Security Scan Report: autoconfig.no-spotify.com

Response type:XML documentapplication/xmlHTTP 200The server returned structured data (XML), typically from an API, a configuration endpoint or a storage listing, not a web page.
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is no-spotify.com and was registered 2 weeks ago.

Submitted URL: https://autoconfig.no-spotify.com

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Very new, unranked domain serving an email autoconfig that points clients at an external mail server; flagged by Google Safe Browsing for social engineering, so treat as phishing infrastructure.

Risk Factors (3)
Google Safe Browsing Social Engineering (phishing) hit on the scanned URL
Domain registered 8 days ago with no reputation history
Autoconfig XML that directs email clients to a third-party mail server (mail.no-spotify.com) with password-cleartext authentication
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'autoconfig.no-spotify.com' is registered; it also runs on subdomain 'autoconfig'. The second-level label 'no-spotify' is 10 characters long split between 3 vowels and 6 consonants, along with one hyphen. Splitting it apart reveals four words: no, spot, if, y. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://autoconfig.no-spotify.com

Page Load Overview

0.79s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:51%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,008 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical29% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
29%
entertainment media
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2198.54.132.28Toronto, Ontario, Canada
AS11878tzulo, inc.
21--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13CD1AAA4CAF302B25077C5D222FE576739F6813BE4665101F7EC93989BCED00BA22546

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:xiFWN15vVEKOFJkN5c+Q17XHTOJ/v4NvwP1Yw8OJRv4NvwP1YNiaq:xiFgOAN6+Q17XHTOJ/v4NvwPuw8OJRvB

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6647:3JQELAUgZiAAg4ACAgooi1YAA4ETAGChRSABAEgIAFWFJJyiCIIFUkKCgEQGAwEGTsrABBIUAqkCCVCIAcwgEAYBhQQAQBKt

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003f3fffffffffff
Perceptual Hash:83070f7c7c7c381d
Difference Hash:f0c0e00000000000
Wavelet Hash:003f3fff00000000
Color Hash:#79ced2

Other Hashes

Crop Resistant:f0c0e00000000000

Scan History

Scan history not available

Unable to load historical scan data