Report - spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php

Report Overview

Submitted URL
spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php
IP
45.55.112.74
ASN
#14061 DIGITALOCEAN-ASN
Submitted
2024-04-25 16:12:11
Access
public
Website Title
Login
Final URL
spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php
Tags
spotify phishing music
urlquery detections
Phishing - Spotify

Detections

urlquery
6
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
encore.scdn.co	25928	2010-08-20	2020-07-15	2024-04-24	1.8 kB	190 kB	95.101.11.57
spotify-billing9495-itsmezak9486503.codeanyapp.com	unknown	unknown	No data	No data	3.7 kB	278 kB	45.55.112.74
www-growth.scdn.co	34964	unknown	2019-09-17	2024-03-12	475 B	236 B	151.101.246.248

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-25 16:11:46	low	Client IP	45.55.112.74	ET INFO Observed Domain used for Phishing in TLS SNI (codeanyapp .com)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php	3.2 kB	2023-12-06	2024-04-30
Pretty URL spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php IP 45.55.112.74 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-06 18:10:34 Last Seen2024-04-30 17:57:31 Times Seen29 Hash 698855ab306e9c2c403543de97113e50 a80d32eab61b243bb9a95f462ae4c595e6546208 35be4b64edaa92ce3841949f9caaf307226e5864fa33e4e9dd8aa0fa542800cd Loading...

HTTP Transactions (10)

URL IP Response Size

spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php

45.55.112.74

200 OK

9.0 kB

URL User Request GET HTTP/2
spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php
IP
45.55.112.74:443
ASN
#14061 DIGITALOCEAN-ASN

Certificate
IssuerLet's Encrypt
Subjectcodeanyapp.com
FingerprintDF:F1:05:0B:4D:01:A4:04:2E:1F:4B:2B:BE:14:39:08:2D:AA:4C:AD
ValidityFri, 19 Apr 2024 07:22:36 GMT - Thu, 18 Jul 2024 07:22:35 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (4243), with CRLF, LF line terminators
Size
9.0 kB (9034 bytes)
Hash
46b5c8837bd2e82f47321200fb9fe85d
b9e05d163e6ffba497167f04002278a0e278e8b6
cec4ce6df55652b3d5a4e932c6cc83e036696561d51f72f376e1c74cd85a8726

HTTP Headers

GET /en-us/gspot/user/login.php HTTP/1.1
Host: spotify-billing9495-itsmezak9486503.codeanyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:28:17 GMT
content-type: text/html; charset=UTF-8
content-length: 9034
set-cookie: PHPSESSID=b7kdrsjfdpa3nb646cka3trl2f; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/assets/css/2Rknj0xIhV1B.css

45.55.112.74

200 OK

3.4 kB

URL GET HTTP/2
spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/assets/css/2Rknj0xIhV1B.css
IP
45.55.112.74:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php
Certificate
IssuerLet's Encrypt
Subjectcodeanyapp.com
FingerprintDF:F1:05:0B:4D:01:A4:04:2E:1F:4B:2B:BE:14:39:08:2D:AA:4C:AD
ValidityFri, 19 Apr 2024 07:22:36 GMT - Thu, 18 Jul 2024 07:22:35 GMT

File type
ASCII text, with very long lines (1488), with CRLF line terminators
Size
3.4 kB (3350 bytes)
Hash
b2a7c7c2e7f42fe4b6c4b84cd8e884dd
fe5602f67e66b5baaa86b004631faf80b7971202
183da0f3f2e449aaaf5bb0aa08df5c35b60acc98cba9702432de88c7371fae49

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Spotify

HTTP Headers

GET /en-us/gspot/assets/css/2Rknj0xIhV1B.css HTTP/1.1
Host: spotify-billing9495-itsmezak9486503.codeanyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php
Cookie: PHPSESSID=b7kdrsjfdpa3nb646cka3trl2f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:28:17 GMT
content-type: text/css
content-length: 3350
last-modified: Wed, 24 Apr 2024 22:55:54 GMT
etag: "6a46-616df92a3f280-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

www-growth.scdn.co/_next/static/css/2Rknj0xIhV1B.css

151.101.246.248

404 Not Found

0 B

URL GET HTTP/1.1
www-growth.scdn.co/_next/static/css/2Rknj0xIhV1B.css
IP
151.101.246.248:443
ASN
#54113 FASTLY

Requested by
https://spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php
Certificate
IssuerGlobalSign nv-sa
Subject*.scdn.co
Fingerprint96:08:82:C2:CB:0C:82:BD:0A:EA:18:76:73:89:54:F3:EC:97:D3:1C
ValidityTue, 09 Apr 2024 09:05:08 GMT - Sun, 11 May 2025 09:05:07 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /_next/static/css/2Rknj0xIhV1B.css HTTP/1.1
Host: www-growth.scdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify-billing9495-itsmezak9486503.codeanyapp.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Connection: close
Content-Length: 0
Retry-After: 0
Accept-Ranges: bytes
Date: Thu, 25 Apr 2024 16:11:47 GMT
X-Served-By: cache-hel1410026-HEL
X-Cache: MISS
X-Cache-Hits: 0
Access-Control-Allow-Origin: *

encore.scdn.co/1.2.3/CircularSpotify-UI-Latin-OS2v3-Bold.woff2

95.101.11.57

200 OK

64 kB

URL GET HTTP/2
encore.scdn.co/1.2.3/CircularSpotify-UI-Latin-OS2v3-Bold.woff2
IP
95.101.11.57:443
ASN
#20940 Akamai International B.V.

Requested by
https://spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php
Certificate
IssuerDigiCert Inc
Subject*.scdn.co
Fingerprint0A:0F:59:45:2C:FF:37:3C:FE:37:27:AD:32:64:59:A9:5A:B6:2F:30
ValidityMon, 31 Jul 2023 00:00:00 GMT - Mon, 19 Aug 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 64098, version 1.66
Size
64 kB (64029 bytes)
Hash
67170478d3578576e2fb314f67cd1f8e
07d8915a30ccf7a46838991eb5ca45c6edae384c
faad3530bbb4c6f078f530a878e3a52295bcd8f7e424c97e24774dbe86375c2a

HTTP Headers

GET /1.2.3/CircularSpotify-UI-Latin-OS2v3-Bold.woff2 HTTP/1.1
Host: encore.scdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spotify-billing9495-itsmezak9486503.codeanyapp.com/
Origin: https://spotify-billing9495-itsmezak9486503.codeanyapp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Thu, 04 Jun 2020 09:59:44 GMT
etag: "a5ac0b2089e1c087e9229c21f8dc27bc"
content-type: font/woff2
content-encoding: gzip
x-amz-checksum-crc32c: /vMmlA==
accept-ranges: bytes
content-length: 64029
cache-control: max-age=31536000
expires: Fri, 25 Apr 2025 16:11:47 GMT
date: Thu, 25 Apr 2024 16:11:47 GMT
vary: Accept-Encoding
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-max-age: 86400
access-control-allow-headers: range
access-control-allow-methods: GET
X-Firefox-Spdy: h2

encore.scdn.co/1.2.3/CircularSpotify-UI-Latin-OS2v3-Book.woff2

95.101.11.57

200 OK

60 kB

URL GET HTTP/2
encore.scdn.co/1.2.3/CircularSpotify-UI-Latin-OS2v3-Book.woff2
IP
95.101.11.57:443
ASN
#20940 Akamai International B.V.

Requested by
https://spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php
Certificate
IssuerDigiCert Inc
Subject*.scdn.co
Fingerprint0A:0F:59:45:2C:FF:37:3C:FE:37:27:AD:32:64:59:A9:5A:B6:2F:30
ValidityMon, 31 Jul 2023 00:00:00 GMT - Mon, 19 Aug 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 59976, version 1.66
Size
60 kB (59969 bytes)
Hash
343ea4d66e40737dacc56d9bf1f1c2e5
702f5ca3f25b133744cb53fc1046619b67833934
5fe0f1f2b6468439e4776211f33569c98798cc42fe05c2ec73ad82d41bc84333

HTTP Headers

GET /1.2.3/CircularSpotify-UI-Latin-OS2v3-Book.woff2 HTTP/1.1
Host: encore.scdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spotify-billing9495-itsmezak9486503.codeanyapp.com/
Origin: https://spotify-billing9495-itsmezak9486503.codeanyapp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Thu, 04 Jun 2020 09:59:45 GMT
etag: "71fcc66327112fb20f3c8c3e60a841b6"
content-type: font/woff2
content-encoding: gzip
x-amz-checksum-crc32c: b0V1rQ==
accept-ranges: bytes
content-length: 59969
cache-control: max-age=31536000
expires: Fri, 25 Apr 2025 16:11:47 GMT
date: Thu, 25 Apr 2024 16:11:47 GMT
vary: Accept-Encoding
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-max-age: 86400
access-control-allow-headers: range
access-control-allow-methods: GET
X-Firefox-Spdy: h2

encore.scdn.co/1.2.3/CircularSpotify-UI-Latin-OS2v3-Black.woff2

95.101.11.57

200 OK

64 kB

URL GET HTTP/2
encore.scdn.co/1.2.3/CircularSpotify-UI-Latin-OS2v3-Black.woff2
IP
95.101.11.57:443
ASN
#20940 Akamai International B.V.

Requested by
https://spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php
Certificate
IssuerDigiCert Inc
Subject*.scdn.co
Fingerprint0A:0F:59:45:2C:FF:37:3C:FE:37:27:AD:32:64:59:A9:5A:B6:2F:30
ValidityMon, 31 Jul 2023 00:00:00 GMT - Mon, 19 Aug 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 63929, version 1.66
Size
64 kB (63803 bytes)
Hash
c2ff0d2c6b2881a4011115f08c1e8ea8
7f839d8fbca5d17ea4b26eff4ab2d09447c34549
ec2b383c934b812a84ee52176a14cf158767c1df4b4953e86c9ceb022d89e822

HTTP Headers

GET /1.2.3/CircularSpotify-UI-Latin-OS2v3-Black.woff2 HTTP/1.1
Host: encore.scdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spotify-billing9495-itsmezak9486503.codeanyapp.com/
Origin: https://spotify-billing9495-itsmezak9486503.codeanyapp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Thu, 04 Jun 2020 09:59:42 GMT
etag: "067f37b9d0d5d9f50c0fa5a64875f5b9"
content-type: font/woff2
content-encoding: gzip
x-amz-checksum-crc32c: 5o2kJA==
accept-ranges: bytes
content-length: 63803
cache-control: max-age=31536000
expires: Fri, 25 Apr 2025 16:11:47 GMT
date: Thu, 25 Apr 2024 16:11:47 GMT
vary: Accept-Encoding
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-max-age: 86400
access-control-allow-headers: range
access-control-allow-methods: GET
X-Firefox-Spdy: h2

spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/assets/fonts/VJ3mIe67CNQc.woff2

45.55.112.74

200 OK

84 kB

URL GET HTTP/2
spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/assets/fonts/VJ3mIe67CNQc.woff2
IP
45.55.112.74:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php
Certificate
IssuerLet's Encrypt
Subjectcodeanyapp.com
FingerprintDF:F1:05:0B:4D:01:A4:04:2E:1F:4B:2B:BE:14:39:08:2D:AA:4C:AD
ValidityFri, 19 Apr 2024 07:22:36 GMT - Thu, 18 Jul 2024 07:22:35 GMT

File type
Web Open Font Format (Version 2), TrueType, length 84088, version 1.66
Size
84 kB (84088 bytes)
Hash
4eaffdf96f4c6f984686e93d5d9cb325
8c576f620ae00a66282d8eb10dc2eb580888aaf1
9b7413f945c8b8bb3f75eb10513c7ad79d386e98494d541e5f1fa9301ffbddd6

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Spotify

HTTP Headers

GET /en-us/gspot/assets/fonts/VJ3mIe67CNQc.woff2 HTTP/1.1
Host: spotify-billing9495-itsmezak9486503.codeanyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/assets/css/2Rknj0xIhV1B.css
Cookie: PHPSESSID=b7kdrsjfdpa3nb646cka3trl2f
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:28:17 GMT
content-length: 84088
last-modified: Wed, 24 Apr 2024 22:56:02 GMT
etag: "14878-616df931e0480"
accept-ranges: bytes
X-Firefox-Spdy: h2

spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/assets/fonts/lGQSkegQbQiq.woff2

45.55.112.74

200 OK

90 kB

URL GET HTTP/2
spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/assets/fonts/lGQSkegQbQiq.woff2
IP
45.55.112.74:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php
Certificate
IssuerLet's Encrypt
Subjectcodeanyapp.com
FingerprintDF:F1:05:0B:4D:01:A4:04:2E:1F:4B:2B:BE:14:39:08:2D:AA:4C:AD
ValidityFri, 19 Apr 2024 07:22:36 GMT - Thu, 18 Jul 2024 07:22:35 GMT

File type
Web Open Font Format (Version 2), TrueType, length 89536, version 1.66
Size
90 kB (89536 bytes)
Hash
fe1cfc14b7498b187c78fa72fb72d148
6bec8ce832951162e0ebc4b257e3ee850fe7aade
039130d456855a745451bff40707bee5512bc4466373224b2258f67cc6c6d879

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Spotify

HTTP Headers

GET /en-us/gspot/assets/fonts/lGQSkegQbQiq.woff2 HTTP/1.1
Host: spotify-billing9495-itsmezak9486503.codeanyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/assets/css/2Rknj0xIhV1B.css
Cookie: PHPSESSID=b7kdrsjfdpa3nb646cka3trl2f
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:28:17 GMT
content-length: 89536
last-modified: Wed, 24 Apr 2024 22:56:04 GMT
etag: "15dc0-616df933c8900"
accept-ranges: bytes
X-Firefox-Spdy: h2

spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/assets/fonts/THx1Nf7TOqaI.woff2

45.55.112.74

200 OK

87 kB

URL GET HTTP/2
spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/assets/fonts/THx1Nf7TOqaI.woff2
IP
45.55.112.74:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php
Certificate
IssuerLet's Encrypt
Subjectcodeanyapp.com
FingerprintDF:F1:05:0B:4D:01:A4:04:2E:1F:4B:2B:BE:14:39:08:2D:AA:4C:AD
ValidityFri, 19 Apr 2024 07:22:36 GMT - Thu, 18 Jul 2024 07:22:35 GMT

File type
Web Open Font Format (Version 2), TrueType, length 87350, version 1.66
Size
87 kB (87350 bytes)
Hash
2fbf72b606d7f0b0f771ea4956a8b4d6
33783d6856da916a68a9a1fcc80f46627338fa84
1d752805498ebd36b9c69ad1d3da93b1561ea6b33f58ec89a66a4228a357dfe2

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Spotify

HTTP Headers

GET /en-us/gspot/assets/fonts/THx1Nf7TOqaI.woff2 HTTP/1.1
Host: spotify-billing9495-itsmezak9486503.codeanyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/assets/css/2Rknj0xIhV1B.css
Cookie: PHPSESSID=b7kdrsjfdpa3nb646cka3trl2f
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:28:17 GMT
content-length: 87350
last-modified: Wed, 24 Apr 2024 22:55:58 GMT
etag: "15536-616df92e0fb80"
accept-ranges: bytes
X-Firefox-Spdy: h2

spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/assets/images/A1Ywhbg3Xes8.png

45.55.112.74

200 OK

3.6 kB

URL GET HTTP/2
spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/assets/images/A1Ywhbg3Xes8.png
IP
45.55.112.74:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php
Certificate
IssuerLet's Encrypt
Subjectcodeanyapp.com
FingerprintDF:F1:05:0B:4D:01:A4:04:2E:1F:4B:2B:BE:14:39:08:2D:AA:4C:AD
ValidityFri, 19 Apr 2024 07:22:36 GMT - Thu, 18 Jul 2024 07:22:35 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Size
3.6 kB (3646 bytes)
Hash
326dfa6c84225dfca443693e985fdaab
5a8971cb61bcdae6431abbba6d5a79cefc7d2d45
0c7ee91862c795f69147f2174a919b1303dd28ce8ceccabe3f50ae219bfb01b7

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Spotify

HTTP Headers

GET /en-us/gspot/assets/images/A1Ywhbg3Xes8.png HTTP/1.1
Host: spotify-billing9495-itsmezak9486503.codeanyapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify-billing9495-itsmezak9486503.codeanyapp.com/en-us/gspot/user/login.php
Cookie: PHPSESSID=b7kdrsjfdpa3nb646cka3trl2f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:28:18 GMT
content-type: image/png
content-length: 3646
last-modified: Wed, 24 Apr 2024 22:56:06 GMT
etag: "e3e-616df935b0d80"
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (10)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2