| www.googletagmanager.com/gtm.js?id=GTM-7BJJ |  142.250.74.168 | 200 OK | 156 kB |
URL GET HTTP/3www.googletagmanager.com/gtm.js?id=GTM-7BJJ IP142.250.74.168:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeJavaScript source, ASCII text, with very long lines (55667) Size156 kB (156105 bytes) Hash604385cea43b461868b4ed30c3371403 f90355f2ef21a1888347ec91aa6bb95b3be77654 881bd26c3a8d34584b975a39100e38449cec6f51089d5d8c6a70514d9282cae7
GET /gtm.js?id=GTM-7BJJ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:00 GMT
expires: Fri, 26 Apr 2024 23:40:00 GMT
cache-control: private, max-age=900
last-modified: Fri, 26 Apr 2024 22:05:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 156105
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/account-f4e3384ead.css | 162.210.98.102 | 200 OK | 19 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/account-f4e3384ead.css IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/account-f4e3384ead.css HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:00 GMT
server: LiteSpeed
|
|
| pixel-static.spotify.com/sync.min.js | 35.186.224.25 | 503 Service Unavailable | 19 B |
URL GET HTTP/2pixel-static.spotify.com/sync.min.js IP35.186.224.25:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuerDigiCert Inc Subject*.spotify.com Fingerprint69:2B:36:29:F0:B5:FC:1B:A3:57:A6:76:E6:92:EF:30:14:22:34:6A ValidityMon, 05 Feb 2024 00:00:00 GMT - Tue, 04 Feb 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash376389c82d3c6e15c3c40b25e1701efc 7a41c6870551d01bbc9931c1f77856556cdf9ca4 7ac9c58532de36879ea6d7d357f8878e16a18bff367f898fb7db398a9ae643c5
GET /sync.min.js HTTP/1.1
Host: pixel-static.spotify.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 503 Service Unavailable
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 19
content-type: text/plain
date: Fri, 26 Apr 2024 23:40:01 GMT
server: envoy
via: HTTP/2 edgeproxy, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.scdn.co/i/_global/touch-icon-144.png |  151.101.238.248 | 200 OK | 4.8 kB |
URL GET HTTP/1.1www.scdn.co/i/_global/touch-icon-144.png IP151.101.238.248:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuerGlobalSign nv-sa Subject*.scdn.co Fingerprint96:08:82:C2:CB:0C:82:BD:0A:EA:18:76:73:89:54:F3:EC:97:D3:1C ValidityTue, 09 Apr 2024 09:05:08 GMT - Sun, 11 May 2025 09:05:07 GMT
File typePNG image data, 144 x 144, 8-bit/color RGB, non-interlaced Hashff2831d235fec7c02db449621525990e ac0c4c81a0267d8d841ae9525ea230c51a891baa 0d25218c1914875469ecbd168fdddbba2feb01bf5dead8c5836b6c375ea85d45
GET /i/_global/touch-icon-144.png HTTP/1.1
Host: www.scdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 4776
Last-Modified: Fri, 09 Dec 2022 09:15:45 GMT
ETag: "ff2831d235fec7c02db449621525990e"
x-goog-generation: 1670577344886845
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4776
x-amz-meta-goog-reserved-file-mtime: 1670576184
Content-Type: image/png
x-amz-checksum-crc32c: wcQOyQ==
Accept-Ranges: bytes
Date: Fri, 26 Apr 2024 23:40:02 GMT
Age: 1962295
Timing-Allow-Origin: *
X-Served-By: cache-chi-klot8100020-CHI, cache-osl6549-OSL
X-Cache: HIT, HIT
X-Cache-Hits: 1774, 623
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/cs.js.download | 162.210.98.102 | | 20 kB |
URL spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/cs.js.download IP162.210.98.102:0
CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/cs.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:39:59 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
|
|
| d2oh4tlt9mrke9.cloudfront.net/Record/js/sessioncam.recorder.js | 143.204.42.208 | 200 OK | 169 B |
URL GET HTTP/1.1d2oh4tlt9mrke9.cloudfront.net/Record/js/sessioncam.recorder.js IP143.204.42.208:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
Hash5717f0c65b6c1db2c16049daf3a8570f 6cff4b9e363d597dc223e2615605175b15181e7c 99c7ea75e577945ad7a955f64ee53db86cad30a488c34306d6ec0788fe4fe03d
GET /Record/js/sessioncam.recorder.js HTTP/1.1
Host: d2oh4tlt9mrke9.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 169
Connection: keep-alive
Date: Fri, 26 Apr 2024 17:36:36 GMT
Last-Modified: Tue, 09 May 2023 06:44:09 GMT
ETag: "d72d9f955f73ac4670c04333f9c658be"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=43200
Content-Encoding: gzip
x-amz-version-id: 4LJ4mpDpZkeeFIyRkOV.KwIO3JkaD2_i
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UhRWYeXnxUksBgVSvE7IMqMX_9obyOEJGGUmSDWgV4P5wXqUMEeI8A==
Age: 21807
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/cs.js.download | 162.210.98.102 | 200 OK | 16 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/cs.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/cs.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 15845
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:04 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/jquery-2-0680c441b5.1.3.min.js.download | 162.210.98.102 | 200 OK | 16 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/jquery-2-0680c441b5.1.3.min.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/jquery-2-0680c441b5.1.3.min.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 15845
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:05 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/linkid.js.download | 162.210.98.102 | 200 OK | 21 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/linkid.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/linkid.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:39:59 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/gtm.js.download | 162.210.98.102 | 200 OK | 16 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/gtm.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/gtm.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 15845
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:05 GMT
server: LiteSpeed
|
|
| www.googletagmanager.com/gtm.js?id=GTM-7BJJ | 142.250.74.168 | 200 OK | 156 kB |
URL GET HTTP/3www.googletagmanager.com/gtm.js?id=GTM-7BJJ IP142.250.74.168:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeJavaScript source, ASCII text, with very long lines (55667) Size156 kB (156101 bytes) Hash2ed202074043328ac8a7ae5a5c80b86a 7c84be36e321349094ba062f345ee5a774d320ac a6ea5fe43ce58678fef860a2dbc83fa50ed663a870de20188ab50910393b7729
GET /gtm.js?id=GTM-7BJJ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:05 GMT
expires: Fri, 26 Apr 2024 23:40:05 GMT
cache-control: private, max-age=900
last-modified: Fri, 26 Apr 2024 22:05:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 156101
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.scdn.co/build/js/sp-analytics-a3e2493d01.js | 151.101.238.248 | 200 OK | 2.9 kB |
URL GET HTTP/1.1www.scdn.co/build/js/sp-analytics-a3e2493d01.js IP151.101.238.248:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html CertificateIssuerGlobalSign nv-sa Subject*.scdn.co Fingerprint96:08:82:C2:CB:0C:82:BD:0A:EA:18:76:73:89:54:F3:EC:97:D3:1C ValidityTue, 09 Apr 2024 09:05:08 GMT - Sun, 11 May 2025 09:05:07 GMT
File typeJavaScript source, ASCII text, with very long lines (7916) Hash3b8ea9b9fed8d12d22fd1c7b7c4367b8 f9129a0d8d9d4f4d32bc28a9591407280413de56 6cdbd83431a2ec14c784a34ce8bf57af46863a2e5c6b39fff81f4967a47f88b4
GET /build/js/sp-analytics-a3e2493d01.js HTTP/1.1
Host: www.scdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 2934
Last-Modified: Thu, 09 Aug 2018 08:55:55 GMT
ETag: "3b8ea9b9fed8d12d22fd1c7b7c4367b8"
x-goog-generation: 1533804955085745
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7969
x-amz-meta-goog-reserved-file-mtime: 1533804724
Content-Type: application/javascript
x-amz-checksum-crc32c: n4QGTQ==
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Fri, 26 Apr 2024 23:40:06 GMT
Age: 1630443
Timing-Allow-Origin: *
X-Served-By: cache-chi-klot8100105-CHI, cache-osl6549-OSL
X-Cache: HIT, HIT
X-Cache-Hits: 111, 1
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/spotify-b24b86f287.css | 162.210.98.102 | 200 OK | 16 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/spotify-b24b86f287.css IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/spotify-b24b86f287.css HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:06 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/modernizr-bc8113e41c.js.download | 162.210.98.102 | 200 OK | 32 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/modernizr-bc8113e41c.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/modernizr-bc8113e41c.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:00 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/analytics.js.download | 162.210.98.102 | 200 OK | 20 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/analytics.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/analytics.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:07 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/sp-analytics-a3e2493d01.js.download | 162.210.98.102 | 200 OK | 32 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/sp-analytics-a3e2493d01.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/sp-analytics-a3e2493d01.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:39:58 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/analytics.js.download | 162.210.98.102 | 200 OK | 16 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/analytics.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/analytics.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 15845
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:08 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/spotify-b24b86f287.css | 162.210.98.102 | 200 OK | 48 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/spotify-b24b86f287.css IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/spotify-b24b86f287.css HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:00 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/jquery-2-0680c441b5.1.3.min.js.download | 162.210.98.102 | | 16 kB |
URL spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/jquery-2-0680c441b5.1.3.min.js.download IP162.210.98.102:0
CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/jquery-2-0680c441b5.1.3.min.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 15845
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:09 GMT
server: LiteSpeed
|
|
| www.googletagmanager.com/gtm.js?id=GTM-7BJJ | 142.250.74.168 | 200 OK | 156 kB |
URL GET HTTP/3www.googletagmanager.com/gtm.js?id=GTM-7BJJ IP142.250.74.168:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeJavaScript source, ASCII text, with very long lines (55667) Size156 kB (156102 bytes) Hashf4a8287e0161b390f47711c7871c5f9e ce03e6b02a1a4f67568944f450aa1c1a214ac64b c8fcc5e01bee862bb14822f87733937f9bfbeb1ad027b682ccf83ccfe446037c
GET /gtm.js?id=GTM-7BJJ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:10 GMT
expires: Fri, 26 Apr 2024 23:40:10 GMT
cache-control: private, max-age=900
last-modified: Fri, 26 Apr 2024 22:05:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 156102
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/config.aspx | 162.210.98.102 | | 48 kB |
URL spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/config.aspx IP162.210.98.102:0
CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/config.aspx HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:01 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/spotify-b24b86f287.css | 162.210.98.102 | 200 OK | 16 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/spotify-b24b86f287.css IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/spotify-b24b86f287.css HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 15845
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:10 GMT
server: LiteSpeed
|
|
| www.scdn.co/build/js/sp-analytics-a3e2493d01.js | 151.101.238.248 | 200 OK | 2.9 kB |
URL GET HTTP/1.1www.scdn.co/build/js/sp-analytics-a3e2493d01.js IP151.101.238.248:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html CertificateIssuerGlobalSign nv-sa Subject*.scdn.co Fingerprint96:08:82:C2:CB:0C:82:BD:0A:EA:18:76:73:89:54:F3:EC:97:D3:1C ValidityTue, 09 Apr 2024 09:05:08 GMT - Sun, 11 May 2025 09:05:07 GMT
File typeJavaScript source, ASCII text, with very long lines (7916) Hash3b8ea9b9fed8d12d22fd1c7b7c4367b8 f9129a0d8d9d4f4d32bc28a9591407280413de56 6cdbd83431a2ec14c784a34ce8bf57af46863a2e5c6b39fff81f4967a47f88b4
GET /build/js/sp-analytics-a3e2493d01.js HTTP/1.1
Host: www.scdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 2934
Last-Modified: Thu, 09 Aug 2018 08:55:55 GMT
ETag: "3b8ea9b9fed8d12d22fd1c7b7c4367b8"
x-goog-generation: 1533804955085745
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7969
x-amz-meta-goog-reserved-file-mtime: 1533804724
Content-Type: application/javascript
x-amz-checksum-crc32c: n4QGTQ==
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Fri, 26 Apr 2024 23:40:11 GMT
Age: 1630448
Timing-Allow-Origin: *
X-Served-By: cache-chi-klot8100105-CHI, cache-osl6549-OSL
X-Cache: HIT, HIT
X-Cache-Hits: 111, 2
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
|
|
| pixel-static.spotify.com/sync.min.js | 35.186.224.25 | 503 Service Unavailable | 19 B |
URL GET HTTP/2pixel-static.spotify.com/sync.min.js IP35.186.224.25:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuerDigiCert Inc Subject*.spotify.com Fingerprint69:2B:36:29:F0:B5:FC:1B:A3:57:A6:76:E6:92:EF:30:14:22:34:6A ValidityMon, 05 Feb 2024 00:00:00 GMT - Tue, 04 Feb 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash376389c82d3c6e15c3c40b25e1701efc 7a41c6870551d01bbc9931c1f77856556cdf9ca4 7ac9c58532de36879ea6d7d357f8878e16a18bff367f898fb7db398a9ae643c5
GET /sync.min.js HTTP/1.1
Host: pixel-static.spotify.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 503 Service Unavailable
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 19
content-type: text/plain
date: Fri, 26 Apr 2024 23:40:10 GMT
server: envoy
via: HTTP/2 edgeproxy, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/account-f4e3384ead.css | 162.210.98.102 | 200 OK | 16 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/account-f4e3384ead.css IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/account-f4e3384ead.css HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:10 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/analytics.js.download | 162.210.98.102 | 200 OK | 48 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/analytics.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/analytics.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:11 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/analytics.js.download | 162.210.98.102 | 200 OK | 32 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/analytics.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/analytics.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:04 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/sessioncam.recorder.js.download | 162.210.98.102 | | 63 kB |
URL spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/sessioncam.recorder.js.download IP162.210.98.102:0
CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/sessioncam.recorder.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:01 GMT
server: LiteSpeed
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 5.8 kB |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typegzip compressed data, max speed, from Unix Hashaa33725c2d0a3d1c2f9c878d64914807 6e83d13ec860384a977738b04ff0891a01ab519a fe412eadb3dc9820ec6cab7cb62349be057c509e34f7e2de6d23b28eacc98bfd
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 23:40:16 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=Ul131jrzOePrBGyp1H50yHHOc6uf-xF6EG7wS26wIFY-G3alqmmjlBysRF12TY0aZByY080dTwdnevRGrUjkbe26knVajQlW890M1kzAEO-hINMqBEYJUfGDd5fPjgNB
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.scdn.co/build/js/sp-analytics-a3e2493d01.js | 151.101.238.248 | 200 OK | 2.9 kB |
URL GET HTTP/1.1www.scdn.co/build/js/sp-analytics-a3e2493d01.js IP151.101.238.248:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html CertificateIssuerGlobalSign nv-sa Subject*.scdn.co Fingerprint96:08:82:C2:CB:0C:82:BD:0A:EA:18:76:73:89:54:F3:EC:97:D3:1C ValidityTue, 09 Apr 2024 09:05:08 GMT - Sun, 11 May 2025 09:05:07 GMT
File typeJavaScript source, ASCII text, with very long lines (7916) Hash3b8ea9b9fed8d12d22fd1c7b7c4367b8 f9129a0d8d9d4f4d32bc28a9591407280413de56 6cdbd83431a2ec14c784a34ce8bf57af46863a2e5c6b39fff81f4967a47f88b4
GET /build/js/sp-analytics-a3e2493d01.js HTTP/1.1
Host: www.scdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 2934
Last-Modified: Thu, 09 Aug 2018 08:55:55 GMT
ETag: "3b8ea9b9fed8d12d22fd1c7b7c4367b8"
x-goog-generation: 1533804955085745
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7969
x-amz-meta-goog-reserved-file-mtime: 1533804724
Content-Type: application/javascript
x-amz-checksum-crc32c: n4QGTQ==
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Fri, 26 Apr 2024 23:40:16 GMT
Age: 1630454
Timing-Allow-Origin: *
X-Served-By: cache-chi-klot8100105-CHI, cache-osl6549-OSL
X-Cache: HIT, HIT
X-Cache-Hits: 111, 3
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/analytics.js.download | 162.210.98.102 | 200 OK | 172 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/analytics.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Size172 kB (171947 bytes) Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/analytics.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:14 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/gtm.js.download | 162.210.98.102 | 200 OK | 16 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/gtm.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/gtm.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 15845
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:17 GMT
server: LiteSpeed
|
|
| pixel-static.spotify.com/sync.min.js | 35.186.224.25 | 503 Service Unavailable | 19 B |
URL GET HTTP/2pixel-static.spotify.com/sync.min.js IP35.186.224.25:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuerDigiCert Inc Subject*.spotify.com Fingerprint69:2B:36:29:F0:B5:FC:1B:A3:57:A6:76:E6:92:EF:30:14:22:34:6A ValidityMon, 05 Feb 2024 00:00:00 GMT - Tue, 04 Feb 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash376389c82d3c6e15c3c40b25e1701efc 7a41c6870551d01bbc9931c1f77856556cdf9ca4 7ac9c58532de36879ea6d7d357f8878e16a18bff367f898fb7db398a9ae643c5
GET /sync.min.js HTTP/1.1
Host: pixel-static.spotify.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 503 Service Unavailable
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 19
content-type: text/plain
date: Fri, 26 Apr 2024 23:40:17 GMT
server: envoy
via: HTTP/2 edgeproxy, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| d2oh4tlt9mrke9.cloudfront.net/Record/js/sessioncam.recorder.js | 143.204.42.208 | 200 OK | 169 B |
URL GET HTTP/1.1d2oh4tlt9mrke9.cloudfront.net/Record/js/sessioncam.recorder.js IP143.204.42.208:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
Hash5717f0c65b6c1db2c16049daf3a8570f 6cff4b9e363d597dc223e2615605175b15181e7c 99c7ea75e577945ad7a955f64ee53db86cad30a488c34306d6ec0788fe4fe03d
GET /Record/js/sessioncam.recorder.js HTTP/1.1
Host: d2oh4tlt9mrke9.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 169
Connection: keep-alive
Date: Fri, 26 Apr 2024 17:36:36 GMT
Last-Modified: Tue, 09 May 2023 06:44:09 GMT
ETag: "d72d9f955f73ac4670c04333f9c658be"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=43200
Content-Encoding: gzip
x-amz-version-id: 4LJ4mpDpZkeeFIyRkOV.KwIO3JkaD2_i
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: d23gguBsT0vw_DX8pdI0aMKXhqzD-5ahnpaL87vtgOdAPz0PKPdrzQ==
Age: 21822
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/cs.js.download | 162.210.98.102 | | 16 kB |
URL spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/cs.js.download IP162.210.98.102:0
CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/cs.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 15845
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:19 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/linkid.js.download | 162.210.98.102 | 200 OK | 16 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/linkid.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/linkid.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 15845
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:19 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/account-f4e3384ead.css | 162.210.98.102 | | 63 kB |
URL spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/account-f4e3384ead.css IP162.210.98.102:0
CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/account-f4e3384ead.css HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:05 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/analytics.js.download | 162.210.98.102 | | 50 kB |
URL spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/analytics.js.download IP162.210.98.102:0
CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/analytics.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:39:59 GMT
server: LiteSpeed
|
|
| www.googletagmanager.com/gtm.js?id=GTM-7BJJ | 142.250.74.168 | 200 OK | 156 kB |
URL GET HTTP/3www.googletagmanager.com/gtm.js?id=GTM-7BJJ IP142.250.74.168:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeJavaScript source, ASCII text, with very long lines (55667) Size156 kB (156100 bytes) Hashe53c5d2b0dd5cdf884e52401a4e18009 80852d50016f67016ee18408a0be10ce7af32ea2 5841ced57facd072a318af88f78c455708f386543184b5b119caa77800fd1ad2
GET /gtm.js?id=GTM-7BJJ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:20 GMT
expires: Fri, 26 Apr 2024 23:40:20 GMT
cache-control: private, max-age=900
last-modified: Fri, 26 Apr 2024 22:05:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 156100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/account-f4e3384ead.css | 162.210.98.102 | 200 OK | 48 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/account-f4e3384ead.css IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/account-f4e3384ead.css HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:00 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/js | 162.210.98.102 | | 16 kB |
URL spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/js IP162.210.98.102:0
CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/js HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:19 GMT
server: LiteSpeed
|
|
| d2oh4tlt9mrke9.cloudfront.net/Record/js/sessioncam.recorder.js | 143.204.42.208 | 200 OK | 169 B |
URL GET HTTP/1.1d2oh4tlt9mrke9.cloudfront.net/Record/js/sessioncam.recorder.js IP143.204.42.208:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
Hash5717f0c65b6c1db2c16049daf3a8570f 6cff4b9e363d597dc223e2615605175b15181e7c 99c7ea75e577945ad7a955f64ee53db86cad30a488c34306d6ec0788fe4fe03d
GET /Record/js/sessioncam.recorder.js HTTP/1.1
Host: d2oh4tlt9mrke9.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 169
Connection: keep-alive
Date: Fri, 26 Apr 2024 17:36:36 GMT
Last-Modified: Tue, 09 May 2023 06:44:09 GMT
ETag: "d72d9f955f73ac4670c04333f9c658be"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=43200
Content-Encoding: gzip
x-amz-version-id: 4LJ4mpDpZkeeFIyRkOV.KwIO3JkaD2_i
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kFigqdfxsiaevNOKSDyxnsWmLjTWBSR2I_UW1AZzQB2r3jho_BLN2Q==
Age: 21827
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/modernizr-bc8113e41c.js.download | 162.210.98.102 | 200 OK | 32 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/modernizr-bc8113e41c.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/modernizr-bc8113e41c.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:05 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/linkid.js.download | 162.210.98.102 | 200 OK | 63 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/linkid.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/linkid.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:08 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/account-f4e3384ead.css | 162.210.98.102 | 200 OK | 48 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/account-f4e3384ead.css IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/account-f4e3384ead.css HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:16 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html | 162.210.98.102 | 200 OK | 79 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:18 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/bon-32c3a6a7e1.js.download | 162.210.98.102 | | 172 kB |
URL GET spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/bon-32c3a6a7e1.js.download IP162.210.98.102:0
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Size172 kB (171948 bytes) Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/bon-32c3a6a7e1.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:22 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/spotify-b24b86f287.css | 162.210.98.102 | | 16 kB |
URL spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/spotify-b24b86f287.css IP162.210.98.102:0
CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/spotify-b24b86f287.css HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 15845
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:26 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/config.aspx | 162.210.98.102 | 200 OK | 48 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/config.aspx IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/config.aspx HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:17 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html | 162.210.98.102 | 200 OK | 16 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
set-cookie: PHPSESSID=3f5a5c8826f22d1cd531f144b4e2442c; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:26 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/config.aspx | 162.210.98.102 | 200 OK | 32 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/config.aspx IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/config.aspx HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:10 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/bon-32c3a6a7e1.js.download | 162.210.98.102 | | 48 kB |
URL spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/bon-32c3a6a7e1.js.download IP162.210.98.102:0
CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/bon-32c3a6a7e1.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:14 GMT
server: LiteSpeed
|
|
| d2oh4tlt9mrke9.cloudfront.net/Record/js/sessioncam.recorder.js | 143.204.42.208 | 200 OK | 169 B |
URL GET HTTP/1.1d2oh4tlt9mrke9.cloudfront.net/Record/js/sessioncam.recorder.js IP143.204.42.208:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
Hash5717f0c65b6c1db2c16049daf3a8570f 6cff4b9e363d597dc223e2615605175b15181e7c 99c7ea75e577945ad7a955f64ee53db86cad30a488c34306d6ec0788fe4fe03d
GET /Record/js/sessioncam.recorder.js HTTP/1.1
Host: d2oh4tlt9mrke9.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 169
Connection: keep-alive
Date: Fri, 26 Apr 2024 17:36:36 GMT
Last-Modified: Tue, 09 May 2023 06:44:09 GMT
ETag: "d72d9f955f73ac4670c04333f9c658be"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=43200
Content-Encoding: gzip
x-amz-version-id: 4LJ4mpDpZkeeFIyRkOV.KwIO3JkaD2_i
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fmZXhH9nRwFhElD6KpBzv_vfQZpb9R53cXHE8Ks9__VSiGm50yMuiA==
Age: 21833
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/js | 162.210.98.102 | 200 OK | 32 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/js IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/js HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:39:59 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/account-f4e3384ead.css | 162.210.98.102 | 200 OK | 63 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/account-f4e3384ead.css IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/account-f4e3384ead.css HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:09 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/sp-analytics-a3e2493d01.js.download | 162.210.98.102 | 200 OK | 79 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/sp-analytics-a3e2493d01.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/sp-analytics-a3e2493d01.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:08 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/js | 162.210.98.102 | | 172 kB |
URL spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/js IP162.210.98.102:0
CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Size172 kB (171955 bytes) Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/js HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:30 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/activityi.html | 162.210.98.102 | | 32 kB |
URL spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/activityi.html IP162.210.98.102:0
CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/activityi.html HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:29 GMT
server: LiteSpeed
|
|
| www.scdn.co/build/js/sp-analytics-a3e2493d01.js | 151.101.238.248 | 200 OK | 2.9 kB |
URL GET HTTP/1.1www.scdn.co/build/js/sp-analytics-a3e2493d01.js IP151.101.238.248:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html CertificateIssuerGlobalSign nv-sa Subject*.scdn.co Fingerprint96:08:82:C2:CB:0C:82:BD:0A:EA:18:76:73:89:54:F3:EC:97:D3:1C ValidityTue, 09 Apr 2024 09:05:08 GMT - Sun, 11 May 2025 09:05:07 GMT
File typeJavaScript source, ASCII text, with very long lines (7916) Hash3b8ea9b9fed8d12d22fd1c7b7c4367b8 f9129a0d8d9d4f4d32bc28a9591407280413de56 6cdbd83431a2ec14c784a34ce8bf57af46863a2e5c6b39fff81f4967a47f88b4
GET /build/js/sp-analytics-a3e2493d01.js HTTP/1.1
Host: www.scdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 2934
Last-Modified: Thu, 09 Aug 2018 08:55:55 GMT
ETag: "3b8ea9b9fed8d12d22fd1c7b7c4367b8"
x-goog-generation: 1533804955085745
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7969
x-amz-meta-goog-reserved-file-mtime: 1533804724
Content-Type: application/javascript
x-amz-checksum-crc32c: n4QGTQ==
Content-Encoding: gzip
Accept-Ranges: bytes
Date: Fri, 26 Apr 2024 23:40:32 GMT
Age: 1630469
Timing-Allow-Origin: *
X-Served-By: cache-chi-klot8100105-CHI, cache-osl6549-OSL
X-Cache: HIT, HIT
X-Cache-Hits: 111, 6
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
|
|
| pixel-static.spotify.com/sync.min.js | 35.186.224.25 | 503 Service Unavailable | 19 B |
URL GET HTTP/2pixel-static.spotify.com/sync.min.js IP35.186.224.25:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuerDigiCert Inc Subject*.spotify.com Fingerprint69:2B:36:29:F0:B5:FC:1B:A3:57:A6:76:E6:92:EF:30:14:22:34:6A ValidityMon, 05 Feb 2024 00:00:00 GMT - Tue, 04 Feb 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash376389c82d3c6e15c3c40b25e1701efc 7a41c6870551d01bbc9931c1f77856556cdf9ca4 7ac9c58532de36879ea6d7d357f8878e16a18bff367f898fb7db398a9ae643c5
GET /sync.min.js HTTP/1.1
Host: pixel-static.spotify.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 503 Service Unavailable
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 19
content-type: text/plain
date: Fri, 26 Apr 2024 23:40:32 GMT
server: envoy
via: HTTP/2 edgeproxy, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| d2oh4tlt9mrke9.cloudfront.net/Record/js/sessioncam.recorder.js | 143.204.42.208 | 200 OK | 169 B |
URL GET HTTP/1.1d2oh4tlt9mrke9.cloudfront.net/Record/js/sessioncam.recorder.js IP143.204.42.208:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
Hash5717f0c65b6c1db2c16049daf3a8570f 6cff4b9e363d597dc223e2615605175b15181e7c 99c7ea75e577945ad7a955f64ee53db86cad30a488c34306d6ec0788fe4fe03d
GET /Record/js/sessioncam.recorder.js HTTP/1.1
Host: d2oh4tlt9mrke9.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 169
Connection: keep-alive
Date: Fri, 26 Apr 2024 17:36:36 GMT
Last-Modified: Tue, 09 May 2023 06:44:09 GMT
ETag: "d72d9f955f73ac4670c04333f9c658be"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=43200
Content-Encoding: gzip
x-amz-version-id: 4LJ4mpDpZkeeFIyRkOV.KwIO3JkaD2_i
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: o1bGM1ipq9oRhfbwMogYig3ThaYH0XoAHo5eD1BNlVqzEWlWbtAjSA==
Age: 21838
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/cs.js.download | 162.210.98.102 | | 16 kB |
URL spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/cs.js.download IP162.210.98.102:0
CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/cs.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 15845
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:35 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/activityi.html | 162.210.98.102 | | 32 kB |
URL spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/activityi.html IP162.210.98.102:0
CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/activityi.html HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:34 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/account-f4e3384ead.css | 162.210.98.102 | | 48 kB |
URL spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/account-f4e3384ead.css IP162.210.98.102:0
CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5891), with CRLF line terminators Hashe2d20b0f632ed9a5e6309b90706ffa13 b02c823e6209ff24b1699e29d3b862da50a9a7d1 18f15fcac75e1eaa312a5e76d22e4a72321ed60e5f228beb96a1a2a6df373cfa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/billing_files/account-f4e3384ead.css HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:26 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/modernizr-bc8113e41c.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/modernizr-bc8113e41c.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/modernizr-bc8113e41c.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:09 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/tracking-2e5455755b.download.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/tracking-2e5455755b.download.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/tracking-2e5455755b.download.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:17 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/bon-32c3a6a7e1.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/bon-32c3a6a7e1.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/bon-32c3a6a7e1.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:11 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/spotify-b24b86f287.css | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/spotify-b24b86f287.css IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/spotify-b24b86f287.css HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:16 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/spweb-site-efa1133a2d.min.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/spweb-site-efa1133a2d.min.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/spweb-site-efa1133a2d.min.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 15845
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:14 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/jquery-2-0680c441b5.1.3.min.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/jquery-2-0680c441b5.1.3.min.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/jquery-2-0680c441b5.1.3.min.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:00 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/account-bb92d6d161.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/account-bb92d6d161.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/account-bb92d6d161.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:11 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/account-bb92d6d161.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/account-bb92d6d161.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/account-bb92d6d161.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:14 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/gtm.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/gtm.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/gtm.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:09 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:12 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/tracking-2e5455755b.download.js.download |  0.0.0.0 | | 0 B |
URL GET spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/tracking-2e5455755b.download.js.download IP0.0.0.0:0
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/tracking-2e5455755b.download.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/js | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/js IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/js HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:08 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/cs.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/cs.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/cs.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 15845
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:08 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/account-bb92d6d161.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/account-bb92d6d161.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/account-bb92d6d161.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 15845
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:07 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/analytics.js.download | 0.0.0.0 | | 0 B |
URL GET spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/analytics.js.download IP0.0.0.0:0
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/analytics.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/vt-150.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/vt-150.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/vt-150.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:07 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ | 162.210.98.102 | 200 OK | 58 kB |
URL User Request GET HTTP/2spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ IP162.210.98.102:443
CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/ HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:39:57 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/config.aspx | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/config.aspx IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/config.aspx HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:06 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/linkid.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/linkid.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/linkid.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:13 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/js | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/js IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/js HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:13 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/spweb-site-efa1133a2d.min.js.download | 0.0.0.0 | | 0 B |
URL GET spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/spweb-site-efa1133a2d.min.js.download IP0.0.0.0:0
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/spweb-site-efa1133a2d.min.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/account-bb92d6d161.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/account-bb92d6d161.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/account-bb92d6d161.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:02 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:03 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/bon-32c3a6a7e1.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/bon-32c3a6a7e1.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/bon-32c3a6a7e1.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:02 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/spotify-b24b86f287.css | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/spotify-b24b86f287.css IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/spotify-b24b86f287.css HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:20 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/vt-150.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/vt-150.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/vt-150.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:11 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/tracking-2e5455755b.download.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/tracking-2e5455755b.download.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/tracking-2e5455755b.download.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:10 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/sp-analytics-a3e2493d01.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/sp-analytics-a3e2493d01.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/sp-analytics-a3e2493d01.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:19 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/modernizr-bc8113e41c.js.download | 0.0.0.0 | | 58 kB |
URL GET spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/modernizr-bc8113e41c.js.download IP0.0.0.0:0
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/modernizr-bc8113e41c.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:20 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/tracking-2e5455755b.download.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/tracking-2e5455755b.download.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/tracking-2e5455755b.download.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:06 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/sessioncam.recorder.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/sessioncam.recorder.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/sessioncam.recorder.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 15845
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:11 GMT
server: LiteSpeed
|
|
| www.scdn.co/i/_global/favicon.png | 151.101.238.248 | 200 OK | 3.6 kB |
URL GET HTTP/1.1www.scdn.co/i/_global/favicon.png IP151.101.238.248:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuerGlobalSign nv-sa Subject*.scdn.co Fingerprint96:08:82:C2:CB:0C:82:BD:0A:EA:18:76:73:89:54:F3:EC:97:D3:1C ValidityTue, 09 Apr 2024 09:05:08 GMT - Sun, 11 May 2025 09:05:07 GMT
File typePNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced Hash326dfa6c84225dfca443693e985fdaab 5a8971cb61bcdae6431abbba6d5a79cefc7d2d45 0c7ee91862c795f69147f2174a919b1303dd28ce8ceccabe3f50ae219bfb01b7
GET /i/_global/favicon.png HTTP/1.1
Host: www.scdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 3646
Last-Modified: Fri, 09 Dec 2022 09:15:44 GMT
ETag: "326dfa6c84225dfca443693e985fdaab"
x-goog-generation: 1670577344003625
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3646
x-amz-meta-goog-reserved-file-mtime: 1670576184
Content-Type: image/png
x-amz-checksum-crc32c: iuRMew==
Accept-Ranges: bytes
Date: Fri, 26 Apr 2024 23:40:02 GMT
Age: 2700006
Timing-Allow-Origin: *
X-Served-By: cache-chi-klot8100076-CHI, cache-osl6549-OSL
X-Cache: HIT, HIT
X-Cache-Hits: 20025, 3740
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/cs.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/cs.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/cs.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 15845
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:13 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/vt-150.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/vt-150.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/vt-150.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:02 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/gtm.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/gtm.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/gtm.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 15845
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:20 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/account-f4e3384ead.css | 0.0.0.0 | | 58 kB |
URL GET spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/account-f4e3384ead.css IP0.0.0.0:0
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/billing_files/account-f4e3384ead.css HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:20 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/sp-analytics-a3e2493d01.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/sp-analytics-a3e2493d01.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/sp-analytics-a3e2493d01.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:04 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/gtm.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/gtm.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/ CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/gtm.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:00 GMT
server: LiteSpeed
|
|
| spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/vt-150.js.download | 162.210.98.102 | 200 OK | 58 kB |
URL GET HTTP/3spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/vt-150.js.download IP162.210.98.102:443
Requested byhttps://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html CertificateIssuercPanel, Inc. Subjectspotify.nethottrading.com Fingerprint5E:B9:6C:31:37:46:A5:C1:38:8C:62:41:E7:1F:9C:7F:E5:0F:3E:09 ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Spotify |
GET /1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/billing_files/vt-150.js.download HTTP/1.1
Host: spotify.nethottrading.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spotify.nethottrading.com/1a01b27006c67fa43567355b4b3568b3/billing.php/billing_files/billing_files/billing_files/activityi.html
Cookie: PHPSESSID=723aed38ef3a2d9343b6766d4bf420f4; spAnalytics_id=eyJkZXZpY2VJZCI6IjU1YjNkYzU0ZWVjODQzNjEyYmUyMzllYTlhYjFiMzM1IiwidXNlcklkIjpudWxsfQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:40:14 GMT
server: LiteSpeed
|
|
0.0.0.0