# spotifypremium.icu — MALICIOUS

> Avoid spotifypremium.icu, a high-risk phishing site pretending to offer Spotify Premium APK. Do not download files or enter personal info here.

## Summary
PhishDestroy identifies spotifypremium.icu as a high-risk phishing domain impersonating Spotify Premium APK downloads. The site lures users with promises of modded apps and no ads, aiming to steal credentials or distribute malware.

The domain was created on March 11, 2026, and is registered via Dynadot LLC. It resolves to IP 172.67.198.132 and has been flagged by 12 security vendors on VirusTotal. It currently appears on three security blocklists, indicating active malicious use.

spotifypremium.icu remains active and poses a significant threat to users seeking Spotify services. Users are strongly advised to avoid this domain, refrain from downloading any files, and use official sources only for software downloads.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: Spotify Premium APK v9.1.18.1504 Download (Mod+No Ads) 2026

## Domain Intelligence
- Registered: 2026-03-11 17:07:02
- Registrar: Dynadot LLC
- Country: US
- IP: 172.67.198.132
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["ezra.ns.cloudflare.com", "jean.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 12 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "Fortinet", "G-Data", "Lionic", "Netcraft", "Seclookup", "SOCRadar", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ceb8e-a063-76a3-9935-e91317f98be1.png
- PhishDestroy: https://phishdestroy.io/domain/spotifypremium.icu/
- LLM endpoint: https://phishdestroy.io/domain/spotifypremium.icu/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/spotifypremium.icu/
Last updated: 2026-03-19