mass.report
Scan Intelligence Report0/100
medium Risk
www.albumoftheyear.org
https://www.albumoftheyear.org/
IP
104.26.4.195 · Cloudflare, Inc.
Location
Toronto, Canada
Domain Age
6409 days
HTTP
200 · 45.1s
SSL
Valid· WE1, Google Trust Services, US
Status
COMPLETED
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
Album of the Year (albumoftheyear.org)
Vendors
29/30
Status
partial
✓ avg✓ avast✓ brightcloud✓ microsoft✓ polyswarm✗ norton✓ sophos✓ eset✓ yandex✓ bitdefender✓ apple✓ spamhaus✓ urlscan✓ apwg✓ netcraft✓ openphish✓ urlquery✓ cisa✓ virustotal✓ phishtank✓ isitphish✓ emsisoft✓ phishreport✓ urlabuse✓ drweb✓ mcafee✓ threatyeti✓ google✓ kaspersky✓ fortiguard
Registered-domain escalation
Submit albumoftheyear.org as the primary IOC, enriched with evidence from hostile subdomains like www.albumoftheyear.org.
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
Album of the Year (albumoftheyear.org)
Unknowntechnology | entertainment · 6/3/2026
Summary
The page presents the Album of the Year site branding and navigation, which appears to be the legitimate Domain for the service. However, the scan evidence shows heavy third-party ad/tracking scripts, multiple external endpoints, and numerous iframes, suggesting extensive content loading from external advertisers and trackers. There is no direct credential harvesting UI or login flow observed in the static HTML, and the page title/logo align with the brand; thus, impersonation is not clearly evidenced. Given the presence of aggressive tracking networks, the page could be hosting or facilitating abusive ad-tech practices, but there is no explicit credential theft or impersonation signal from the data provided.
Evidence Summary
▸Observed 3 capture stage(s); canonical stage is late_render_3s.
▸Off-domain submission or API endpoints observed: https://api.rlcdn.com/api/identity/envelope?pid=13250, https://id5-sync.com/api/config/prebid, https://cdn.id5-sync.com/api/1.0/id5-api.js.
▸Distinctive asset clues: jquery.min.js, albumScript.js, brands.min.css, regular.min.css, default.jpg, title-2015.png.
Capture
Stages: 3
Canonical: Late Render (+3s)
Changed: No
Credential Signals
Forms: 1
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 262
Hosts: 91
Domains: 57
Suspicious Endpoints
hxxps://api[.]rlcdn[.]com/api/identity/envelope?pid=13250
hxxps://id5-sync[.]com/api/config/prebid
hxxps://cdn[.]id5-sync[.]com/api/1.0/id5-api.js
hxxps://fastlane[.]rubiconproject[.]com/a/api/fastlane.json?account_id=27232&site_id=587022&zone_id=3748638&size_id=2&rp_schain=1.0,1!playwire.com,1024410,1,,,&eid_crwdcntrl.net=0d3aa8fe0bc7aab1b12cb9ef92be185ca02cedc7a0f1d46aedc384e59d03ee81%5E1%5E%5E%5E%5E%5E&eid_pubcid.org=4a8b7a8f-a8f1-4405-8800-0157a4b384a5%5E1%5E%5E%5E%5E%5E&eid_neustar.biz=E1%3AqdoSJcLUEDT3lHsD16lhuLUSWGvcFOhkVMN_yiMRmnyXxdLtVh2KPvOZ206ExWUf5UEFuiUNdQXKk3sKE576BinbDkpjSdPmZ25EzA6DJ_LQ_fnYVJZsxyyPmkFqVm62%5E1%5E%5E%5E%5E%5EfabrickId&eid_33across.com=v1.0014000001YrMoYAAV.1053.fORU94bGFi6o6bGCARNh1bVWQSpqjZKXza6YVUy7K%2FW1khzg%2F556ygirqv2Tim3p9fY%2BRH0gjGYGUM%2Fx0iCptpY8LNzXH0msd%2BO4HXyUs1W%2FqrUDVxHKRBCqXqDueOZ5FWh5sEHX5ikab1Dob98I9%2F%2FriYvw1t2DTMnUNhzYXFRBEj%2Bqn8LTU0XCcgBNAbq2XjcpIe9Fy3ddJJRPcjehPrVmziffHr9rr2X02UL0gZgMeMvQbu7TbQp%2BJtR9RMUhyhfxvQC61851Ye5OsqwNGMachDEy%2B8BposxN%2B0ELJBoh3zAtUoZpgGo%2BHiw15ys%2Fl2zEJ8XU0Ds3geyJZk1hNsYuIJW1%2F%2FXi7xbnfhKSfjZbdkgmLFzAdFni1eY0uaC%2BVZvJjTB%2F4Qrf2mAfVZeTbwnXxMMzJvRcAQxM0AoPM%2FPAOUO128m6syn2YWyLBIK62I1ay66n2e5yLFu8sz3E1EXdi4sHQhLCSWH%2BBBljhVi%2BXYCavyLQo0ous6iU4dfoNrCclkyDR%2BjGWE%2F37VhsIqLgczVEvNJNTgBz6V84%2BlZydDMyIQDv3Fz0Kds6ZzfG8oZFhT8pM6QB1W2YdQS9980SLEXNVOH5I6vP4myRBSTBpQfn4eK0i0zkIydTfcywBNX1%2FU4KS4C%2Bl2EhS4wBfmB7f4QOhnYN1815lRz8gPot9BRP58HvBkCxCUTLlu0kv3mt47qSm821eWSf%2BreAwiKvLwkXZn6YLEOqk6P2UkIKigDeKJ%2BJ0qFFlJMqEg3wBwEAs1OLlMRdG3C7KatwIrMx9RdH0MEkAvDzRf85E9%2FJax1QGC%2FOwSLIxJfuUJMCR4N4TI8tt3IEoGF9YHiWCzU12ssj6wVtlesVVkNqvdrzTH6PJLpApRPo3kb9TgnYQ1hEDeq21pYTViw8HfXjkJufOJN3ye8uBU1zy7YfocR4pd1FOUAEmlDZbo71KSMHt9hBZjRYJMmTwbHD31Z9nVEJAbyxqEF77tdzL9oMheQhR9HFSvj3zSTKKACXXLuFnKB6TXk0dO0y690KiSX5Us4WVlDGkpP%2BgGwaBkNTjkPkf4Loa%2FLKXhO9tBKBFlwqehk97k09IpW7xdHDsJwH5SXvr%2FLV98uIyhqQg2YZxLeLq1YSsFtIX0CyJ5sNUXrUvZhWinrn8MF90nOY9FO%2BCnoZEd2Y%2FKK%2FPrWm3eu5MJqzi6JF4OAMFAb1nxyk3FqsOG6sLGwt%2Fx7psgyZIORKJVmOmvY5zSvihImDPuMKcQ3Pn%2Ftg1Ki5D1c0QBdoUTlM%2FX69s6ablmMqSnxdprhMY39AFN3WAr3gH3CVyrTeutfYr2l4yC6TnmeqkGPqA53KBG7Vjn9Uof5Dw68VtP0JIcLn8tJuwYDmfkvktf39hvawwLKxs5HxHOP%2BVtcNEu%2Fe%5E1%5E%5E%5E%5E%5E&eid_criteo.com=0Oa0LF9NcU9VVGRNbDdwanBmWVpZZ0VNJTJGNE1QeTF6SW9jU0JvVTRaSjNaUmpBWVBFVWozNm1nN1hvc214Q01BclJaRUUlMkZZdlRweWRsQ1RESEZnaEwzYzElMkZGdyUzRCUzRA%5E1%5E%5E%5E%5E%5E&eid_linkedin.com=788fb80f-c706-426c-b825-0224fb56d68b%5E1%5E%5E%5E%5E%5E&rf=https%3A%2F%2Fwww.albumoftheyear.org%2F&tg_i.domain=albumoftheyear.org&tg_i.page=https%3A%2F%2Fwww.albumoftheyear.org%2F&tg_i.documentLang=en&tg_i.cat=IAB1-6%2C338%2CIAB19-29%2C1014&tg_i.sectioncat=IAB1-6%2C338%2CIAB19-29%2C1014&tg_i.pagecat=IAB1-6%2C338%2CIAB19-29%2C1014&tg_i.mobile=0&tg_i.pos=oop&tg_i.sitecont_cat=music%2Centertainment&tg_i.adunit=pw-oop-flex&tg_i.dfp_ad_unit_code=%2F154013155%2C169681494%2F1024410%2F73067%2F1024410-w%3A73067-flex%2F1024410-w%3A73067-flex-ROS&tk_flint=pbjs_lite_v10.23.0&x_source.tid=ue36cce03-86ea-4115-8095-ef26d9487b9e&l_pb_bid_id=b1adac13-4da5-4317-8d4e-ca0785d65c5b&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=u7911b64c-d18d-4e60-b6f4-39cd166f4134&rp_hard_floor=9&p_site.mobile=0&p_gpid=%2F154013155%2C169681494%2F1024410%2F73067%2F1024410-w%3A73067-flex%2F1024410-w%3A73067-flex-ROS&m_ch_ua=%22Not%3AA-Brand%22%7Cv%3D%2299%22%2C%22HeadlessChrome%22%7Cv%3D%22145%22%2C%22Chromium%22%7Cv%3D%22145%22&m_ch_mobile=%3F0&m_ch_platform=Windows&slots=1&rand=0.6151245959462374
hxxps://p[.]ad[.]gt/api/v1/p/403
hxxps://a[.]ad[.]gt/api/v1/u/matches/403?_it=amazon
Off-Domain Posts
hxxps://api[.]rlcdn[.]com/api/identity/envelope?pid=13250
hxxps://id5-sync[.]com/api/config/prebid
hxxps://cdn[.]id5-sync[.]com/api/1.0/id5-api.js
hxxps://fastlane[.]rubiconproject[.]com/a/api/fastlane.json?account_id=27232&site_id=587022&zone_id=3748638&size_id=2&rp_schain=1.0,1!playwire.com,1024410,1,,,&eid_crwdcntrl.net=0d3aa8fe0bc7aab1b12cb9ef92be185ca02cedc7a0f1d46aedc384e59d03ee81%5E1%5E%5E%5E%5E%5E&eid_pubcid.org=4a8b7a8f-a8f1-4405-8800-0157a4b384a5%5E1%5E%5E%5E%5E%5E&eid_neustar.biz=E1%3AqdoSJcLUEDT3lHsD16lhuLUSWGvcFOhkVMN_yiMRmnyXxdLtVh2KPvOZ206ExWUf5UEFuiUNdQXKk3sKE576BinbDkpjSdPmZ25EzA6DJ_LQ_fnYVJZsxyyPmkFqVm62%5E1%5E%5E%5E%5E%5EfabrickId&eid_33across.com=v1.0014000001YrMoYAAV.1053.fORU94bGFi6o6bGCARNh1bVWQSpqjZKXza6YVUy7K%2FW1khzg%2F556ygirqv2Tim3p9fY%2BRH0gjGYGUM%2Fx0iCptpY8LNzXH0msd%2BO4HXyUs1W%2FqrUDVxHKRBCqXqDueOZ5FWh5sEHX5ikab1Dob98I9%2F%2FriYvw1t2DTMnUNhzYXFRBEj%2Bqn8LTU0XCcgBNAbq2XjcpIe9Fy3ddJJRPcjehPrVmziffHr9rr2X02UL0gZgMeMvQbu7TbQp%2BJtR9RMUhyhfxvQC61851Ye5OsqwNGMachDEy%2B8BposxN%2B0ELJBoh3zAtUoZpgGo%2BHiw15ys%2Fl2zEJ8XU0Ds3geyJZk1hNsYuIJW1%2F%2FXi7xbnfhKSfjZbdkgmLFzAdFni1eY0uaC%2BVZvJjTB%2F4Qrf2mAfVZeTbwnXxMMzJvRcAQxM0AoPM%2FPAOUO128m6syn2YWyLBIK62I1ay66n2e5yLFu8sz3E1EXdi4sHQhLCSWH%2BBBljhVi%2BXYCavyLQo0ous6iU4dfoNrCclkyDR%2BjGWE%2F37VhsIqLgczVEvNJNTgBz6V84%2BlZydDMyIQDv3Fz0Kds6ZzfG8oZFhT8pM6QB1W2YdQS9980SLEXNVOH5I6vP4myRBSTBpQfn4eK0i0zkIydTfcywBNX1%2FU4KS4C%2Bl2EhS4wBfmB7f4QOhnYN1815lRz8gPot9BRP58HvBkCxCUTLlu0kv3mt47qSm821eWSf%2BreAwiKvLwkXZn6YLEOqk6P2UkIKigDeKJ%2BJ0qFFlJMqEg3wBwEAs1OLlMRdG3C7KatwIrMx9RdH0MEkAvDzRf85E9%2FJax1QGC%2FOwSLIxJfuUJMCR4N4TI8tt3IEoGF9YHiWCzU12ssj6wVtlesVVkNqvdrzTH6PJLpApRPo3kb9TgnYQ1hEDeq21pYTViw8HfXjkJufOJN3ye8uBU1zy7YfocR4pd1FOUAEmlDZbo71KSMHt9hBZjRYJMmTwbHD31Z9nVEJAbyxqEF77tdzL9oMheQhR9HFSvj3zSTKKACXXLuFnKB6TXk0dO0y690KiSX5Us4WVlDGkpP%2BgGwaBkNTjkPkf4Loa%2FLKXhO9tBKBFlwqehk97k09IpW7xdHDsJwH5SXvr%2FLV98uIyhqQg2YZxLeLq1YSsFtIX0CyJ5sNUXrUvZhWinrn8MF90nOY9FO%2BCnoZEd2Y%2FKK%2FPrWm3eu5MJqzi6JF4OAMFAb1nxyk3FqsOG6sLGwt%2Fx7psgyZIORKJVmOmvY5zSvihImDPuMKcQ3Pn%2Ftg1Ki5D1c0QBdoUTlM%2FX69s6ablmMqSnxdprhMY39AFN3WAr3gH3CVyrTeutfYr2l4yC6TnmeqkGPqA53KBG7Vjn9Uof5Dw68VtP0JIcLn8tJuwYDmfkvktf39hvawwLKxs5HxHOP%2BVtcNEu%2Fe%5E1%5E%5E%5E%5E%5E&eid_criteo.com=0Oa0LF9NcU9VVGRNbDdwanBmWVpZZ0VNJTJGNE1QeTF6SW9jU0JvVTRaSjNaUmpBWVBFVWozNm1nN1hvc214Q01BclJaRUUlMkZZdlRweWRsQ1RESEZnaEwzYzElMkZGdyUzRCUzRA%5E1%5E%5E%5E%5E%5E&eid_linkedin.com=788fb80f-c706-426c-b825-0224fb56d68b%5E1%5E%5E%5E%5E%5E&rf=https%3A%2F%2Fwww.albumoftheyear.org%2F&tg_i.domain=albumoftheyear.org&tg_i.page=https%3A%2F%2Fwww.albumoftheyear.org%2F&tg_i.documentLang=en&tg_i.cat=IAB1-6%2C338%2CIAB19-29%2C1014&tg_i.sectioncat=IAB1-6%2C338%2CIAB19-29%2C1014&tg_i.pagecat=IAB1-6%2C338%2CIAB19-29%2C1014&tg_i.mobile=0&tg_i.pos=oop&tg_i.sitecont_cat=music%2Centertainment&tg_i.adunit=pw-oop-flex&tg_i.dfp_ad_unit_code=%2F154013155%2C169681494%2F1024410%2F73067%2F1024410-w%3A73067-flex%2F1024410-w%3A73067-flex-ROS&tk_flint=pbjs_lite_v10.23.0&x_source.tid=ue36cce03-86ea-4115-8095-ef26d9487b9e&l_pb_bid_id=b1adac13-4da5-4317-8d4e-ca0785d65c5b&p_screen_res=1280x720&rp_secure=1&x_imp.ext.tid=u7911b64c-d18d-4e60-b6f4-39cd166f4134&rp_hard_floor=9&p_site.mobile=0&p_gpid=%2F154013155%2C169681494%2F1024410%2F73067%2F1024410-w%3A73067-flex%2F1024410-w%3A73067-flex-ROS&m_ch_ua=%22Not%3AA-Brand%22%7Cv%3D%2299%22%2C%22HeadlessChrome%22%7Cv%3D%22145%22%2C%22Chromium%22%7Cv%3D%22145%22&m_ch_mobile=%3F0&m_ch_platform=Windows&slots=1&rand=0.6151245959462374
hxxps://p[.]ad[.]gt/api/v1/p/403
hxxps://a[.]ad[.]gt/api/v1/u/matches/403?_it=amazon
Attack Techniques (0)
Indicators of Compromise (0)
No specific IOCs identified in source
Risk AssessmentUsed in abuse reports
The site serves Album of the Year content and branding, which appears legitimate. However, the scan detects extensive third-party ad-tech integrations and multiple external script sources, including potential privacy-invasive trackers and iframes. This suggests aggressive advertising and analytics activity rather than credential phishing or impersonation. The SSL cert is recently issued (April 2026), and the domain age is mature, reducing likelihood of a new-domain phishing setup. Monitor for privacy/security concerns stemming from ad tech stack; no direct abuse or credential theft is evidenced in the data provided.
Recommended Action
Monitor
Cross-Reference9
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API