Phishing sites impersonating Spotify

PhishDestroy has recorded 174 phishing domains impersonating Spotify since 2025-08-31, 9 of them in the last 30 days. The most used registrars are GitHub and Netlify; the most common TLDs are .io and .app. The official Spotify domain is spotify.com: any other site asking for your login or wallet is not Spotify.

174
Domains, all time
9
Last 30 days
69
Online at last check
13
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 22026-07-27: 02026-07-28: 02026-07-29: 22026-07-30: 02026-07-31: 02026-08-01: 12026-08-02: 42026-08-03: 12026-08-04: 12026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 12026-08-10: 32026-08-11: 32026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 32026-08-16: 42026-08-17: 52026-08-18: 22026-08-19: 02026-08-20: 22026-08-21: 12026-08-22: 52026-08-23: 22026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 12026-08-29: 02026-08-30: 02026-08-31: 42026-09-01: 12026-09-02: 02026-09-03: 02026-09-04: 32026-09-05: 02026-09-06: 22026-09-07: 22026-09-08: 22026-09-09: 02026-09-10: 02026-09-11: 82026-09-12: 22026-09-13: 12026-09-14: 22026-09-15: 12026-09-16: 02026-09-17: 12026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 12026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 12026-10-07: 12026-10-08: 12026-10-09: 02026-10-10: 12026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 12026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 12026-10-21: 12026-10-22: 1
Spotify phishing domains detected per day: 81 from 2026-07-25 to 2026-10-22; peak 8.

How to tell a fake Spotify site

Official domain: spotify.com.

Words most often added to the brand in reported domains: clone, theta, project, beta, eight, rho, psi, music, flax, singh.

  • Type the address yourself or use a bookmark; phishing links for Spotify arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Spotify does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Spotify phishing domains

The 50 most recently detected domains impersonating Spotify
DomainFirst detectedStatus at last checkRegistrar
autoconfig.no-spotify.com2026-10-22OnlineUltahost
blockwisepod.com2026-10-21OnlineGlobal Domain
owenmoogk.com2026-10-20OnlineCloudflare
clientes.sabocan.com2026-10-14OnlineTecnocratica Centro de Datos, S.L
caminaconmigo.org2026-10-10OnlineNAMECHEAP
articho.net2026-10-08OnlineIONOS SE
spotdown.fun2026-10-07OnlineNICENIC
spotifyzonepro-dl.fwh.is2026-10-06Online—
amywinehousestore.shop2026-10-02OnlineDynadot
lucent-profiterole-837e70.netlify.app2026-09-17OnlineNetlify
rohitmishra-iitm.github.io2026-09-15OfflineGitHub Pages
tapmy.cc2026-09-14OnlineNICENIC
rajveersolanki06.github.io2026-09-14OfflineGitHub Pages
atulraj03.github.io2026-09-13OfflineMarkMonitor
asqw2580.github.io2026-09-12OfflineMarkMonitor
deviniciusgith.github.io2026-09-12OnlineGitHub Pages
abhay-gupta-dev.github.io2026-09-11OfflineMarkMonitor
virendragupta224.github.io2026-09-11OfflineGitHub Pages
sumansanand.github.io2026-09-11OfflineGitHub Pages
skpandeyyy.github.io2026-09-11OfflineGitHub Pages
syed-khasim.github.io2026-09-11OfflineGitHub Pages
shaktikumar72.github.io2026-09-11OfflineMarkMonitor
lokendraankel12-lgtm.github.io2026-09-11OfflineMarkMonitor
my-bot902.github.io2026-09-11OfflineMarkMonitor
anuragmali24.github.io2026-09-08OfflineGitHub
gajendra-sharma-dev.github.io2026-09-08OfflineGitHub
a08786897-beep.github.io2026-09-07OfflineGitHub
sunny-vacherin-33a11a.netlify.app2026-09-07OnlineNetlify
spotify25.netlify.app2026-09-06OnlineNetlify
sportify-pearl.vercel.app2026-09-06OnlineVercel
spotify-clone-psi-two.vercel.app2026-09-04OnlineVercel
sandipgaikwad669.github.io2026-09-04OfflineGitHub
spotify-clone-git-main-gouravpansejas-projects.vercel.app2026-09-04OnlineVercel
ramyayergatla7.github.io2026-09-01OfflineGitHub
nitesh9162.github.io2026-08-31OfflineGitHub
spotify-clone-re19.netlify.app2026-08-31OfflineNetlify
spotify-clone-tau-gold.vercel.app2026-08-31OnlineVercel
spotify-clone-beta-two.vercel.app2026-08-31OnlineVercel
spotifypremiumapk.com.co2026-08-28OnlineDYNADOT
tneetu97.github.io2026-08-23OfflineGitHub
akshita-debug.github.io2026-08-23OfflineGitHub
spotify-clone-yuvraj.netlify.app2026-08-22OnlineNetlify
gleeful-mousse-699032.netlify.app2026-08-22OfflineNetlify
spotifyclonebysaiteja.netlify.app2026-08-22OnlineNetlify
thriving-kitten-968a8f.netlify.app2026-08-22OnlineNetlify
vathouse-spotify-page-design.netlify.app2026-08-22OnlineNetlify
sonuchaudhary9756.github.io2026-08-21OfflineGitHub
anushkadas7047.github.io2026-08-20OfflineGitHub
arshh0-0.github.io2026-08-20OfflineGitHub
ranjit-sharma.github.io2026-08-18OfflineGitHub

All 174 Spotify reports

Where they are registered and hosted

Registrars

  1. GitHub78
  2. Netlify22
  3. Vercel11
  4. MarkMonitor7
  5. Vercel7
  6. GitHub Pages7
  7. Cloudflare5
  8. NameCheap4

Top-level domains

  1. .io93
  2. .app45
  3. .com12
  4. .org3
  5. .net3
  6. .dev3
  7. .site1
  8. .now1

Hosting networks

  1. Fastly, Inc.61
  2. Amazon.com, Inc.36
  3. FASTLY - Fastly, Inc., US21
  4. Cloudflare, Inc.10
  5. AMAZON-02, US7
  6. CLOUDFLARENET, US4
  7. AMAZON-02 - Amazon.com, Inc., US3
  8. CLOUDFLARENET - Cloudflare, Inc., US2

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Spotify; share of all PhishDestroy reports: 0.08%.