English

Within the commercial generic top-level domain (.com), 'open.spotify.com' is registered and includes subdomain 'open'. The core label 'spotify' covers 7 characters holding 2 vowels versus five consonants. Tokenizing the label suggests three words: spot, if, y. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

html/10/6f/106fa757-8c03-4ac1-819e-189a656665b4.html.gz

script-src 'self' 'unsafe-eval' blob: open.spotifycdn.com open-exp.spotifycdn.com open-review.spotifycdn.com open-exp-review.spotifycdn.com quicksilver.scdn.co www.google-analytics.com www.googletagmanager.com static.ads-twitter.com analytics.twitter.com s.pinimg.com sc-static.net https://www.google.com/recaptcha/ cdn.ravenjs.com connect.facebook.net www.gstatic.com sb.scorecardresearch.com pixel-static.spotify.com cdn.cookielaw.org geolocation.onetrust.com www.googleoptimize.com www.fastly-insights.com static.hotjar.com script.hotjar.com https://www.googleadservices.com/pagead/conversion_async.js https://www.googleadservices.com/pagead/conversion/ https://analytics.tiktok.com/i18n/pixel/sdk.js https://analytics.tiktok.com/i18n/pixel/identify.js https://analytics.tiktok.com/i18n/pixel/config.js https://www.redditstatic.com/ads/pixel.js https://t.contentsquare.net/uxa/22f14577e19f3.js https://get.microsoft.com/badge/ms-store-badge.bundled.js https://cdn.us.heap-api.com https://heapanalytics.com 'sha256-WfsTi7oVogdF9vq5d14s2birjvCglqWF842fyHhzoNw=' 'sha256-KRzjHxCdT8icNaDOqPBdY0AlKiIh5F8r4bnbe1PQwss=' 'sha256-Z5wh7XXSBR1+mTxLSPFhywCZJt77+uP1GikAgPIsu2s=' 'sha256-o2wzIImHJ4+WWE5DCTR+myWU0UNml0+wwpDXRo++vII='; frame-ancestors 'self' https://adgen-dev.spotify.com/account/*/ad/*/details https://adgen-dev.spotify.com/preview/* https://local.spotify.net/account/*/ad/*/details https://local.spotify.net/preview/* https://app.smartly.io/*;

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs

script-src 'report-sample' 'nonce-I8B70IxnYhYDsnjZePkqRw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cloudview

base-uri 'none'; connect-src https: wss:; form-action https:; frame-ancestors 'self' https://*.spotify.com https://*.spotify.net; object-src 'none'

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cloudview-release

script-src 'report-sample' 'nonce-xMDHW1pdJ7NA1eqolvXE8Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1

1d2e0e1b1e5599a8bae64fa198366d376f12489dbfd45101ee131eee5ed9afb5

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

ORG-FI26-RIPE

Fastly, Inc.

ORG-NCC1-RIPE

FASTLY

HSTS

Envoy

Spotify – Web Player

✅ Low Risk - https://open.spotify.com/show/3YOD3Evupsbi8sFs8TS6d3?utm_source=Receive+News+from+the+John+Templeton+Foundation&utm_campaign=42837b4b08-EMAIL_CAMPAIGN_2025_templetonideas_20251126&utm_medium=email&utm_term=0_-42837b4b08-97355777

Requests	IP Address	Location	AS Autonomous System
19	146.75.123.42	Frankfurt am Main, Hesse, Germany	AS54113FASTLY
15	142.250.186.163	United States	AS15169GOOGLE
15	142.250.184.195	United States	AS15169GOOGLE
15	35.186.224.28	United States	AS396982GOOGLE-CLOUD-PLATFORM
15	142.250.186.164	United States	AS15169GOOGLE
15	146.75.122.251	Frankfurt am Main, Hesse, Germany	AS54113FASTLY
15	35.186.224.24	United States	AS396982GOOGLE-CLOUD-PLATFORM
15	2.20.245.172	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
15	2.16.168.40	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
15	142.250.184.238	United States	AS15169GOOGLE
214	14	-	-

Security Scan Report: open.spotify.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies2

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History