spotifyapk[.]co
“Spotify Premium APK v9.1.14.864 Download January 2026”
Pengamatan tersimpan
Perbedaan judul yang diamati
Ringkasan bukti
Analysis of the domain spotifyapk.co, created on February 21 2026 and hosted behind Cloudflare (ASN 13335, United States), shows an active generic phishing campaign targeting users seeking a Spotify Premium APK. The site returns an HTTP 301 redirect and presents a page titled “Spotify Premium APK v9.1.14.864 Download January 2026.” The SSL certificate is issued by Google Trust Services under the WE1 designation, indicating a valid TLS handshake despite the malicious intent. Technical fingerprints reveal a WordPress stack backed by MySQL and PHP, with auxiliary services including YouTube embeds, Cloudflare Browser Insights, and HTTP/3 enabled. DNS resolution points to IP 188.114.96.3, consistent with Cloudflare’s edge network.
Reputation data shows that 15 of 93 VirusTotal scanners flag the domain, and it appears on three independent blocklists, currently blocked by PhishDestroy, MetaMask, and SEAL. The registrar is GoDaddy.com, LLC, and the authoritative nameservers are sneh.ns.cloudflare.com and sullivan.ns.cloudflare.com. Gridinsoft assigns a trust score of 1 out of 100, reflecting extreme risk.
While the page title confirms the lure of a counterfeit Spotify APK, no additional payload samples or credential‑harvesting forms have been publicly disclosed. Defenders should immediately block both the domain and its resolving IP at network perimeters, update web‑filtering rules, and monitor for related C2 traffic using the observed Cloudflare infrastructure. Continuous re‑scanning of the site is advised, as the low trust score and multi‑vendor detections suggest that the infrastructure may evolve or host additional malicious artifacts.
Data Coverage
Sinyal Keamanan
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 11/08/2026
Linimasa deteksi
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of spotifyapk.co · checked Mar 2, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive