OptanonConsent

Within the commercial generic top-level domain (.com), 'api.spotify.com' is registered with subdomain 'api'. The second-level label 'spotify' is 7 characters long split between two vowels and five consonants. Splitting it apart reveals three words: spot, if, y. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

html/17/8c/178cc37c-ca67-43f9-aaf0-caa844a2327e.html.gz

base-uri 'self'; connect-src https://developer-assets.spotifycdn.com https://embed-cdn.spotifycdn.com https://stats.g.doubleclick.net https://*.googletagmanager.com https://*.analytics.google.com https://*.google-analytics.com https://translate.googleapis.com https://cdn.cookielaw.org https://*.onetrust.com https://*.spotify.com https://*.spotify.net https://*.spotify.dev https://*.sentry.io wss://*.spotify.com wss://*.spotify.net; form-action https:; frame-ancestors 'self' https://*.spotify.com https://*.spotify.net; object-src 'none'; script-src https://developer-assets.spotifycdn.com https://*.spotify.com https://*.spotify.net https://open.spotifycdn.com https://embed-cdn.spotifycdn.com https://*.googletagmanager.com https://*.analytics.google.com https://*.google-analytics.com https://translate.googleapis.com https://translate.google.com https://cdn.cookielaw.org 'unsafe-eval' 'sha256-WfsTi7oVogdF9vq5d14s2birjvCglqWF842fyHhzoNw=' https://open.spotify.com 'sha256-usT+6qPuOS6IkYtKfVmDANmKvyw2VIa1A0slyo1mSmw='; report-uri https://o22381.ingest.sentry.io/api/4504887026384896/security/?sentry_key=f4a7c7c55acb47ab8ff900050fce0bd4

tutorial

0c78c1fd44ac20d63a71c4d068d218f0670acd12f033113f4c7d9df72e1bdfd2

0973c1d64c88adc8e3c950410cb58b288f72118d5965b78049438deb8f2f9683

a90d7c96ab32d5406c053e1435590427daa398ecd1493fad4b2578238f6fda82

094f2cb246ad82c2d6a3e9e25361cd2ca8048e9ab3f6345de1379bb0201eeda8

35e59ed3d052d60fd4d3f96d65945ab680853072aaac4866697c9fa735bcf2ea

d6060eb8f7e39505719670eb308b3a2f1c30a71be6301eb0d4063ed0881eb07e

39470ebf8f8c77d836ece39fd62361d2e72967de8e70841b12969210925e1828

807e1bb04293ee51a3460fda8959df7345a1fb30695cf4a9674e5faa7517fea3

faf66e3b240b99c22b0cb100908bf3212886cf840419d76ec412758654cc8369

d266cebe579de643751bf3548d09af1b3bb2120cbb0aa64b59c8a84871cd8768

viewport

next-head-count

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Abuse-C Role

Network Architecture Role Account

AKAM1-RIPE-MNT

AKAMAI-PA

(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl+window.__gtm_additional_data;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer',window.__gtm_track_id);

Requests	IP Address	Location	AS Autonomous System
67	23.32.238.145	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
25	35.186.224.24	United States	AS396982GOOGLE-CLOUD-PLATFORM
16	2.20.245.172	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
12	104.18.87.42	United States	AS13335CLOUDFLARENET
6	2.16.168.40	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
5	2.19.198.64	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
5	142.251.140.168	United States	AS15169GOOGLE
5	104.18.86.42	United States	AS13335CLOUDFLARENET
5	2606:4700::6812:562a	United States	AS13335CLOUDFLARENET
5	2600:1901:1:4be::	United States	AS396982GOOGLE-CLOUD-PLATFORM
116	21	-	-

Security Scan Report: api.spotify.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History