project-beta-topaz-83[.]vercel[.]app

The domain project-beta-topaz-83.vercel.app is a confirmed brand impersonation site specifically targeting Spotify, currently active and posing a high risk to users. This phishing domain masquerades as the legitimate Spotify Web Player, using the page title 'Umar Spotify - Web Player: Music for everyone' to deceive visitors into believing they are accessing an official Spotify service. The site is actively hosted and continues to function as a credential theft vector.

According to intelligence data, this domain has been flagged by 21 out of 95 VirusTotal security vendors, confirming its malicious nature. It also appears on one security blocklist and is flagged by Google Safe Browsing as a phishing site. The domain was registered through Vercel Inc. on January 28, 2020, and resolves to IP address 216.198.79.195. It uses an SSL certificate issued by Google Trust Services (WR1), which may give it an appearance of legitimacy to unsuspecting users. The combination of a valid certificate and a convincing page title makes this threat particularly insidious.

Given that the site is still active and actively impersonating Spotify, users are strongly advised to avoid visiting the domain entirely. PhishDestroy recommends that organizations using Spotify block access to this domain at the network level and educate users about verifying URLs before entering credentials. If any user has already submitted login information, they should change their Spotify password immediately and enable two-factor authentication. The domain should be reported to Vercel for abuse and to Google Safe Browsing for takedown. Vigilance against such brand impersonation attacks is critical to protect sensitive account information.