spotify-jobs[.]com

This domain, spotify-jobs.com, poses as an official Spotify recruitment portal to deceive job seekers into submitting personal and professional credentials. Analysis indicates the site is designed to harvest login details, resume data, and other sensitive information under the guise of employment opportunities. Such schemes often lead to identity theft, account takeovers, or further targeted phishing attacks against victims. Infrastructure analysis reveals the domain was registered on June 12, 2026, through Name.com, Inc., a registrar frequently observed in phishing operations. It resolves to the IP address 91.195.240.94 and is currently flagged by 12 out of 95 security vendors on VirusTotal, with additional detection from at least one major blocklist. The SSL certificate, issued by DigiCert Inc, does not mitigate the malicious intent, as phishing sites commonly use valid certificates to appear legitimate. Users who have visited spotify-jobs.com or entered credentials on the site should immediately cease all interaction. Reset passwords for any accounts linked to the information provided, enable multi-factor authentication where available, and monitor financial and professional accounts for unauthorized activity. Organizations should block the domain and IP at the network level to prevent further exposure. Victims are advised to report the incident to relevant cybersecurity authorities and consider identity monitoring services to detect potential misuse of stolen data.