl(358, 100%, 81%)}[data-sonner-toaster][data-theme=dark] [data-sonner-toast] [data-close-button]{background:var(--normal-bg);border-color:var(--normal-border);color:var(--normal-text)}[data-sonner-toaster][data-theme=dark] [data-sonner-toast] [data-close-button]:hover{background:var(--normal-bg-hover);border-color:var(--normal-border-hover)}[data-rich-colors=true][data-sonner-toast][data-type=success],[data-rich-colors=true][data-sonner-toast][data-type=success] [data-close-button]{background:var(--success-bg);border-color:var(--success-border);color:var(--success-text)}[data-rich-colors=true][data-sonner-toast][data-type=info],[data-rich-colors=true][data-sonner-toast][data-type=info] [data-close-button]{background:var(--info-bg);border-color:var(--info-border);color:var(--info-text)}[data-rich-colors=true][data-sonner-toast][data-type=warning],[data-rich-colors=true][data-sonner-toast][data-type=warning] [data-close-button]{background:var(--warning-bg);border-color:var(--warning-border);color:var(--warning-text)}[data-rich-colors=true][data-sonner-toast][data-type=error],[data-rich-colors=true][data-sonner-toast][data-type=error] [data-close-button]{background:var(--error-bg);border-color:var(--error-border);color:var(--error-text)}.sonner-loading-wrapper{--size: 16px;height:var(--size);width:var(--size);position:absolute;inset:0;z-index:10}.sonner-loading-wrapper[data-visible=false]{transform-origin:center;animation:sonner-fade-out .2s ease forwards}.sonner-spinner{position:relative;top:50%;left:50%;height:var(--size);width:var(--size)}.sonner-loading-bar{animation:sonner-spin 1.2s linear infinite;background:var(--gray11);border-radius:6px;height:8%;left:-10%;position:absolute;top:-3.9%;width:24%}.sonner-loading-bar:nth-child(1){animation-delay:-1.2s;transform:rotate(.0001deg) translate(146%)}.sonner-loading-bar:nth-child(2){animation-delay:-1.1s;transform:rotate(30deg) translate(146%)}.sonner-loading-bar:nth-child(3){animation-delay:-1s;transform:rotate(60deg) translate(146%)}.sonner-loading-bar:nth-child(4){animation-delay:-.9s;transform:rotate(90deg) translate(146%)}.sonner-loading-bar:nth-child(5){animation-delay:-.8s;transform:rotate(120deg) translate(146%)}.sonner-loading-bar:nth-child(6){animation-delay:-.7s;transform:rotate(150deg) translate(146%)}.sonner-loading-bar:nth-child(7){animation-delay:-.6s;transform:rotate(180deg) translate(146%)}.sonner-loading-bar:nth-child(8){animation-delay:-.5s;transform:rotate(210deg) translate(146%)}.sonner-loading-bar:nth-child(9){animation-delay:-.4s;transform:rotate(240deg) translate(146%)}.sonner-loading-bar:nth-child(10){animation-delay:-.3s;transform:rotate(270deg) translate(146%)}.sonner-loading-bar:nth-child(11){animation-delay:-.2s;transform:rotate(300deg) translate(146%)}.sonner-loading-bar:nth-child(12){animation-delay:-.1s;transform:rotate(330deg) translate(146%)}@keyframes sonner-fade-in{0%{opacity:0;transform:scale(.8)}to{opacity:1;transform:scale(1)}}@keyframes sonner-fade-out{0%{opacity:1;transform:scale(1)}to{opacity:0;transform:scale(.8)}}@keyframes sonner-spin{0%{opacity:1}to{opacity:.15}}@media (prefers-reduced-motion){[data-sonner-toast],[data-sonner-toast]>*,.sonner-loading-bar{transition:none!important;animation:none!important}}.sonner-loader{position:absolute;top:50%;left:50%;transform:translate(-50%,-50%);transform-origin:center;transition:opacity .2s,transform .2s}.sonner-loader[data-visible=false]{opacity:0;transform:scale(.8) translate(-50%,-50%)} 175</style><link rel="modulepreload" as="script" crossorigin="" href="/assets/PublicPayload-BdjI451m.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/QuickSendModal-CQmjuf-l.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/badge-XJ-ekfky.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/checkbox-CLrZ-oDk.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/switch-CytVYzhY.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/tabs-C7WAY928.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/trending-up-DtVV2BY5.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/AreaChart-Ccxmcukk.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/select-5kNhwI7E.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/mail-Dk4-qTC8.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/alert-circle-mXEU0qr-.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/loader-2-RpObhsNd.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/useDocumentTitle-BOGfSQQj.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/separator-DUsDTrP6.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/input-CnDjsPPe.js">
175<link rel="modulepreload" as="script" crossorigin="" href="/assets/arrow-right-MD1KK-cE.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/external-link-C0FWOmYM.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/target-j0u56wDh.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/layers-Cv8344bu.js"><link rel="modulepreload" as="script" crossorigin="" href="/assets/search-CIwB5ZE9.js"></head> 176 <body> 177 <div id="root"><div class="min-h-screen bg-background"><header class="border-b bg-card/50 backdrop-blur-sm sticky top-0 z-10"><div class="container max-w-6xl mx-auto px-4 py-4"><div class="flex items-center justify-between"><a class="flex items-center gap-2" href="/"><svg width="28" height="28" viewBox="0 0 256 256" class="text-primary" xmlns="http://www.w3.org/2000/svg"><path d="M 126.33 9.36 L 126.34 66.33 L 28.12 66.29 Z" fill="none" stroke="hsl(var(--primary))" stroke-width="10" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 25.71 69.3 L 127.19 127.82 L 127.17 245.05 L 25.70 186.47 Z" fill="none" stroke="hsl(var(--primary))" stroke-width="10" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 230.34 69.25 L 230.39 186.39 L 128.86 245.03 L 128.88 127.80 Z" fill="none" stroke="hsl(var(--primary))" stroke-width="10" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 128.02 9.68 L 229 67.97 L 128.04 126.23 L 27.04 67.99 L 128 68.03 L 128.02 9.68 Z" fill="none" stroke="hsl(var(--primary))" stroke-width="10" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="text-lg font-semibold text-foreground">delivr.to</span></a><div class="flex items-center gap-2"><button class="inline-flex items-center justify-center whitespace-nowrap rounded-md text-sm font-medium ring-offset-background transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:pointer-events-none disabled:opacity-50 hover:bg-primary/10 hover:text-primary h-10 w-10" type="button" id="radix-:r0:" aria-haspopup="menu" aria-expanded="false" data-state="closed"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-sun h-5 w-5"><circle cx="12" cy="12" r="4"></circle><path d="M12 2v2"></path><path d="M12 20v2"></path><path d="m4.93 4.93 1.41 1.41"></path><path d="m17.66 17.66 1.41 1.41"></path><path d="M2 12h2"></path><path d="M20 12h2"></path><path d="m6.34 17.66-1.41 1.41"></path><path d="m19.07 4.93-1.41 1.41"></path></svg><span class="sr-only">Toggle theme</span></button><a href="https://auth.delivr.to/login?client_id=1vrddd8j39trhppuot7be6om5c&response_type=code&scope=aws.cognito.signin.user.admin+email+openid+profile&redirect_uri=http%3A%2F%2Flocalhost%3A4173%2Fauth%2Fcallback&state=%2Fapp%2Fpayloads" class="inline-flex items-center justify-center whitespace-nowrap text-sm font-medium ring-offset-background transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:pointer-events-none disabled:opacity-50 bg-primary text-primary-foreground hover:bg-primary/90 h-9 rounded-md px-3 gap-2">Test Your Email Security<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-arrow-right h-4 w-4"><path d="M5 12h14"></path><path d="m12 5 7 7-7 7"></path></svg></a></div></div></div></header><main class="container max-w-6xl mx-auto py-8 px-4"><div class="mb-8"><h1 class="text-3xl font-bold text-foreground mb-2">Payload Catalogue</h1><p class="text-muted-foreground">Browse our library of 800+ payloads and templates for testing email security.</p></div><div class="space-y-4"><div dir="ltr" data-orientation="horizontal"><div class="flex items-center justify-between gap-4 flex-wrap"><div role="tablist" aria-orientation="horizontal" class="inline-flex h-9 items-center justify-center rounded-lg bg-muted p-1 text-muted-foreground" tabindex="0" data-orientation="horizontal" style="outline: none;"><button type="button" role="tab" aria-selected="false" aria-controls="radix-:r2:-content-payloads" data-state="inactive" id="radix-:r2:-trigger-payloads" class="inline-flex items-center justify-center whitespace-nowrap rounded-md px-3 py-1 text-sm font-medium ring-offset-background transition-all focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:pointer-events-none disabled:opacity-50 data-[state=active]:bg-background data-[state=active]:text-foreground data-[state=active]:shadow gap-2" tabindex="-1" data-orientation="horizontal" data-radix-collection-item=""><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-4 w-4"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg>Payloads</button><button type="button" role="tab" aria-selected="true" aria-controls="radix-:r2:-content-templates" data-state="active" id="radix-:r2:-trigger-templates" class="inline-flex items-center justify-center whitespace-nowrap rounded-md px-3 py-1 text-sm font-medium ring-offset-background transition-all focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:pointer-events-none disabled:opacity-50 data-[state=active]:bg-background data-[state=active]:text-foreground data-[state=active]:shadow gap-2" tabindex="-1" data-orientation="horizontal" data-radix-collection-item=""><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-layers h-4 w-4"><path d="m12.83 2.18a2 2 0 0 0-1.66 0L2.6 6.08a1 1 0 0 0 0 1.83l8.58 3.91a2 2 0 0 0 1.66 0l8.58-3.9a1 1 0 0 0 0-1.83Z"></path><path d="m22 17.65-9.17 4.16a2 2 0 0 1-1.66 0L2 17.65"></path><path d="m22 12.65-9.17 4.16a2 2 0 0 1-1.66 0L2 12.65"></path></svg>Templates</button></div><div class="flex items-center gap-4"><div class="relative flex-1 min-w-[200px]"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-search absolute left-3 top-1/2 -translate-y-1/2 h-4 w-4 text-muted-foreground"><circle cx="11" cy="11" r="8"></circle><path d="m21 21-4.3-4.3"></path></svg><input class="flex h-9 w-full rounded-md border border-input bg-transparent px-3 py-1 text-base shadow-sm transition-colors file:border-0 file:bg-transparent file:text-sm file:font-medium file:text-foreground placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring disabled:cursor-not-allowed disabled:opacity-50 md:text-sm pl-9" placeholder="Search templates..." value=""></div><span class="text-sm text-muted-foreground whitespace-nowrap">21 templates</span></div></div><div data-state="inactive" data-orientation="horizontal" role="tabpanel" aria-labelledby="radix-:r2:-trigger-payloads" hidden="" id="radix-:r2:-content-payloads" tabindex="0" class="ring-offset-background focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 mt
177-4"></div><div data-state="active" data-orientation="horizontal" role="tabpanel" aria-labelledby="radix-:r2:-trigger-templates" id="radix-:r2:-content-templates" tabindex="0" class="ring-offset-background focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 mt-4" style=""><div class="flex gap-6"><div class="transition-all flex-1 min-w-0 max-h-[calc(100vh-8rem)] overflow-y-auto pr-2"><div class="grid gap-4 grid-cols-1 md:grid-cols-2 lg:grid-cols-3"><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/evilginx.png" alt="AiTM Payloads" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">AiTM Payloads</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">Premium & Enterprise only. AitM phishing uses tooling to act as a proxy between the target and a legitimate login portal for an application. This campaign contains a variety of payloads that can be used to test your defenses against AitM phishing.</p><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>5 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/all.jpeg" alt="All Payloads" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">All Payloads</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">This campaign contains all the payloads available to you. Malicious and benign; everything from Office macros, to 'Mark of the Web' bypassing containerised payloads, to threat intel samples. This campaign has it all.</p><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>829 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/evilnovnc.jpg" alt="BiTM Payloads" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">BiTM Payloads</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">Premium & Enterprise only. BitM phishing is a technique that uses a virtual browser to capture user credentials and session cookies. This campaign contains a variety of payloads that can be used to test your defenses against BitM phishing.</p><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>3 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/body-payloads.jpeg" alt="Body Payloads" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">Body Payloads</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">Phishing isn't just about attachments and links! Threat actors are leveraging the email body to impersonate brands, provide convincing social engineering pretexts, exploit email client vulnerabilities and deliver other malicious content.</p><div class="flex flex-wrap gap-1 mt-2"><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">benign</div></div><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>28 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/brand-impersonation.jpeg" alt="Brand Impersonation" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">Brand Impersonation</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">This campaign contains examples of brand impersonation used by real-world threat actors. Be that HTML smuggled content with fake file-sharing site backgrounds, or links to backdoored installer
177s for popular messaging applications.</p><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>65 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/browser-testing.png" alt="Browser Testing" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">Browser Testing</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">Premium & Enterprise only. Browser-based attack payloads including AiTM proxying, BiTM virtual browsers, ClickFix social engineering, pastejacking clipboard hijacking, and DragFix drag-and-drop abuse. Use this campaign to test your defenses against the full spectrum of browser-targeting techniques.</p><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>17 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/callback.jpeg" alt="Callback Phishing" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">Callback Phishing</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">The telephone isn't dead! Test your defenses against callback phishing using a variety of file formats, including PDFs and images, that display fake invoices from several big-name brands.</p><div class="flex flex-wrap gap-1 mt-2"><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">callbackphishing</div></div><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>13 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/containers.jpeg" alt="Container File Testing" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">Container File Testing</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">Containers are often used to deliver content that might otherwise be blocked, so use this collection of weaponised ISO, Zip, RAR and 7zip files to test your exposure.</p><div class="flex flex-wrap gap-1 mt-2"><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">container</div><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">benign</div></div><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>90 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/top10.jpeg" alt="delivr.to's Top 10 Payloads" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">delivr.to's Top 10 Payloads</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">This campaign contains delivr.to's current top 10 payloads. Highlighting recent trends in threat actor activity and emerging threats, including ICS invites, auth coercion techniques, DragFix and emerging vulnerabilities.</p><div class="flex flex-wrap gap-1 mt-2"><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">authcoerce</div><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">fakecaptcha</div><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">exploit</div></div><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>10 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/eicar.jpeg" alt="EICAR Testing" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">EICAR Testing</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">This campaign puts mail filter Anti-Virus to the test! An EICAR string - a standardised way to test AV - embedded in a variety of formats, including âcontainerâ formats such as ISOs, 7zip files, and password-protected zips.</p><div class="flex flex-wrap gap-1 mt-2"><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">eicar</div></div><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>77 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/file-types.jpeg" alt="File Type Testing" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">File Type Testing</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">A broad range of file types, all benign, designed to give you insight into what file types can reach your mailbox. This includes executable, document, and container file types, and combinations of all 3 (think LNK in a Zip in an ISO ð)</p><div class="flex flex-wrap gap-1 mt-2"><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">benign</div></div><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>229 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/health-check.jpeg" alt="Health Check" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">Health Check</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">Your one stop shop for testing mail control effectiveness. Includes all the payloads that you wouldn't want to reach your inbox, ranging from EICAR-embedded text documents right through to the latest NOBELIUM sample.</p><div class="flex flex-wrap gap-1 mt-2"><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">eicar</div><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">htmlsmuggling</div><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">evasion</div></div><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>507 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/smuggling.jpeg" alt="HTML Smuggling" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">HTML Smuggling</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">This campaign explores variations of payload delivery via HTML smuggling. Payload formats that would otherwise likely be blocked by mail filtering, e.g. .exe and .ps1, are embedded within HTML files and sent as attachments.</p><div class="flex flex-wrap gap-1 mt-2"><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">htmlsmuggling</div></div><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>87 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/metasploit.jpeg" alt="Metasploit Payloads" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">Metasploit Payloads</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">This campaign includes the default payloads generated by the popular hacking tool, Metasploit. This also includes variations using the built-in 'Shikata Ga Nai' encoder.</p><div class="flex flex-wrap gap-1 mt-2"><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">malicious</div><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">metasploit</div><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text
177-secondary-foreground hover:bg-secondary/80 text-xs">msfvenom</div></div><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>28 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/offensive-vba.jpeg" alt="OffensiveVBA Office Files" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">OffensiveVBA Office Files</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">Contains VBA macros from <a href="https://github.com/S3cur3Th1sSh1t" target="_blank" rel="noopener noreferrer" class="text-primary hover:underline">@S3cur3Th1sSh1t</a>'s OffensiveVBA collection. 20+ VBA samples including ETW and AMSI Bypasses, PPID Spoofing and sandbox evasion have been adapted and embedded within popular Microsoft Office formats.</p><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>262 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/office.jpeg" alt="Office File Testing" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">Office File Testing</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">Microsoft Office documents are a common vehicle for malware delivery. This campaign delivers a variety of benign Office formats across Word, PowerPoint, Excel and Access. Know your .xlsbs from your .xlams? Or your .wlls from your .docs?</p><div class="flex flex-wrap gap-1 mt-2"><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">benign</div><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">office</div></div><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>91 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/macro-evasion.jpeg" alt="Office Macro Evasion" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">Office Macro Evasion</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">Not all Microsoft Office VBA macros are created equal! Test your mail filter capabilities against samples that implement evasion techniques such as VBA Stomping, analysis resistance measures and alternative execution methods that steer clear of the classic AutoOpen.</p><div class="flex flex-wrap gap-1 mt-2"><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">evasion</div><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">office</div></div><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>4 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/pdf.jpeg" alt="PDF Links" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">PDF Links</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">Several malware families, including QakBot, Bumblebee and IcedId have been delivered via PDF attachments containing links to hosted content. These hosted files range from zipped ISO, LNK, DLL combinations, to script formats such as HTAs.</p><div class="flex flex-wrap gap-1 mt-2"><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">pdf</div><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">link</div></div><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>6 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/qr-code.jpeg" alt="QR Code Phishing" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">
177QR Code Phishing</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">Emulate the threat actors deploying QR codes to bypass email filters. Contains various file formats with QR-coded links to hosted content such as login portals and executables.</p><div class="flex flex-wrap gap-1 mt-2"><div class="inline-flex items-center rounded-full border px-2.5 py-0.5 font-semibold transition-colors focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 border-transparent bg-secondary text-secondary-foreground hover:bg-secondary/80 text-xs">qrcode</div></div><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>20 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/ti.jpeg" alt="Threat Intel Samples" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">Threat Intel Samples</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">This campaign emulates the tradecraft seen in real-world, email-based attacks. This includes the threat actor, NOBELIUM's, use of DLL-launching LNKs packed into ISOs, and the commonly-abused use of right-to-left-override (RTLO) Unicode characters to obscure an attachment name.</p><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>118 payloads</span></div></div></div></div></div></div><div class="p-0.5"><div class="rounded-lg border bg-card text-card-foreground shadow-sm h-full hover:border-primary/50 transition-colors overflow-hidden cursor-pointer"><div class="aspect-video w-full bg-muted/20 overflow-hidden"><img src="https://delivr.to/images/unwanted_filetypes.jpg" alt="Unwanted File Types" class="w-full h-full object-cover"></div><div class="p-4"><div class="flex items-start gap-3"><div class="min-w-0 flex-1"><h4 class="font-medium text-sm truncate">Unwanted File Types</h4><p class="text-xs text-muted-foreground mt-1 line-clamp-4">Contains all the file types that delivr.to recommends most organisations block at the perimeter. It includes the common file types such as .exe, .js and .vbs, along with the weird & wonderful such as .pif and .msc.</p><div class="flex items-center gap-1 mt-2 text-xs text-muted-foreground"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-code h-3 w-3"><path d="M14.5 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7.5L14.5 2z"></path><polyline points="14 2 14 8 20 8"></polyline><path d="m10 13-2 2 2 2"></path><path d="m14 17 2-2-2-2"></path></svg><span>198 payloads</span></div></div></div></div></div></div></div></div></div></div></div></div></main><footer class="border-t bg-card/30 mt-16"><div class="container max-w-6xl mx-auto px-4 py-8"><div class="flex flex-col sm:flex-row items-center justify-between gap-4"><a class="flex items-center gap-2" href="/"><svg width="24" height="24" viewBox="0 0 256 256" class="text-primary" xmlns="http://www.w3.org/2000/svg"><path d="M 126.33 9.36 L 126.34 66.33 L 28.12 66.29 Z" fill="none" stroke="hsl(var(--primary))" stroke-width="10" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 25.71 69.3 L 127.19 127.82 L 127.17 245.05 L 25.70 186.47 Z" fill="none" stroke="hsl(var(--primary))" stroke-width="10" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 230.34 69.25 L 230.39 186.39 L 128.86 245.03 L 128.88 127.80 Z" fill="none" stroke="hsl(var(--primary))" stroke-width="10" stroke-linecap="round" stroke-linejoin="round"></path><path d="M 128.02 9.68 L 229 67.97 L 128.04 126.23 L 27.04 67.99 L 128 68.03 L 128.02 9.68 Z" fill="none" stroke="hsl(var(--primary))" stroke-width="10" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="font-semibold text-foreground">delivr.to</span></a><p class="text-sm text-muted-foreground">© 2026 delivr.to. Test your email security with real-world malware replications.</p></div></div></footer></div><div class="fixed bottom-4 left-4 z-50 max-w-sm transition-all duration-300 ease-out opacity-100 translate-y-0 animate-in slide-in-from-bottom-4"><div class="rounded-xl p-5 shadow-lg backdrop-blur-sm bg-white/95 border border-gray-200/50 shadow-gray-200/50 dark:bg-gray-900/95 dark:border-gray-700/50 dark:shadow-primary/10"><div class="flex items-start gap-3"><div class="flex-shrink-0 p-2 rounded-lg bg-primary/10 dark:bg-primary/20"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-cookie h-5 w-5 text-primary"><path d="M12 2a10 10 0 1 0 10 10 4 4 0 0 1-5-5 4 4 0 0 1-5-5"></path><path d="M8.5 8.5v.01"></path><path d="M16 15.5v.01"></path><path d="M12 12v.01"></path><path d="M11 17v.01"></path><path d="M7 14v.01"></path></svg></div><div class="flex-1 min-w-0"><h3 class="font-semibold text-base mb-1 text-gray-900 dark:text-white">We use cookies!</h3><p class="text-sm leading-relaxed text-gray-600 dark:text-gray-400">Hi, this website uses essential cookies to ensure its proper operation and tracking cookies to understand how you interact with it.</p></div></div><div class="mt-4 flex gap-2"><button class="inline-flex items-center justify-center whitespace-nowrap rounded-md text-sm r
177ing-offset-background transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:pointer-events-none disabled:opacity-50 h-10 px-4 py-2 flex-1 font-medium bg-primary hover:bg-primary/90 text-primary-foreground">Accept all</button></div></div></div><section aria-label="Notifications alt+T" tabindex="-1" aria-live="polite" aria-relevant="additions text" aria-atomic="false"></section></div> 178 179 180</body></html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.