ruddycruzc[.]github[.]io

This domain, ruddycruzc.github.io, is actively engaged in high-risk phishing activity targeting users of a popular music streaming service. Analysis of the page title, which explicitly states 'Spotify clone,' indicates a deliberate attempt to impersonate the official Spotify login interface. The objective of this campaign is likely credential harvesting, where unsuspecting users are tricked into entering their account credentials into a fraudulent form, enabling unauthorized access to their accounts and associated personal or financial data.

Technical indicators confirm the malicious nature of this domain. The page is hosted on 185.199.109.153, an IP address associated with a content delivery network and located within the United States under AS54113. VirusTotal detection metrics reveal that 6 out of 95 security vendors have flagged this domain as malicious. The domain is registered through GitHub, Inc., leveraging the github.io subdomain infrastructure, which is frequently abused for phishing due to its ease of deployment and perceived legitimacy. As of the latest intelligence, the domain appears on one security blocklist, and its SSL certificate, issued by Let's Encrypt (R12), does not mitigate the risk, as encrypted connections are commonly used to lend credibility to phishing sites.

Users who have visited ruddycruzc.github.io or interacted with the fraudulent Spotify interface should take immediate action to mitigate potential risks. First, they should change their Spotify account password via the official platform and enable multi-factor authentication if not already active. Additionally, users are advised to review their account for any unauthorized activity, such as unfamiliar playlists, devices, or payment methods. If financial information was entered, they should contact their financial institution to monitor for fraudulent transactions. Finally, scanning the device used to access the site with up-to-date security software is recommended to detect and remove any potential malware or persistent threats.