spotify-clone-kilua.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of spotify-clone-kilua.vercel.app
The domain spotify-clone-kilua.vercel.app appears to host a web application designed to imitate the look and branding of Spotify's web player. The page title, interface layout, logo styling, and music-player presentation suggest it is presenting itself as a Spotify-like streaming experience rather than an independent, clearly branded music service.
Based on the subdomain structure, the site appears to be deployed on Vercel, a cloud hosting platform commonly used for frontend applications and prototypes. The term "spotify-clone" in the hostname strongly suggests this may be a clone, demo, or unofficial reproduction of Spotify's interface, but the visible branding and presentation could also cause visitors to believe they are interacting with an official Spotify property.
No clear operator identity is provided in the supplied scan data. Because the site uses a third-party hosting subdomain rather than an official Spotify-owned domain, it does not appear to be an official Spotify web property based on the available information.
Safety Assessment for spotify-clone-kilua.vercel.app
The scan results indicate elevated risk. At the time of this scan, the domain was flagged by 17 out of 91 security engines, and multiple web-classification providers categorized it as phishing or fraud-related. Although one malware scan reported no malicious files and several major threat databases did not list the URL, the multi-engine phishing consensus is a stronger signal that the site may be attempting to mislead users.
The page also appears to mimic Spotify's branding and web-player design while operating from a Vercel subdomain rather than an official Spotify domain. That kind of branding resemblance may indicate a look-alike or impersonation attempt, especially when combined with phishing-related detections. In addition, the domain's IP address is listed on one mail-reputation blocklist; this is a weaker signal than direct phishing detections, but it adds a small amount of caution.
While the domain itself is not newly registered, age alone does not offset the number of phishing flags and the apparent imitation of a well-known brand. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority, with expiry shown as 2026-11-26. It is hosted on Vercel infrastructure and resolves to an IP address in the United States. The nameservers also point to Vercel-managed DNS, which is consistent with a cloud-hosted frontend deployment.
DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from DNSSEC validation. No malicious files or flagged external links were reported in the supplied file-level scan, but that does not negate the broader phishing-related detections from multiple security engines. The main technical concern here is not transport security, but the apparent brand imitation and reputation-based phishing signals.
Share your experience with this website. Was it safe? Did you encounter any issues?