Update your subscription
This email impersonates Spotify using a payment-failure lure and urges the recipient to update billing details. The sender domain (geoact.co.jp) does not align with Spotify, and the primary link points to a non-Spotify domain with a suspicious path. Browser validation found the destination unresolved, so the content could not be safely verified, but the branding mismatch, payment-update pretext, and off-brand infrastructure strongly indicate a phishing attempt. The additional wstd.io URLs also appear unrelated to Spotify and are suspicious in this context.
URL Signals
3 analyzed
https://manage-sub-local-hub.help/wp-includes/blocks/block/16shop/?p=LpOJa
https://manage-sub-local-hub.help/wp-includes/blocks/block/16shop/?p=LpOJa
https://modial-relay-assistance-6qf79.wstd.io/
https://modial-relay-assistance-6qf79.wstd.io/
https://modial-relay-assistance-6qf79.wstd.io
https://modial-relay-assistance-6qf79.wstd.io
Documents
0 processed
None.
Authentication
Envelope
Spotify-Team <hiroko@geoact.co.jp>
n/a
0