spotify-login[.]vercel[.]app
“Spotify-Login”
Ringkasan bukti
This domain, spotify-login.vercel.app, poses a significant brand impersonation threat. It is designed to deceive users into believing they are interacting with Apple's official services, potentially leading to the theft of sensitive information such as login credentials and personal data. The domain's impersonation of Apple is a deliberate tactic to exploit user trust and gain unauthorized access to accounts.
Infrastructure analysis reveals that spotify-login.vercel.app is flagged by 18 out of 95 security vendors on VirusTotal, indicating a moderate to high level of suspicion. The domain is registered through Tucows Domains Inc. and was created on February 21, 2026. It is currently hosted on an IP address located in the United States (AS16509 Amazon.com, Inc.), which resolves to 216.198.79.195. Additionally, the domain appears on one security blocklist and is flagged by Google Safe Browsing for phishing activities. The SSL certificate is issued by Google Trust Services / WR1, which may contribute to a false sense of security for unsuspecting users.
Users who have visited this domain are strongly advised to change their Apple account passwords immediately and enable two-factor authentication if not already in place. They should also monitor their accounts for any unauthorized activity and report any suspicious incidents to Apple's support team. Security professionals are encouraged to disseminate this information to prevent further victimization and to implement additional security measures to block and monitor this domain.
Data Coverage
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 12/08/2026
Linimasa deteksi
-
VirusTotal
18 → 21
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of spotify-login.vercel.app · checked Mar 1, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive