download.
download.scdn.co serves a direct SpotifySetup.exe download over a subdomain of a known CDN domain.
At a glance
Antivirus · registration · identity- Operator identity: Missing. No independently verifiable operator identity
- No engine classified the URL as malicious or suspicious in this scan; 58 returned harmless, 34 returned undetected, and 0 returned no usable result.
- Google Safe Browsing returned no listed threat categories for this address at scan time.
- The site presented a valid TLSv1.3 certificate at scan time.
- A page capture was analyzed and did not record a visual clone indicator.
Intelligence
The site presents itself as a direct executable download host for SpotifySetup.exe. The visitor journey is a single-hop request that immediately serves the binary without additional verification steps or visible integrity checks.
Evidence Map
Multiple reputation sources returned usable results
No independently verifiable operator identity
Only partial behavior evidence was available
No reliable registration history was saved
- 1Direct executable download from scdn.co subdomain
- 2No recorded verification of installer integrity or signing
- 1Valid TLSv1.3 certificate presented at scan time
- 2Hosting IP showed 0/100 abuse-confidence score
- 3No engine flagged the URL as malicious in this scan
Direct executable delivery
The observed target is https://download.scdn.co/SpotifySetup.exe. The redirect path contained zero hops, indicating the request reaches the executable without intermediate pages or redirects.
Domain context
The host uses a subdomain of scdn.co, a domain registered in 2010 and first observed in 2017. The subdomain structure allows direct distribution of an executable installer.
Verification gaps
No independent verification of binary integrity or signing is recorded. The visitor is expected to download and run the file without additional checks.
Visual capture status
The page capture was incomplete; the screenshot did not fully render, leaving visual analysis inconclusive. No clone indicators were recorded.
Website Preview
We could not capture a fully-rendered screenshot of this page; visual analysis is inconclusive.
- 1Screenshot incomplete — site may be slow to render
Web Research
urlquery.net records the domain registered 2010-08-20, first seen 2017-01-30, last seen 2024-05-02, with a rank of 236800.
download.scdn.co Rank 236800 Registered 2010-08-20 First Seen 2017-01-30 Last Seen 2024-05-02
Threat Detection
Antivirus results, browser warnings, isolated page observations, and the threat pattern identified in this report.
Antivirus engine results
Evidence behind this threat profile
- 1Direct executable download from scdn.co subdomain
- 2No recorded verification of installer integrity or signing
1 of 21 categories showed signals
This profile separates the site's primary threat from other patterns supported by the saved page evidence, public research, and security findings.
- URL directly serves SpotifySetup.exe
- Domain download.scdn.co is not an official Spotify distribution endpoint
- Executable downloads carry inherent risk without verified signing or provenance
Technical Details
Identity, domain, infrastructure, and connection facts saved with this scan.
July 20, 2026 at 9:39 PM UTCIdentity
6 facts- Operator
- Missing
- On-domain email
- Not observed
- Other email
- Not observed
- Phone
- Not observed
- Postal address
- Not observed
- Social profiles
- Not observed
Domain
8 facts- Domain age
- Unavailable
- Registered
- Unavailable
- Registrar
- Unavailable
- Expires
- Unavailable
- WHOIS updated
- Unavailable
- Registrant
- Unavailable
- Registration country
- Unavailable
- WHOIS privacy
- Unavailable
Infrastructure
14 facts- HTTPS
- Valid certificate
- TLS protocol
- TLSv1.3
- Certificate issuer
- GlobalSign nv-sa · GlobalSign Atlas R3 DV TLS CA 2025 Q4
- Certificate subject
- *.scdn.co
- Certificate valid from
- Dec 14, 2025
- Certificate valid to
- Jan 15, 2027
- Network address
- 199.232.214.248
- ASN
- Unavailable
- Hosting organization
- Fastly, Inc.
- Country
- US
- Server
- Unavailable
- Site platform
- Unavailable
- IP reputation
- 0% confidence · 0 reports
- Tor exit node
- No
Connections
13 facts- Scan scope
- Specific page
- Destination host
- download.scdn.co
- Redirects
- 0
- Cross-domain redirect
- No
- Redirect status codes
- 200
- Lookalike characters
- Not observed
- Internationalized domain
- No
- Page response
- 200
- Observation coverage
- Unavailable
- Extracted links
- Unavailable
- Unique IPs contacted
- Unavailable
- Countries contacted
- Unavailable
- Referenced domains
- 0
What to do
Do not download the executable; obtain Spotify installer only from official sources.
If you downloaded or opened a file, disconnect the device if it behaves unexpectedly, run a full security scan, remove anything installed from the page, and change important passwords from a different trusted device.
Final Verdict
Why this verdict
The verdict is suspicious because the page delivers an executable installer directly from a scdn.co subdomain with no independent verification of binary integrity or signing.
Do not download the executable; obtain Spotify installer only from official sources.
Key evidence
- 1Direct executable download from scdn.co subdomain
- 2No recorded verification of installer integrity or signing
- 3Operator identity: Missing. No independently verifiable operator identity
Safety FAQ
Is download.scdn.co safe to use?+
The verdict is suspicious because the page delivers an executable installer directly from a scdn.co subdomain with no independent verification of binary integrity or signing.
What should I do about download.scdn.co?+
Do not download the executable; obtain Spotify installer only from official sources.
How old is download.scdn.co?+
A reliable public registration date was not available for download.scdn.co.
What if I already interacted with download.scdn.co?+
If you downloaded or opened a file, disconnect the device if it behaves unexpectedly, run a full security scan, remove anything installed from the page, and change important passwords from a different trusted device.
When was this report updated?+
This report reflects the scan completed July 20, 2026 at 9:39 PM UTC.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.