Lookalike Domain Analysis

Detailed risk assessment for spotify.pw

Back to Report
Domain Information
Lookalike Domain
spotify.pw
Legitimate Domain (Target)
spotify.com
Subscription billing and account resale
Registrar
Porkbun, LLC Dangerous Registrar
Website Status
Parked
Detection Date
February 04, 2026 17:35
Domain Creation Date
January 10, 2026
RDAP Takedown Status
Active
Discovery Method
Fuzzer
DNS Records
Nameservers
art.ns.cloudflare.com., jillian.ns.cloudflare.com.
MX Records (Mail Servers)
mail.dnsguard.pub.
SPF Record (Email Authentication)
v=spf1 mx ip4:62.192.153.247 include:_spf.google.com include:sendgrid.net -all
Risk Score Breakdown

This risk score shows how dangerous this lookalike domain is. Higher scores indicate more active threats. Each indicator below adds points to the score (max 100).

Talos Blacklist

Not on Talos blacklist

+0
Dangerous Registrar

Registered with flagged registrar: Porkbun

+25
Dangerous Email Provider

MX record 'mail.dnsguard.pub.' not on dangerous list

+0
MX Records Configured

Email servers configured: mail.dnsguard.pub.

+15
SPF Records

SPF authentication configured with sending directives

+15
Website is Live

Website status: Parked

+0
Website is Parked

Domain has a parked website

+5
Website is Phishing

Website status: Parked

+0
Recent Registration

Domain registered 68 days ago (30-90 days)

+5
Total Score: 65 / 100
5 of 9 factors active
Threat Level
65 / 100
High Risk

High priority threat. Review the details below and consider takedown action.

Request Takedown
Risk Increase Detected
Score went from 60 to 65 · 1 month, 1 week ago
Key Threat Signals
  • Talos Blacklisted No
  • Website Active No
  • Email Capability Enabled
  • Email Authentication Configured
  • Taken Down No
Related Threats

Other domains attacking spotify.com

Remove This Threat

Our specialist team removes malicious domains in 24-48 hours.

Start Takedown Process
Daniel Hovasse
Need Help?
Contact our expert
Daniel Hovasse
Detect Lookalike Domains

Find domains that impersonate your brand. Scan for lookalike domains that could be used for phishing or fraud.

Scan for Lookalikes