Domain
spotify.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of spotify.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
40
A/AAAA targets
Subdomains
111
CT + scan + body
Record Types
6
seen in DNS
Observed Certs
7
in our scans
DNS Records
A
35.186.224.24
AAAA
2600:1901:1:7c5::
MX
1 aspmx.l.google.com, 10 aspmx2.googlemail.com, 10 aspmx3.googlemail.com, 10 aspmx4.googlemail.com, 10 aspmx5.googlemail.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
dns1.p07.nsone.net, ns-cloud-a1.googledomains.com, ns-cloud-a2.googledomains.com, ns-cloud-a3.googledomains.com, ns-cloud-a4.googledomains.com
TXT
MS=ms38184034, _anz60jg9dhixqlmcv20ntnooz9m0k8x, anthropic-domain-verification-mqtmtz=BSac9xfxvigNt4Ralt2KPkt1V, apple-domain-verification=Dxae2sKJD2O5TKGK, atlassian-domain-verification=1My5WsxLluUY8uIjgbLs4MY3ySFp32k9aYNW2IR4ihM64k58CxpFnB5R9SEiJAnR, atlassian-sending-domain-verification=d90f2e0c-fa57-43b6-910f-065cc4d6a0e3, cloudflare_dashboard_sso=19cd522a4fc20281209f03663d34ee76, cursor-domain-verification-985xgr=7ROYkkLIfunrK2GtW0spMGDNw
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| open.spotify.com | 2026-07-28 20:23:38.809 | |
| www.spotify.com | 2026-07-27 16:59:37.101 | |
| newsroom.spotify.com | 2026-07-17 07:27:25.407 | |
| creators.spotify.com | 2026-06-22 17:33:26.850 | |
| download.spotify.com | 2026-06-04 16:58:53.087 | |
| images.spotify.com | 2026-06-17 05:30:56.269 | |
| pixel-static-test.spotify.com | 2026-06-23 13:57:30.766 | |
| promo.spotify.com | 2026-06-23 21:25:20.803 | |
| upgrade.spotify.com | 2026-06-04 16:58:53.087 | |
| accounts.spotify.com | 2026-07-26 22:55:19.788 | |
| ads.spotify.com | 2026-06-14 23:37:38.836 | |
| api.spotify.com | 2026-07-24 14:19:37.096 | |
| artists.spotify.com | 2026-05-27 09:24:40.778 | |
| developer.spotify.com | 2026-07-28 01:38:51.183 | |
| embed.spotify.com | 2026-07-24 17:11:16.887 | |
| komodo-origin.creators.spotify.com | 2026-06-23 16:21:14.793 | |
| play.spotify.com | 2026-07-27 08:20:51.170 | |
| player.spotify.com | 2026-07-21 08:42:27.540 | |
| podcasters.spotify.com | 2026-07-28 06:51:17.851 | |
| shop.spotify.com | 2026-06-22 10:15:09.080 | |
| spotify.com | 2026-07-28 07:09:20.615 | |
| support.spotify.com | 2026-05-26 18:18:52.742 | |
| wg.spotify.com | 2026-07-22 23:15:05.493 | |
| api.adanalytics.spotify.com | 1970-01-01 00:00:00.000 | |
| canary-certificate-for-noop.spotify.com | 2026-07-26 15:10:03.550 | |
| clicks.creators.spotify.com | 1970-01-01 00:00:00.000 | |
| clicks.podcasters.spotify.com | 1970-01-01 00:00:00.000 | |
| common.spotify.com | 1970-01-01 00:00:00.000 | |
| confidence.spotify.com | 1970-01-01 00:00:00.000 | |
| dynamicworkplace4wtc.spotify.com | 1970-01-01 00:00:00.000 | |
| g2.spotify.com | 1970-01-01 00:00:00.000 | |
| heads-fab.spotify.com | 1970-01-01 00:00:00.000 | |
| heads-fac.spotify.com | 1970-01-01 00:00:00.000 | |
| info.backstage.spotify.com | 1970-01-01 00:00:00.000 | |
| investors.spotify.com | 2026-07-23 05:32:54.849 | |
| production-origin.creators.spotify.com | 1970-01-01 00:00:00.000 | |
| smores-varnish-lb.spotify.com | 2026-05-27 04:52:50.881 | |
| staging-origin.creators.spotify.com | 1970-01-01 00:00:00.000 | |
| testcdn.spotify.com | 1970-01-01 00:00:00.000 | |
| testing-open.spotify.com | 1970-01-01 00:00:00.000 | |
| to.spotify.com | 1970-01-01 00:00:00.000 | |
| www.connect.spotify.com | 1970-01-01 00:00:00.000 | |
| www.hrblog.spotify.com | 1970-01-01 00:00:00.000 | |
| www.newsroom.spotify.com | 1970-01-01 00:00:00.000 | |
| yourfeedback.spotify.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: www-staging.spotify.com.w.zulln.se
Issuer: YR1
SANs: www-staging.spotify.com.w.zulln.se
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: *.g2.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.g2.spotify.com, g2.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: view.adstudio.byspotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: view.adstudio.byspotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: *.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.spotify.com, spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: prfx.byspotify.com
Issuer: WR3
SANs: evnt.byspotify.com, img.byspotify.com, mbl.byspotify.com, mr.byspotify.com, prfx.byspotify.com, sgmt.byspotify.com, wh.byspotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: canary-certificate-for-noop.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: canary-certificate-for-noop.spotify.com
Subject: ads.spotify.com
Issuer: ads.spotify.com
SANs: ads.spotify.com
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
47.85.32.128:80
href · ×4
3.15.225.190:443
href · ×3
13.236.179.54:80
href · ×2
51.210.108.249:443
href · ×2
87.98.235.95:443
href · ×2
151.80.234.220:443
href · ×2
50.116.51.150:443
href · ×2
164.90.144.50:443
href · ×2
165.22.196.217:443
href · ×1
45.12.53.139:443
href · ×1
192.241.226.235:80
href · ×1
167.172.3.194:80
href · ×1
16.162.125.63:443
href · ×1
43.202.198.246:443
href · ×1
167.172.3.194:443
href · ×1
165.22.72.134:443
href · ×1
89.144.42.236:443
href · ×1
140.238.230.211:443
href · ×1
85.193.83.204:7001
href · ×1
31.59.41.126:443
href · ×1
193.181.23.81:443
href · ×1
151.242.159.10:443
href · ×1
50.116.55.95:80
href · ×1
192.145.56.126:80
href · ×1
159.65.120.77:443
href · ×1
172.96.253.110:443
href · ×1
138.197.98.64:443
href · ×1
49.235.139.91:80
href · ×1
217.160.162.25:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
c18c7c9eefff3118…
google · xenon2026h2
Subject: *.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.spotify.com, spotify.com
Valid: 2026-04-07 00:00:00 → 2026-10-22 23:59:59
604e3842d8f20cf7…
google · argon2026h2
Subject: *.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.spotify.com, spotify.com
Valid: 2025-12-08 00:00:00 → 2026-12-08 23:59:59
604e3842d8f20cf7…
google · xenon2026h2
Subject: *.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.spotify.com, spotify.com
Valid: 2025-12-08 00:00:00 → 2026-12-08 23:59:59
d259c071b22ee845…
google · xenon2026h2
Subject: *.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.spotify.com, spotify.com
Valid: 2025-12-08 00:00:00 → 2026-12-08 23:59:59
bbd84d42878dfeed…
google · argon2026h2
Subject: *.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.spotify.com, spotify.com
Valid: 2025-11-24 00:00:00 → 2026-12-22 23:59:59
bbd84d42878dfeed…
google · xenon2026h2
Subject: *.spotify.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.spotify.com, spotify.com
Valid: 2025-11-24 00:00:00 → 2026-12-22 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.