public company · US

Spotify Technology S.A.

Primary official domain
spotify.com
Reviewed official domains
1 (directory review; organization has not verified)
Directory source
BreachScout directory · Suggest a correction
Matching domains, 30 days
26
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
33
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF Could not fully evaluate (sender-specific macros) · checked 2026-10-19 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
spotify
Label aliases
spotify
Official domains
spotify.com (all)
Generated spellings
98 tracked · 0 observed somewhere · 98 not observed (all)

Generated spellings we track

Spellings generated from this organization's official domains and brand tokens (typos, keyboard slips, lure words, look-alike characters, other top-level domains). Each one is checked against phishing feeds, certificate logs and DNS. A spelling that exists is not a finding and not a verdict: it may be unrelated, legitimate or registered defensively.

Tracked spellings
98
generated 2026-10-19; bounded dictionary, not every possible spelling
Seen in a phishing feed
0
spellings with at least one approved-source feed host on that domain
Seen in certificate logs
0
spellings with a certificate name on that domain in sampled logs
Resolves
0
spellings that answered a DNS query; 0 of 98 checked so far

Lure word added 24 tracked · 0 observed

SpellingDerived fromIn phishing feedIn certificate logsResolvesState
account-spotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
accountspotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
login-spotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
loginspotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
secure-spotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
securespotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify-account[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify-login[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify-secure[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify-support[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify-update[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify-verify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotifyaccount[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotifylogin[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotifysecure[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotifysupport[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotifyupdate[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotifyverify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
support-spotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
supportspotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
update-spotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
updatespotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
verify-spotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
verifyspotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed

Other top-level domain 21 tracked · 0 observed

SpellingDerived fromIn phishing feedIn certificate logsResolvesState
spotify[.]app
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]biz
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]cc
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]club
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]co
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]help
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]icu
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]info
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]io
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]live
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]me
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]net
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]online
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]org
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]shop
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]site
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]store
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]support
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]top
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]vip
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotify[.]xyz
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed

Look-alike characters (ASCII) 3 tracked · 0 observed

SpellingDerived fromIn phishing feedIn certificate logsResolvesState
sp0tify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spot1fy[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotlfy[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed

Look-alike characters (internationalized) 3 tracked · 0 observed

SpellingDerived fromIn phishing feedIn certificate logsResolvesState
sрotify[.]comxn--sotify-brf[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotıfy[.]comxn--spotfy-s9a[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spоtify[.]comxn--sptify-xqf[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed

Character omitted 7 tracked · 0 observed

SpellingDerived fromIn phishing feedIn certificate logsResolvesState
potify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
sotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spoify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotfy[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotif[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotiy[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
sptify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed

Characters swapped 6 tracked · 0 observed

SpellingDerived fromIn phishing feedIn certificate logsResolvesState
psotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
soptify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spoitfy[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotfiy[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotiyf[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
sptoify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed

Character repeated 7 tracked · 0 observed

SpellingDerived fromIn phishing feedIn certificate logsResolvesState
spootify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotiffy[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotifyy[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotiify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spottify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
sppotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
sspotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed

Vowel changed 8 tracked · 0 observed

SpellingDerived fromIn phishing feedIn certificate logsResolvesState
spatify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spetify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spitify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotafy[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotefy[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotofy[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotufy[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
sputify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed

Adjacent key typo 19 tracked · 0 observed

SpellingDerived fromIn phishing feedIn certificate logsResolvesState
apotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
dpotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
slotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
sootify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spltify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spogify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
sporify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spoticy[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotidy[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotifh[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotift[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotifu[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotigy[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotiry[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spotkfy[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spoyify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
spptify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
wpotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed
zpotify[.]com
spotify.comNot observedNot observed
Not checkedno DNS check yet
Not observed

Last feed and certificate-log check 2026-10-19 00:58 UTC. “Not observed” means none of our checks has seen the spelling; it is not proof the name is unregistered. An observed spelling is not a finding: reported abuse appears only under Reported matches, from independent source evidence. Feed presence counts hosts from approved sources only; certificate presence comes from sampled public logs; DNS checks cover the apex name and are refreshed on a schedule.