spotify-clone-five-psi-35[.]vercel[.]app

This domain poses a high-risk brand impersonation threat designed to deceive users into believing they are accessing the legitimate Spotify web player. The page title, 'Spotify - Web Player: Music for everyone,' mimics the authentic Spotify interface, increasing the likelihood of credential theft or unauthorized account access. The domain specifically targets users seeking music streaming services, exploiting trust in the Spotify brand to harvest login credentials, personal data, or distribute malware under the guise of a legitimate service. Analysis indicates the domain spotify-clone-five-psi-35.vercel.app was created on February 21, 2026, and is registered through Tucows Domains Inc. It resolves to the IP address 216.198.79.3, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509). The domain is flagged by 18 out of 95 security vendors on VirusTotal and appears on 2 distinct security blocklists, including PhishDestroy and PhishingDB. The SSL certificate is issued by Google Trust Services, which, while not inherently malicious, is commonly leveraged by threat actors to lend a false sense of legitimacy to phishing pages. Users who have visited spotify-clone-five-psi-35.vercel.app should immediately cease all interaction with the domain. If credentials were entered, reset passwords for Spotify and any other accounts where the same credentials may have been reused. Enable multi-factor authentication on all critical accounts to mitigate the risk of unauthorized access. Monitor financial and account activity for signs of compromise, and report the domain to security teams or threat intelligence platforms for further investigation. Network administrators should block the domain and its associated IP address (216.198.79.3) at the perimeter to prevent additional exposure.