spotipremiumapks[.]com[.]mx

The domain spotipremiumapks.com.mx was registered through Dynadot LLC on April 20, 2025 and currently resolves to the IPv4 address 191.101.104.195, which is advertised as belonging to Hostinger International Limited (ASN 47583) and geolocated to the United States. The authoritative name servers are ns1.dns-parking.com and ns2.dns-parking.com, both typical of parking services. No TLS certificate is presented, indicating that the site is served only over clear‑text HTTP. The only visible artifact on the host is the page title “Spotify Premium APK 2025 v9.0.40.320 (Todo Desbloqueado)”, which suggests an attempt to lure victims with a purportedly unlocked Spotify APK, while the listed brand target is Apple, confirming a brand‑impersonation intent. VirusTotal records show that 11 of 95 scanning engines have flagged the domain as malicious, and the site appears on a single external blocklist maintained by PhishDestroy.

Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. The site’s current HTTP status is offline, but the historical evidence indicates that it was actively serving content before takedown. Analysis indicates that the infrastructure is inexpensive and rapidly deployable: a newly created domain, generic parking name servers, and a shared hosting provider that is frequently abused for short‑lived phishing campaigns. The lack of SSL, combined with the mismatched page title and the Apple impersonation claim, suggests that the operator intended to harvest Apple credentials or deliver malicious payloads under the guise of a premium application.

Because the domain resolves to a host owned by Hostinger, defenders should consider adding both the domain and its IP address to outbound and inbound filtering rules, and monitor other domains registered by the same registrar (Dynadot) that resolve to the same IP block. Continuous surveillance of the ASN 47583 range for new domains with similar naming patterns (e.g.