spotify-4mx.pages.dev

Spotify

https://spotify-4mx.pages.dev Access site

Screenshot

Investigate

Domain spotify-4mx.pages.dev1 CT host on apex

urlscan

page.domain

VirusTotal

Whois

IP 172.66.44.130

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://spotify-4mx.pages.dev

urlscan

Wayback

archive.today

Cert Google Trust Services

crt.sh

Censys

Google CT

Phishunt analysis Beta

32 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+5.1 urlscan.io
+4.5 Brand in title
+3.7 Brand in domain label
+2.2 Country mismatch
+1.1 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.7 Brand in cert SAN
+0.6 Suspicious TLD
+0.5 Young certificate
+0.4 Long domain
+0.3 Free CA
+0.1 Hyphens
+0.1 Deep subdomain

19 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Fake Spotify page hosted on Cloudflare Pages with the Spotify brand embedded in the subdomain. Missing CSP and HSTS security headers and confirmed malicious by urlscan, the site is consistent with a credential harvesting operation targeting Spotify account holders.

urlscan.ioPaaS hostBrand in domain label

AI-generated from stored detector signals - the AI never visited the site. · 2026-08-19 · confidence 80%

Domain & Network

Whois

Registrar CloudFlare, Inc.

Network

IP 172.66.44.130

Country