lunalaunch[.]org

PhishDestroy identifies lunalaunch.org as an active Spotify-themed phishing site, currently under investigation with a confirmed high-risk threat profile. This domain operates under a generic phishing classification while actively masquerading as a legitimate Spotify login portal to harvest user credentials. This domain was flagged with 2/95 VirusTotal detections as of the latest scan, indicating undetected malicious activity despite active hosting. Registered on May 30, 2025 through NAMECHEAP INC, the site resolves to IP address 185.199.109.153 and holds a valid Let’s Encrypt SSL certificate. With no current presence on major blocklists or threat intelligence feeds, this scam remains evasive to automated detection systems. Security researchers should block lunalaunch.org at the network perimeter and blacklist the associated IP 185.199.109.153 to prevent credential theft attempts targeting Spotify users. End users who have visited this domain should immediately change their Spotify password and enable two-factor authentication to secure compromised accounts. Organizations are advised to inspect DNS logs for outbound connections to this domain and inspect endpoints for signs of credential harvesting malware.