spotify-login[.]vercel[.]app

This domain, spotify-login.vercel.app, poses a significant brand impersonation threat. It is designed to deceive users into believing they are interacting with Apple's official services, potentially leading to the theft of sensitive information such as login credentials and personal data. The domain's impersonation of Apple is a deliberate tactic to exploit user trust and gain unauthorized access to accounts.

Infrastructure analysis reveals that spotify-login.vercel.app is flagged by 18 out of 95 security vendors on VirusTotal, indicating a moderate to high level of suspicion. The domain is registered through Tucows Domains Inc. and was created on February 21, 2026. It is currently hosted on an IP address located in the United States (AS16509 Amazon.com, Inc.), which resolves to 216.198.79.195. Additionally, the domain appears on one security blocklist and is flagged by Google Safe Browsing for phishing activities. The SSL certificate is issued by Google Trust Services / WR1, which may contribute to a false sense of security for unsuspecting users.

Users who have visited this domain are strongly advised to change their Apple account passwords immediately and enable two-factor authentication if not already in place. They should also monitor their accounts for any unauthorized activity and report any suspicious incidents to Apple's support team. Security professionals are encouraged to disseminate this information to prevent further victimization and to implement additional security measures to block and monitor this domain.