Phishing detection: spotifypremiumapk.pk

Spotify
https://spotifypremiumapk.pk Access site
Screenshot
Screenshot of spotifypremiumapk.pk
Investigate
URL https://spotifypremiumapk.pk
Phishunt analysis Beta
39 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.5 Brand in title
  • +4.1 Brand in screenshot
  • +3.7 Brand in domain label
  • +3.4 Shared IP cluster
  • +3.0 OpenPhish
  • +2.2 Country mismatch
  • +2.0 Young domain
  • +1.4 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.7 Brand in cert SAN
  • +0.6 Final host mismatch
  • +0.6 Suspicious TLD
  • +0.4 Long domain
  • +0.3 Free CA
  • +0.1 External scripts
23 signals fired · detector v3.0.0
AI analysis AIBeta
Malware delivery

A site on a .pk domain behind Cloudflare uses Spotify in its domain and page title to promote a 'premium APK', a typical modded-app lure. It is listed in OpenPhish and shares an IP cluster with similar sites, so it may push malicious downloads or harvest accounts.

Brand in domain labelBrand in titleOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-02 · confidence 60%
Domain & Network
Whois
Network
Country United StatesUnited States
ASN AS13335
TLS Cert WE1
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
Network / ASN Cloudflare, Inc.

Tracked from 2026-10-02 13:04 UTC  ·  Last refreshed 2026-10-03 03:30 UTC