spotiprimium[.]com[.]mx

The domain spotiprimium.com.mx was registered through NameCheap, Inc. on February 21, 2026 and remains active as of the report date, July 25, 2026. DNS resolution points to the IP address 104.21.80.180, which belongs to Cloudflare, Inc. (AS13335) and is hosted in the United States. The domain uses Cloudflare nameservers (bradley.ns.cloudflare.com and ruth.ns.cloudflare.com) and presents a valid SSL certificate issued by Google Trust Services under the WE1 label. HTTP requests return a 200 status code, and the page title observed is "Descargar Spotify Premium APK V9.1.14.864 Mod Desbloqueado 2026," indicating an attempt to distribute a modified Spotify installer.

Security tooling flags the site as high‑risk phishing: nine of ninety‑three VirusTotal scanners have generated detections, the domain appears on three public blocklists, and it is listed in one AlienVault OTX pulse. Additional reputation services record a Gridinsoft trust score of 0 out of 100, and the domain is blocked by PhishDestroy, MetaMask, and SEAL. Detected web technologies include WordPress, MySQL, PHP, OneSignal, Google Tag Manager, Google Analytics, and Cloudflare Browser Insights, suggesting a typical content‑management setup leveraged for malicious distribution.

While the available data confirms the phishing classification and outlines the hosting infrastructure, the exact payload delivery method and any credential‑harvesting mechanisms have not been publicly disclosed. Defenders should block the domain at network perimeters, update URL filtering lists with the identified blocklist entries, and monitor for outbound connections to the associated Cloudflare IP. Continuous scanning of the domain with sandbox and endpoint detection platforms is advised to capture any evolving payloads.