mail.no-spotify.com - phishunt.io

Spotify

https://mail.no-spotify.com Access site

Screenshot

Investigate

Domain mail.no-spotify.com10 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 198.54.132.28

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://mail.no-spotify.com

urlscan

Wayback

archive.today

Cert YR1

crt.sh

Censys

Google CT

Phishunt analysis Beta

39 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+4.1 Site cluster
+3.5 ASN reputation
+3.4 Cert reuse
+3.4 Shared IP cluster
+3.2 Young domain
+2.2 Country mismatch
+1.3 Brand typo
+1.1 No CSP header
+1.1 No HSTS header
+0.9 No registrar lock
+0.7 Brand in cert SAN
+0.7 Unrecognised DNS provider
+0.6 Registrar reputation
+0.5 Young certificate
+0.4 Long domain
+0.3 Free CA
+0.2 Suspicious TLD
+0.1 Hyphens
+0.1 Deep subdomain

25 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Spotify-themed phishing on a mail subdomain of a lookalike domain. Its certificate names the brand and the page appears to be an email-only clone. Flagged by Google Safe Browsing, hosted in Canada on an IP shared with sibling subdomains.

Brand in cert SANGoogle Safe BrowsingClone reference: email-only login

AI-generated from stored detector signals - the AI never visited the site. · 2026-10-14 · confidence 75%

Domain & Network

Whois

Registrar Ultahost, Inc.

Network

IP 198.54.132.28

Country

Canada

Hosting tzulo, inc.

ASN AS11878

TLS Cert YR1

External detection Google Safe Browsing

GSB category: SOCIAL_ENGINEERING

CleanOpenPhish · PhishTank · TweetFeed · urlscan.io

Report this phishing

Submit to blocklists

Google Safe Browsing Microsoft SmartScreen APWG PhishTank

Tracked from 2026-10-14 17:24 UTC · Last refreshed 2026-10-19 23:30 UTC

Phishing detection: mail.no-spotify.com