{"report_id":"2ecad185-fa47-4175-9c61-a15715874084","version":0,"status":"done","tags":["suspicious"],"date":"2026-07-21T00:21:34Z","url":{"schema":"http","addr":"spotify-accounts-login.callora.cz/z/pages/login-phone.php","fqdn":"spotify-accounts-login.callora.cz","domain":"callora.cz","tld":"cz"},"ip":{"addr":"91.218.65.223","port":0,"asn":44486,"as":"SYNLINQ","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"spotify-accounts-login.callora.cz/z/pages/login-phone.php","fqdn":"spotify-accounts-login.callora.cz","domain":"callora.cz","tld":"cz"},"title":"Spotify","dom":{"size":24133,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3815)","md5":"2d21b1783136d9717deddbe8b57f8c0f","sha1":"e6ed4bf944af82662a0a81407d9f269617ba25bc","sha256":"ddeeaae4a7ac33d2f96db0c9d268626efcb39a01350b72b6eb53fca4eb3ef00d","sha512":"752de4682bb825a3281d5a2d9fd0ec67061d95161814429956fe6f1e7493e9dcbd03cb6c461049393c0d6dc33ed832ba67b62ca319cc7931244e3192592e361e","ssdeep":"192:AucV5Y9ObuzgVRn6rzW8xAQ42wNrXJT/Gg4Z1/6M2Ao0p2Myztc3RNp0GiKxQQEN:9vlwhcbKKNeWX5VtNPbMdqXQzJD","tlshash":"dfb20aa223f421595013c3adafb6ab4a373d9017f606ca5876bd0b98cfcb984ec53594","dom_hash":"domhash001acad91d378eed9e8657075ee69615","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"spotify-accounts-login.callora.cz/z/pages/login-phone.php","fqdn":"spotify-accounts-login.callora.cz","domain":"callora.cz","tld":"cz"},"ip":{"addr":"91.218.65.223","port":0,"asn":44486,"as":"SYNLINQ","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-25T00:21:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"spotify-accounts-login.callora.cz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"spotify-accounts-login.callora.cz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"code.jquery.com","ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-07-20T00:04:33.448739Z","alert_count":0,"request_count":1,"received_data":90144,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.scdn.co","ip":{"addr":"199.232.214.248","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-08-20","domain_rank":336499,"first_seen":"2017-06-28T16:47:14Z","last_seen":"2026-07-17T07:45:08.713289Z","alert_count":0,"request_count":1,"received_data":4330,"sent_data":561,"comment":"","tags":null,"fingerprints":null},{"fqdn":"spotify-accounts-login.callora.cz","ip":{"addr":"91.218.65.223","port":443,"asn":44486,"as":"SYNLINQ","country":"Germany","country_code":"DE"},"domain_registered":"2026-01-20","domain_rank":0,"first_seen":"2026-07-20T08:22:28.479798Z","last_seen":"2026-07-20T08:22:30.949004Z","alert_count":5,"request_count":2,"received_data":38097,"sent_data":1097,"comment":"","tags":null,"fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"PHP:8.4.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"spotify-accounts-login.callora.cz/z/assets/js/antibot.js","fqdn":"spotify-accounts-login.callora.cz","domain":"callora.cz","tld":"cz"},"ip":{"addr":"91.218.65.223","port":443,"asn":44486,"as":"SYNLINQ","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbd28b7bf8bda9a875243315c9ce806a","sha1":"15164b203232a7bfaad4f4e7a3b0b3e867a99696","sha256":"0c05da42232688ecb6f7e2671a3f34895be98718f818b82cdb307ab02da004cd","sha512":"79ff3987cee43918837531b507cdb1c28a8a7abfbe784e9fa1c340d2c4bc7d9308b7d22dd3adc7b69b31395349bf0fbd810028b1a8961d1b2ede868d4be7d361","ssdeep":"96:3vaTarzzYFi+Fy1IusU9AkzXyFe9wgvvBUyVjoaxqbv+sMhG3/1RirTyUhlyBv6o:/0mgE1IfWX5BUytoaUbv+sMhG3yT9zWf","tlshash":"9d42341d6020352b507733ba639bd101f73622277153d899ba7d97406fb1c3496a3eee","size":13164,"data":"","first_seen":"2025-10-30T00:25:35.224261Z","last_seen":"2026-07-22T17:26:15.779192Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T00:26:37.327273Z","times_seen":493103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spotify-accounts-login.callora.cz/z/pages/login-phone.php","fqdn":"spotify-accounts-login.callora.cz","domain":"callora.cz","tld":"cz"},"ip":{"addr":"91.218.65.223","port":443,"asn":44486,"as":"SYNLINQ","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e14fe6738dbde0a4d2f81ee02bb795c","sha1":"4efa2bf20451767b3009138c8f15fdcaa225c323","sha256":"8121a38cdc81f6362eafeee0ddf0925d6396ddbccba6f33ff4a8d0fd70f97442","sha512":"1dc62038005a52e6dbbec271a8be09560b60d156cea9eca86fb49dcab529542bc48437819e7dff630697f895eb79aac48bdcd3126af1c7a1627516c538c1be7b","ssdeep":"","tlshash":"f551cb6ab2f715021637b07a4bbf8e082b3a448ba549cf507c1c5b8a1f55a5cb8a1689","size":2497,"data":"","first_seen":"2026-07-21T00:21:34.536301Z","last_seen":"2026-07-22T21:05:09.615706Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"spotify-accounts-login.callora.cz/z/pages/login-phone.php","fqdn":"spotify-accounts-login.callora.cz","domain":"callora.cz","tld":"cz"},"ip":{"addr":"91.218.65.223","port":443,"asn":44486,"as":"SYNLINQ","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-21T00:21:06.963Z","timestamp":1784593266963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotify-accounts-login.callora.cz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 14:22:16 GMT","end":"Tue, 22 Sep 2026 14:22:15 GMT"},"fingerprint":{"sha1":"FA:B8:AD:3E:1C:0B:5E:1F:13:51:4D:E6:13:21:2A:62:E2:61:82:AE","sha256":"2E:7E:A1:5A:45:16:76:23:FE:C1:FB:E5:43:7A:3C:00:8B:FD:26:13:93:8C:42:66:94:81:C9:E0:E4:06:A0:B4"}}},"request":{"raw":"GET /z/pages/login-phone.php HTTP/1.1\r\nHost: spotify-accounts-login.callora.cz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 21 Jul 2026 00:21:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 7130\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=dfbdee42a4218da4862bcd477d4886ed; expires=Tue, 21 Jul 2026 10:21:07 GMT; Max-Age=36000; path=/; secure; HttpOnly; SameSite=Lax\n_test=1; expires=Tue, 21 Jul 2026 01:21:07 GMT; Max-Age=3600; path=/\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PHP/8.4.23, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"PHP:8.4.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":24137,"size_decoded":7691,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (3815), with CRLF line terminators","md5":"542ada7ac5eafb44a447d7d842cb8de6","sha1":"808f2558622c656ec452cac4c9fea9b253de48dc","sha256":"d044fad0689390baba162487a0a4602490928b8370cfee4c470d5ebc4ab2c90d","sha512":"7dcdca956c785d954f4f6d8fead422ce16033655e0c7f33e034bd179bd9a438e04823844f4c8c89a52446e802a53101b9553189455f968b973c206f052175a00","ssdeep":"192:AITl3m4h/ZabqSZ5zrt+TJEVj4eW94av5VyKNLVjh0HMfMBaeyaoA+SXQIZhuZ:f3ms7gdteeWX5VtNeMdwXQkuZ","tlshash":"f4b2d7a6238421494533c3b9df72ab4afb399013f703865875fd179a8ffb944e813a94","first_seen":"2026-07-21T00:21:34.526604Z","last_seen":"2026-07-22T21:05:09.613222Z","times_seen":7,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":44,"connect":30,"send":0,"wait":141,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"spotify-accounts-login.callora.cz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"spotify-accounts-login.callora.cz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spotify-accounts-login.callora.cz/z/assets/js/antibot.js","fqdn":"spotify-accounts-login.callora.cz","domain":"callora.cz","tld":"cz"},"ip":{"addr":"91.218.65.223","port":443,"asn":44486,"as":"SYNLINQ","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spotify-accounts-login.callora.cz/z/pages/login-phone.php","date":"2026-07-21T00:21:07.631Z","timestamp":1784593267631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spotify-accounts-login.callora.cz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 14:22:16 GMT","end":"Tue, 22 Sep 2026 14:22:15 GMT"},"fingerprint":{"sha1":"FA:B8:AD:3E:1C:0B:5E:1F:13:51:4D:E6:13:21:2A:62:E2:61:82:AE","sha256":"2E:7E:A1:5A:45:16:76:23:FE:C1:FB:E5:43:7A:3C:00:8B:FD:26:13:93:8C:42:66:94:81:C9:E0:E4:06:A0:B4"}}},"request":{"raw":"GET /z/assets/js/antibot.js HTTP/1.1\r\nHost: spotify-accounts-login.callora.cz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://spotify-accounts-login.callora.cz/z/pages/login-phone.php\r\nCookie: PHPSESSID=dfbdee42a4218da4862bcd477d4886ed; _test=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 21 Jul 2026 00:21:07 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 01 Jul 2026 14:53:36 GMT\r\netag: W/\"6a4529f0-336c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":13164,"size_decoded":3614,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"fbd28b7bf8bda9a875243315c9ce806a","sha1":"15164b203232a7bfaad4f4e7a3b0b3e867a99696","sha256":"0c05da42232688ecb6f7e2671a3f34895be98718f818b82cdb307ab02da004cd","sha512":"79ff3987cee43918837531b507cdb1c28a8a7abfbe784e9fa1c340d2c4bc7d9308b7d22dd3adc7b69b31395349bf0fbd810028b1a8961d1b2ede868d4be7d361","ssdeep":"96:3vaTarzzYFi+Fy1IusU9AkzXyFe9wgvvBUyVjoaxqbv+sMhG3/1RirTyUhlyBv6o:/0mgE1IfWX5BUytoaUbv+sMhG3yT9zWf","tlshash":"9d42341d6020352b507733ba639bd101f73622277153d899ba7d97406fb1c3496a3eee","first_seen":"2025-10-30T00:25:35.224261Z","last_seen":"2026-07-22T17:26:15.779192Z","times_seen":117,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"spotify-accounts-login.callora.cz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"spotify-accounts-login.callora.cz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spotify-accounts-login.callora.cz/z/pages/login-phone.php","date":"2026-07-21T00:21:07.633Z","timestamp":1784593267633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://spotify-accounts-login.callora.cz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 21 Jul 2026 00:21:07 GMT\r\nage: 2122347\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270064-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 369985, 525065\r\nx-timer: S1784593268.659614,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T00:26:37.327273Z","times_seen":493103,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":3,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.scdn.co/i/_global/favicon.png","fqdn":"www.scdn.co","domain":"scdn.co","tld":"co"},"ip":{"addr":"199.232.214.248","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spotify-accounts-login.callora.cz/z/pages/login-phone.php","date":"2026-07-21T00:21:07.759Z","timestamp":1784593267759,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.scdn.co","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Sun, 14 Dec 2025 09:15:15 GMT","end":"Fri, 15 Jan 2027 09:15:14 GMT"},"fingerprint":{"sha1":"97:6A:76:6F:1C:5D:44:2F:0D:EC:09:50:8A:AB:6A:4F:61:DD:73:82","sha256":"EF:EC:40:0D:8A:85:DC:ED:FD:68:94:19:99:FB:81:E0:BA:3B:79:39:FB:67:27:B9:DA:D2:94:3C:35:33:E9:89"}}},"request":{"raw":"GET /i/_global/favicon.png HTTP/1.1\r\nHost: www.scdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://spotify-accounts-login.callora.cz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: keep-alive\r\nContent-Length: 3646\r\nContent-Type: image/png\r\nLast-Modified: Fri, 09 Dec 2022 09:15:44 GMT\r\nETag: \"326dfa6c84225dfca443693e985fdaab\"\r\nx-goog-generation: 1670577344003625\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 3646\r\nx-amz-meta-goog-reserved-file-mtime: 1670576184\r\nx-amz-checksum-crc32c: iuRMew==\r\nAccept-Ranges: bytes\r\nDate: Tue, 21 Jul 2026 00:21:07 GMT\r\nAge: 3452569\r\nX-Served-By: cache-chi-kmdw8640085-CHI, cache-bma-essb1270061-BMA\r\nX-Cache: HIT, HIT\r\nX-Cache-Hits: 6442, 16482\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=31536000\r\nTiming-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3646,"size_decoded":4330,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"326dfa6c84225dfca443693e985fdaab","sha1":"5a8971cb61bcdae6431abbba6d5a79cefc7d2d45","sha256":"0c7ee91862c795f69147f2174a919b1303dd28ce8ceccabe3f50ae219bfb01b7","sha512":"6e3718e274ac0a9f8a221d8ecdd10968eb6beadf11636ce83f05397d57615990e0a3fef3c6f158864ba691809bf8923249774a5932b0a9a8f829a8113ee98c7d","ssdeep":"","tlshash":"9e714cd6f6003e819b0c9a4236f110a3dc671991ecb0d326be99d8354ce14e50944bc7","first_seen":"2023-05-01T16:40:41Z","last_seen":"2026-07-22T21:05:09.615098Z","times_seen":14782,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":2,"connect":9,"send":0,"wait":9,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}