a2zapk.co - phishunt.io

Spotify

http://a2zapk.co/1368404-spotify-music-and-podcasts-9-0-30-242-ab-experimental-cloned-armeabi-v7a-arm64-v8a-a2z.html Access site

Screenshot

Investigate

Domain a2zapk.co1 CT host on apex

urlscan

page.domain

VirusTotal

Whois

See every phishunt record for this domain

IP 104.21.68.22

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL http://a2zapk.co/1368404-spotify-music-and-podcasts-9-0-30-…

urlscan

Wayback

archive.today

Cert WE1

crt.sh

Censys

Google CT

Phishunt analysis Beta

31 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+4.5 Brand in title
+4.1 Brand in screenshot
+3.0 OpenPhish
+2.3 ASN reputation
+2.2 Country mismatch
+1.1 No CSP header
+1.0 Young domain
+0.6 Brand impersonation in path
+0.6 Final host mismatch
+0.6 Cross-origin form
+0.4 Suspicious TLD
+0.3 Free CA
+0.2 Long domain
+0.1 External scripts

18 signals fired · detector v3.0.0

AI analysis AIBeta

Malware delivery

Distributes what purports to be a cloned modified Spotify APK, with a cross-origin form and redirect chain present and the final host differing from the entry domain. Flagged by OpenPhish as malicious. Likely delivers trojanized Android applications.

OpenPhishFinal host mismatchBrand impersonation in path

AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 82%

Domain & Network

Whois

Network

IP 104.21.68.22

Country