app.spotifylite.online
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of app.spotifylite.online
The domain app.spotifylite.online appears to present a login page branded as "Spotify Lite Premium," with a dark interface, Spotify-style logo treatment, and username/password fields. Based on the page title, screenshot, and linked assets, the site seems intended to mimic or recreate access to a lightweight or premium music-streaming experience associated with Spotify branding.
There is no clear indication in the provided scan data that this domain is operated by Spotify or by an officially affiliated entity. The domain uses a separate .online address rather than a known primary Spotify domain, and the site appears to be a narrowly focused login portal rather than a full corporate or consumer service website. Based on the available evidence, it may be a third-party page attempting to attract users seeking Spotify-related access.
Safety Assessment for app.spotifylite.online
The scan results are mixed. On the positive side, 0 out of 91 security engines detected malware at the time of this scan, and the malware scan reported no flagged files, links, or iframes. However, the domain is extremely new at only 4 days old, which materially increases uncertainty because newly created domains are commonly used for short-lived campaigns before reputation systems fully catch up.
There are also stronger contextual concerns beyond malware detection alone. The domain closely resembles Spotify branding and presents what appears to be a Spotify-themed login page, yet it does not appear to use an official Spotify-owned domain. That resemblance may indicate a look-alike page intended to collect credentials. In addition, one threat-database check listed the site with a generic malicious classification, and the domain's IP address is listed on one mail-reputation blocklist; that DNS-based listing is a weaker signal by itself, but it still adds some caution.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate expiring on 2027-01-02 and is served over HTTPS, which helps encrypt traffic in transit but does not by itself establish legitimacy. The web server appears to be nginx hosted on infrastructure attributed to Interserver in Secaucus, United States. The domain is registered through Cloudflare, Inc. and uses Cloudflare nameservers.
From a domain-security perspective, the registration is very recent and DNSSEC appears to be unsigned. No malicious files were identified in the limited file scan, but the combination of a very new domain, unofficial branding resemblance, and a login-focused page suggests elevated phishing risk despite the otherwise light technical footprint.
Share your experience with this website. Was it safe? Did you encounter any issues?