urlquery.net
WEBSITE ANALYSIS REPORT

http://spotify-accounts-login.callora.cz/z/pages/login-phone.php

public
Report tags
Submit tags
Request review
Suspicious activity

4 detections · review the detection signals

Review evidence →

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
http://spotify-accounts-login.callora.cz/z/pages/login-phone.php
Submitted IP / ASN
Germany 91.218.65.223 AS44486 · SYNLINQ
Final URL
https://spotify-accounts-login.callora.cz/z/pages/login-phone.php
Final IP / ASN
Germany 91.218.65.223 AS44486 · SYNLINQ

Final page

Page title
Spotify
Final DOM MIME
text/html; charset=utf-8
Final DOM size
23.6 KB (24133 bytes)

Detections

URLQuery
2
IDS
0
TDS
2

Activity

HTTP requests
4
Observed hosts
3
Script records
3

Estimated HTTP data

Sent
~2.1 KB
Received
~129.5 KB

Page capture

Final browser state

Recorded title

Spotify

23.6 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

1

urlquery Suspicious - Anti-debugging code

VerdictSuspicious
Severitylow

Threat Detection Systems

2

Quad9 DNS Sinkholed

VerdictMalicious
Severitymedium

Hagezi Threat Feed Sinkholed

VerdictMalicious
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
code.jquery.com 49152005-12-102012-05-212026-07-20483 B88.0 KBUnited States 151.101.65.155
www.scdn.co 3364992010-08-202017-06-282026-07-17561 B4.2 KBUnited States 199.232.214.248
spotify-accounts-login.callora.cz 5 alertsN/A2026-01-202026-07-202026-07-201.1 KB37.2 KBGermany 91.218.65.223
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot