0ab565e91b860448b7e019fa26494e9[.]paris-hotel-latin-quarter[.]com

The domain 0ab565e91b860448b7e019fa26494e9.paris-hotel-latin-quarter.com has been identified as a brand impersonation threat specifically targeting Spotify. This domain is currently marked as offline, indicating it has been taken down after being flagged for malicious activity. Users should be aware that this site was designed to deceive individuals into believing they were interacting with legitimate Spotify services, potentially leading to credential theft or other security compromises.

According to available intelligence, this domain was registered through InterNetX GmbH and was created on February 23, 2026. It resolves to the IP address 188.114.97.3 and appears on one security blocklist. Notably, VirusTotal analysis shows that 21 out of 95 security vendors flagged this domain as malicious, indicating widespread recognition of its threat. The page title was simply "Welcome," and no SSL certificate was detected, further undermining its legitimacy. PhishDestroy assesses the risk level as elevated due to the targeted brand impersonation and the high number of vendor flags.

Given that the domain is now offline, the immediate threat is reduced; however, users should remain vigilant against similar domains that may appear. It is recommended to avoid interacting with any unsolicited links or websites claiming to be Spotify, especially those with unusual subdomains or misspellings. If users have inadvertently visited this domain or entered credentials, they should change their Spotify password immediately and enable two-factor authentication. Monitoring accounts for suspicious activity is also advised.