spotify-clone-blue[.]vercel[.]app

This domain, spotify-clone-blue.vercel.app, is an active phishing site targeting users of a music streaming service, as indicated by its page title 'Spotify - Your favourite music is here.' The domain was registered on April 15, 2026, through Vercel Inc. and currently resolves to the IP address 216.198.79.131, located in the United States. Infrastructure analysis reveals the use of Vercel hosting and HSTS technology, with no nameservers detected. The domain is flagged by Google Safe Browsing for social engineering and appears on at least one security blocklist, including PhishDestroy. Scamadviser and Gridinsoft both assign the lowest possible trust scores (1/100 and 0/100, respectively), further indicating malicious intent. As of July 12, 2026, the domain remains active, returning an HTTP 200 status code. A scan by 94 security vendors on VirusTotal resulted in 22 detections, confirming its classification as a phishing threat. The SSL certificate is issued by Google Trust Services, which does not mitigate the risk posed by the domain. Defenders should prioritize blocking this domain at the network level, particularly in environments where access to streaming services is common. Given the domain's hosting on a legitimate platform (Vercel), monitoring for similar patterns, such as subdomains containing 'spotify-clone' or variations, may help identify related threats. The exact phishing kit or payload is not yet analyzed, but the domain's structure and title suggest it is designed to harvest user credentials. No additional infrastructure or attribution details are currently available.