How is spotify.com?
Looks fine
risk 0/100
Registered 21 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 259 ms.
Why
02050100
finecarefulhigh risk
- ·Nothing in the checks added risk.
Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
259 ms · ends at open.spotify.com
HTTPS
90 d
left on a DigiCert Inc certificate
Age
21 years
registered 2006-04-23
Blocklists
0
listings across 5 lists
Everything we looked at
DNS records5 record types
| A | 35.186.224.24 |
|---|---|
| AAAA | 2600:1901:1:7c5:: |
| MX | 1 aspmx.l.google.com 10 aspmx3.googlemail.com 10 aspmx2.googlemail.com 10 aspmx4.googlemail.com 5 alt1.aspmx.l.google.com 5 alt2.aspmx.l.google.com 10 aspmx5.googlemail.com |
| NS | ns-cloud-a3.googledomains.com ns-cloud-a4.googledomains.com ns-cloud-a2.googledomains.com dns1.p07.nsone.net ns-cloud-a1.googledomains.com |
| TXT | google-site-verification=uD4f4k01lFWX3qwVbqnVaJg8atpKgAgc-_RYcyT3ofU windsurf-verification=LRBAV_kH3G5aleY1GIc1jMUg_8iBpigIm2qYF00bRps= _anz60jg9dhixqlmcv20ntnooz9m0k8x status-page-domain-verification=wq4jns7ydgbb MS=ms38184034 tiktok-developers-site-verification=pZNawVY3o5Ma80MRCC6Fref1NiLzuEVU vmware-cloud-verification-dab4c35d-1819-4431-add3-d3c382ee32bc yahoo-verification-key=bdudmGyddArwRiVafgItrfYq8nrhd5vzNZ7Ik/G0ILM= anthropic-domain-verification-mqtmtz=BSac9xfxvigNt4Ralt2KPkt1V google-site-verification=0wmxUE7T2OWPhtwjco6oCyqqbYgtosjQdywAr4G4kU0 tiktok-developers-site-verification=ttGXJxgq1HQKquomgiljzFq53uoLHcUC jamf-site-verification=1kKxrm0glhWvrA0YiABH_w atlassian-sending-domain-verification=d90f2e0c-fa57-43b6-910f-065cc4d6a0e3 google-site-verification=ehIHBRyAOKdOfUyw_ONXT0TMuUsdk1gDGSYfk8YhRgw atlassian-domain-verification=1My5WsxLluUY8uIjgbLs4MY3ySFp32k9aYNW2IR4ihM64k58CxpFnB5R9SEiJAnR openai-domain-verification=dv-VNYvLsJIttFvRz7ymxFgjrPC parallels-domain-verification=7bb3a358f26f4e23a5077648266570c873182a57d6d44e47a55ef6cf72cdb470 google-site-verification=ESiNWockZgSgTPSsrsAdMX9afsj2-_8504nQ0qIHkDA v=spf1 ip4:80.76.146.172 ip4:80.76.146.173 include:_spf.google.com include:servers.mcsv.net include:_spf.salesforce.com include:_spf.netigate.se include:21894833.spf06.hubspotemail.net ~all notion-domain-verification=AqUDuql68X5rQ1qLwho6huUjf4QteXZlyvTIKS1txnq reachdesk-verification=v0DuUrKxORfyqxIOMkJm57GlQtvaAv0watqt7x7ylMN21LAHqR6dEhUpSxOp7DCh apple-domain-verification=Dxae2sKJD2O5TKGK tiktok-developers-site-verification=98xFqMKsOJ51nNJpUCGPGbo7m17gtf7f onetrust-domain-verification=508849d40e2b4b8fba2b7eaf84f1bddc docker-verification=82f3553a-fb50-4d4e-9607-8a8079ee354f zapier-domain-verification-challenge=db8a0b98-bb6a-4f84-a699-344dc23fef3b cloudflare_dashboard_sso=19cd522a4fc20281209f03663d34ee76 google-site-verification=buTP-BbGUoP8lPntqskvSbeS68M4PDoIFkiUtQEA5n8 wiz-domain-verification=370862886b04dfa626d54d2c4cc955174c6f3164a104a85d725ae5ece72ea3ef facebook-domain-verification=qyrvuca7h4s7wevhzbprtt3tdyyhf1 loom-site-verification=3ee9ca8c2df34d08abbb7be5185bc768 have-i-been-pwned-verification=33b7ae688099ee8cca63259b769a0ea8 liveramp-site-verification=IAXPTLlWofr4aaKtwVqirrHvOqUMiXnaMW8WMmuz1v0 cursor-domain-verification-985xgr=7ROYkkLIfunrK2GtW0spMGDNw facebook-domain-verification=wtgn9pdvjdhs21j9gz6knsnpkafvs5 |
RegistrationAbion AB
| registrar | Abion AB |
|---|---|
| registered | 2006-04-23 |
| expires | 2030-04-23 |
| last changed | 2024-07-08 |
| owner | Spotify AB |
| nameservers | dns1.p07.nsone.net ns-cloud-a1.googledomains.com ns-cloud-a2.googledomains.com ns-cloud-a3.googledomains.com ns-cloud-a4.googledomains.com |
| status | client delete prohibited client transfer prohibited server delete prohibited server transfer prohibited server update prohibited |
registered 2006-04-23expires 2030-04-23
HTTPS certificate90 days left
| valid | yes |
|---|---|
| issuer | DigiCert Inc |
| covers | *.spotify.com, spotify.com |
| protocol | TLSv1.3 |
issued 2026-07-09expires 2027-01-23
DNSSECinsecure
Domain is not signed with DNSSEC
. → com → spotify.com
Email authenticationexcellent
| SPF | pass v=spf1 ip4:80.76.146.172 ip4:80.76.146.173 include:_spf.google.com include:servers.mcsv.net include:_spf.salesforce.com include:_spf.netigate.se include:21894833.spf06.hubspotemail.net ~all |
|---|---|
| DMARC | pass policy reject |
| DKIM | found: google, k1, s1, s2 |
Whether mail claiming to be from this domain can be checked as genuine.
Security scoregrade B · 167/205
Basic Security20/40missing: DNSSEC Enabled
Record Security30/45missing: CAA Records, DKIM Presence
Advanced Security25/25
Domain Reputation47/50missing: Typosquatting Check
Threat Detection45/45missing: Domain Age Check
Blocklists0 listings · 5 lookups
SURBL MultidomainURIBL MultidomainSpamCop35.186.224.24Barracuda35.186.224.24UCEPROTECT Level 135.186.224.24
Green: clean. Red: listed. Grey: the list did not answer.
Ask it yourself
Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.
curl "https://how.is/v1/domain/trust?domain=spotify.com" \
-H "Authorization: Bearer $HOWIS_KEY"
# or pay per call in USDC (x402), no key: the 402 tells your agent the price
curl -i "https://how.is/v1/domain/profile?domain=spotify.com"
MCP: add https://how.is/mcp to Claude, Codex or Cursor
(one-line install) and ask for domain_trust on spotify.com.
Reference: /llms.txt.
Watch spotify.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.
Watch — $1 / 30 days