https://open.spotify.com/

ID da verificação
d61cc730-124f-44b2-bc68-a229856c2539Concluído
URL enviado:
https://open.spotify.com/show/6jr0X0jJlMgGEDZKQrdYAfRedirecionado
Relatório concluído:

Riscos · 0 encontrado(s)

Práticas que podem representar riscos de segurança

  • Sem classificação

Cabeçalhos de segurança · 3 encontrado(s)

Cabeçalhos de resposta HTTP que podem aumentar a segurança de um aplicativo web

NomeValorSuporteInfo
Strict-Transport-Securitymax-age=31536000Bom
X-Frame-Options—Bom
X-Content-Type-OptionsnosniffBom
Content-Security-Policyscript-src 'self' 'unsafe-eval' blob: open.spotifycdn.com open-exp.spotifycdn.com open-review.spotifycdn.com open-exp-review.spotifycdn.com quicksilver.scdn.co www.google-analytics.com www.googletagmanager.com static.ads-twitter.com analytics.twitter.com s.pinimg.com sc-static.net https://www.google.com/recaptcha/ cdn.ravenjs.com connect.facebook.net www.gstatic.com sb.scorecardresearch.com pixel-static.spotify.com cdn.cookielaw.org geolocation.onetrust.com www.googleoptimize.com www.fastly-insights.com static.hotjar.com script.hotjar.com https://www.googleadservices.com/pagead/conversion_async.js https://www.googleadservices.com/pagead/conversion/ https://analytics.tiktok.com/i18n/pixel/sdk.js https://analytics.tiktok.com/i18n/pixel/identify.js https://analytics.tiktok.com/i18n/pixel/config.js https://www.redditstatic.com/ads/pixel.js https://t.contentsquare.net/uxa/22f14577e19f3.js 'sha256-WfsTi7oVogdF9vq5d14s2birjvCglqWF842fyHhzoNw=' 'sha256-KRzjHxCdT8icNaDOqPBdY0AlKiIh5F8r4bnbe1PQwss=' 'sha256-Z5wh7XXSBR1+mTxLSPFhywCZJt77+uP1GikAgPIsu2s='; frame-ancestors 'self' https://adgen-dev.spotify.com/account/*/ad/*/details https://adgen-dev.spotify.com/preview/* https://local.spotify.net/account/*/ad/*/details https://local.spotify.net/preview/*; Bom
Referrer-Policy—Bom
Clear-Site-Data—Bom
X-Permitted-Cross-Domain-Policies—Bom
Permissions-Policy—Recente
Cross-Origin-Embedder-Policy—Recente
Cross-Origin-Opener-Policy—Recente
Cross-Origin-Resource-Policy—Recente
X-XSS-Protection—Descontinuado
Feature-Policy—Descontinuado
Expect-CT—Descontinuado
Public-Key-Pins—Descontinuado

Violações de segurança · 0 encontrada(s)

Solicitações ou recursos que ofendem as políticas de segurança

  • Nenhum encontrado

Certificados · 11 encontrado(s)

Os certificados SSL/TLS permitem que os sites criptografem transações entre o cliente e o servidor e forneçam verificação de identidade do servidor

AssuntoData de emissãoData de validade
open.spotify.com9 de out. de 2024, 03:02:528 de nov. de 2024, 03:02:51
*.scdn.co9 de jul. de 2024, 00:00:009 de ago. de 2025, 23:59:59
*.spotifycdn.com9 de abr. de 2024, 11:45:1211 de mai. de 2025, 11:45:11
www.google.com30 de set. de 2024, 15:11:4723 de dez. de 2024, 15:11:46
*.google-analytics.com30 de set. de 2024, 14:36:1523 de dez. de 2024, 14:36:14
*.gstatic.com30 de set. de 2024, 15:09:5923 de dez. de 2024, 15:09:58
ingest.sentry.io3 de out. de 2024, 00:00:0029 de jul. de 2025, 23:59:59
*.spotify.com5 de fev. de 2024, 00:00:004 de fev. de 2025, 23:59:59
cookielaw.org11 de out. de 2024, 18:54:259 de jan. de 2025, 19:54:23
*.wg.spotify.com29 de jan. de 2024, 00:00:0028 de jan. de 2025, 23:59:59