No Security Risks Detected
This domain appears to be safe and secure
100%
Score
Disclaimer: This assessment is based on automated analysis of publicly available information. Results are for informational purposes only. For critical applications, consult security professionals.
Scan Information
Scan Complete
Refresh page after 10 minutes
for updated results
Page Information
Target URL
https://accounts.spotify.com/login/ott/web#token=781LU55TQ2eOoW-gjClQBw&passwordToken=5EslwiQzTzqDZqtlrdab7Q&username=petersonsalme&continue=https%3A%2F%2Faccounts.spotify.com%2Fpassword-reset%2Fcomplete%235EslwiQzTzqDZqtlrdab7Q
Page Title
Reset your password
Status
Active
Host Information
Domain
accounts.spotify.com
Server
envoy
Country
United States
IP Address
35.186.224.24
ASN Information
396982
GOOGLE-CLOUD-PLATFORM
Technologies
Envoy
Reverse proxies
reCAPTCHA
Security
HSTS
Security
HTTP/3
Miscellaneous
SSL Certificate
HTTPS Enabled
Secure
Certificate Issuer
N/A
Valid From
2025-11-15 01:16:34
Valid Until
2026-11-16 01:16:34
Subject Name
accounts.spotify.com
Performance Statistics
81
Total Requests
7
Domains
5
IP Addresses
682.08 KB
Transfer Size
Content Size2.48 MB
HTTP Headers
Alt-Svc
h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding
chunked
Via
HTTP/1.1 fringe, HTTP/2 edgeproxy, 1.1 google
X-External-Managed-Migration-Selected-Scheme
EXTERNAL
_route
alt-svc
h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cache-control
private, no-cache, no-store, max-age=0, must-revalidate
content-encoding
gzip
content-security-policy
base-uri 'none'; img-src 'self' https://*.scdn.co https://www.google-analytics.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://*.googletagmanager.com; font-src 'self' https://*.scdn.co; connect-src 'self' https://*.spotify.com https://*.spotify.net https://*.ingest.sentry.io/ https://*.google-analytics.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://*.googletagmanager.com; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'nonce-9d73aa22a0844d62b6d058177286b8c4' 'strict-dynamic' 'self' https://accounts.scdn.co https://www.google-analytics.com https://ssl.google-analytics.com https://*.googletagmanager.com 'sha256-DdOTSPXUa4upGVO8zYWD1wUUqxjFKJFyE/4ha4Fe9XE='
content-type
text/html; charset=utf-8
date
Sun, 16 Nov 2025 01:16:36 GMT
etag
"4cppjjh7uej9h"
server
envoy
strict-transport-security
max-age=31536000
vary
Accept-Encoding
x-content-type-options
nosniff
x-envoy-upstream-service-time
26
x-frame-options
deny
18 headers detected
Technology Stack Analysis
Envoy
Reverse proxies
Envoy is an open-source edge and service proxy, designed for cloud-native applications.
reCAPTCHA
Security
reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.
HSTS
Security
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
HTTP/3
Miscellaneous
HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
Website Cookies 5
__Host-sp_csrf_sid
accounts.spotify.com
HttpOnly Secure Lax
Value
3c4d38e009362103a52bebe02572d5d68466dc8eb4717961ad0f13681ea92677
Expires:11/16/2025
sp_sso_csrf_token
.accounts.spotify.com
Secure Lax
Value
[sp_sso_csrf_token redacted]
Expires:Session
sp_t
accounts.spotify.com
Value
eee8337e-9a71-4e7a-a0ea-7555516f47aa
Expires:Session
sp_tr
.accounts.spotify.com
Secure Lax
Value
false
Expires:Session
__Host-device_id
accounts.spotify.com
HttpOnly Secure Lax
Value
AQCZ1NG3DP9k7EHWn0b-fO5BOqBMxeHeC6OtVY8Q7CyZsQDWOHB0DybBE7SUwLXCiCJ__kdc96Jq7VhJG270bjb8v8pYZ7f5ZWc
Expires:12/21/2026
External Links 3
Requested Domains 7
accounts.scdn.co
Unknown Type
No category information available
accounts.spotify.com
Subdomain
No category information available
apresolve.spotify.com
Unknown Type
No category information available
encore.scdn.co
Unknown Type
No category information available
spclient.wg.spotify.com
Unknown Type
No category information available
www.google.com
Unknown Type
No category information available
www.gstatic.com
Unknown Type
No category information available