spotyfyapk[.]com

Analysis of spotyfyapk.com shows a high‑risk generic phishing campaign active as of July 12, 2026. The domain was registered on February 21, 2026 through NameCheap, Inc. and resolves to IP 109.106.251.49, which belongs to AS47583 Hostinger International Limited located in the United States. The site presents the page title "Spotify Premium APK v9.1.2.1253 (Unlocked) | Download 2026" and returns HTTP 200 responses under a Let's Encrypt R12 certificate. Infrastructure inspection reveals a WordPress site powered by MySQL and PHP, served by LiteSpeed and incorporating jQuery libraries. The domain is listed on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and Gridinsoft assigns a trust score of 0 out of 100. VirusTotal records indicate that 7 of 95 security vendors have flagged the domain. While the exact malicious payload is not disclosed, the combination of a deceptive page title, low trust score, blocklist presence, and vendor detections strongly suggests credential harvesting or malware distribution. Defenders should immediately block spotyfyapk.com at network perimeters, add its IP address to threat intelligence feeds, monitor DNS queries for the domain, and consider updating intrusion detection signatures to capture associated traffic. Continuous observation of any changes to the hosting environment or additional detections is recommended.