spotifycloneomjare23[.]netlify[.]app

The domain spotifycloneomjare23.netlify.app is currently active and resolves to the IP address 35.157.26.135, which is hosted on the Netlify platform. VirusTotal analysis shows that 13 of 91 security vendors have flagged the domain as malicious, indicating a notable detection rate across multiple scanning engines. The domain is listed on two external blocklists and is explicitly blocked by the PhishDestroy and OpenPhish services, reinforcing its classification as a high‑risk phishing resource.

Nameserver information is unavailable, and no further DNS metadata has been disclosed. No public page title, SSL certificate details, or HTTP response codes have been recorded, leaving the exact content and visual presentation of the site unverified at this time. The registration through Netlify suggests the attacker leveraged a legitimate hosting provider to obtain a free or low‑cost web presence, a common technique for rapid deployment of phishing infrastructure.

Defenders should prioritize the addition of spotifycloneomjare23.netlify.app to internal block and deny‑list configurations, enforce outbound traffic filtering to the associated IP address, and monitor network logs for any attempted connections to the domain. Continuous re‑evaluation of the domain’s status is recommended, as threat actors may modify the payload or hosting configuration. Integrating the observed detection count and blocklist identifiers into security information and event management (SIEM) rules can improve early warning capability for related phishing campaigns.