Phishing detection: subscribe-spotify.com

Spotify
http://subscribe-spotify.com Access site
Screenshot
Screenshot of subscribe-spotify.com
Investigate
Domain subscribe-spotify.com1 CT host on apex
urlscan page.domain VirusTotal Whois

See every phishunt record for this domain

IP 91.92.243.98
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://subscribe-spotify.com
urlscan Wayback archive.today
Cert YR1
crt.sh Censys Google CT
Phishunt analysis Beta
95 critical suspicion phishingheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Kit captured
  • +4.5 Brand in title
  • +4.1 Brand in screenshot
  • +4.0 Young domain
  • +3.0 OpenPhish
  • +2.2 Country mismatch
  • +2.0 Site cluster
  • +1.4 Registrar reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.9 Young certificate
  • +0.7 Brand in cert SAN
  • +0.7 Unrecognised DNS provider
  • +0.6 Login text in screenshot
  • +0.4 Long domain
  • +0.3 Free CA
  • +0.2 Suspicious TLD
  • +0.1 Hyphens
  • Boosted to 95: Kit captured
Kit archived: 2026/202610/subscribe-spotify.com (panel.zip)
24 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Spotify-themed subscription domain with Spotify branding in the page title, served over HTTP from a Netherlands host (Omegatech LTD). Flagged by OpenPhish; likely harvests Spotify credentials or payment details for a fake subscription.

Brand in titleOpenPhishKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-23 · confidence 70%
Domain & Network
Whois
Registrar NICENIC INTERNATIONAL GROUP CO., LIMITED
Network
IP 91.92.243.98
Country The NetherlandsThe Netherlands
Hosting Omegatech LTD
ASN AS202412
TLS Cert YR1
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-10-23 13:03 UTC  ·  Last refreshed 2026-10-24 05:30 UTC