Phishing detection: no-spotify.com
Spotify Screenshot
Investigate
Domain
no-spotify.com10 CT hosts on apex
urlscan
VirusTotal
Whois
IP
198.54.132.28
ipinfo
Greynoise
URL
https://no-spotify.com
Phishunt analysis Beta
29
low suspicionheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +4.0 Young domain
- +2.2 Country mismatch
- +1.7 Shared IP cluster
- +1.3 Brand typo
- +1.1 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +1.0 Site cluster
- +0.9 Young certificate
- +0.9 No registrar lock
- +0.7 Brand in cert SAN
- +0.7 Unrecognised DNS provider
- +0.6 Registrar reputation
- +0.3 Free CA
- +0.3 Long domain
- +0.2 Suspicious TLD
- +0.1 Hyphens
23 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Spotify lookalike domain registered one day earlier and flagged by Google Safe Browsing for social engineering. The page has no links to the real Spotify, and the detector sees a clone-reference signal tied to email only. Hosted in Canada on an IP shared with other flagged sites.
Google Safe BrowsingYoung domainClone reference: email-only login
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-08 · confidence 65%
Domain & Network
Whois
Registrar
Ultahost, Inc.
Network
Country
Canada
Canada
Hosting
tzulo, inc.
ASN
AS11878
TLS Cert
YR1
External detection
Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io · SANS ISC
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists