spotify.nezo.ai
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of spotify.nezo.ai
The domain spotify.nezo.ai appears to host a web page styled to resemble Spotify, showing a music-streaming dashboard with playlists, album artwork, and Spotify branding. The page title references "Youware App," which does not match the visible branding in the screenshot, suggesting the site may be presenting a custom or repurposed web application rather than an official service page.
Based on the domain structure, this is a subdomain under nezo.ai rather than Spotify's primary web properties. The content appears to imitate a music streaming interface and may be intended to attract users looking for Spotify-related access or functionality. No clear evidence in the provided scan data identifies the legitimate operator of this subdomain.
Safety Assessment for spotify.nezo.ai
Several security signals indicate elevated risk at the time of this scan. The domain was flagged by 5 security engines, with multiple detections specifically describing the page as phishing or malicious. In addition, the domain closely resembles Spotify branding while operating on an unrelated nezo.ai subdomain, which may indicate a look-alike page intended to imitate a well-known service.
Other signals are mixed. The malware scan did not detect malicious files in the limited content that was checked, and major threat databases in the provided data did not report active malware or phishing listings at the time of this scan. However, one blacklist provider did list the domain with a generic malicious-object classification, and the visual presentation raises impersonation concerns because the screenshot prominently uses Spotify branding despite not being on an official Spotify domain.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services, with traffic served through Cloudflare infrastructure on IP address 188.114.97.2. The nameservers also point to Cloudflare, indicating the site is behind a reverse-proxy and CDN setup. Hosting geolocation in the scan points to Toronto, Canada.
DNSSEC appears to be unsigned, which means DNS responses may not benefit from DNSSEC validation. The visible link structure includes a challenge-platform path commonly associated with anti-bot or access-control checks, suggesting some visitors may encounter a verification or challenge page before reaching content.
Share your experience with this website. Was it safe? Did you encounter any issues?