spotify.com 200
🔒 SSL Valid
HTTP Status A three-digit code showing if the site loaded successfully (200), redirects (301/302), or has errors (4xx/5xx).Read more →
200
SSL Expires When the SSL certificate expires. An expired certificate causes browser security warnings.Read more →
in 156d
Domain Expires When the domain registration expires. If not renewed, the domain becomes available to others.Read more →
in 1342d
Hosting The company and location where this website's server is physically located.Read more →
Google Cloud
Security Score based on key HTTP security headers: HSTS, Content-Security-Policy, and X-Frame-Options.Read more →
2/3
IP Address The numerical address of the server hosting this website. Reveals location, provider, and network.Read more →
35.186.224.24
Tech Stack Technologies detected on this website: CMS, frameworks, libraries, CDN, and analytics tools. 1
▼
⚡ Cache
Varnish
Screenshot 2026-08-20
▼
Captured: 2026-08-20 03:49:54 · 21.5 KB
DNS Records DNS translates domain names to IP addresses. Records control where the site, email, and services are directed.Read more →
▼
| A (IPv4) | 35.186.224.24 |
| AAAA (IPv6) | 2600:1901:1:7c5:: |
| NS | ns-cloud-a4.googledomains.comns-cloud-a2.googledomains.comdns1.p07.nsone.netns-cloud-a3.googledomains.comns-cloud-a1.googledomains.com |
| MX | 10 aspmx5.googlemail.com10 aspmx3.googlemail.com10 aspmx2.googlemail.com10 aspmx4.googlemail.com5 alt1.aspmx.l.google.com5 alt2.aspmx.l.google.com1 aspmx.l.google.com |
| TXT | status-page-domain-verification=wq4jns7ydgbb google-site-verification=buTP-BbGUoP8lPntqskvSbeS68M4PDoIFkiUtQEA5n8 apple-domain-verification=Dxae2sKJD2O5TKGK anthropic-domain-verification-mqtmtz=BSac9xfxvigNt4Ralt2KPkt1V zapier-domain-verification-challenge=db8a0b98-bb6a-4f84-a699-344dc23fef3b google-site-verification=uD4f4k01lFWX3qwVbqnVaJg8atpKgAgc-_RYcyT3ofU parallels-domain-verification=7bb3a358f26f4e23a5077648266570c873182a57d6d44e47a55ef6cf72cdb470 tiktok-developers-site-verification=ttGXJxgq1HQKquomgiljzFq53uoLHcUC wiz-domain-verification=370862886b04dfa626d54d2c4cc955174c6f3164a104a85d725ae5ece72ea3ef atlassian-sending-domain-verification=d90f2e0c-fa57-43b6-910f-065cc4d6a0e3 liveramp-site-verification=IAXPTLlWofr4aaKtwVqirrHvOqUMiXnaMW8WMmuz1v0 yahoo-verification-key=bdudmGyddArwRiVafgItrfYq8nrhd5vzNZ7Ik/G0ILM= atlassian-domain-verification=1My5WsxLluUY8uIjgbLs4MY3ySFp32k9aYNW2IR4ihM64k58CxpFnB5R9SEiJAnR google-site-verification=0wmxUE7T2OWPhtwjco6oCyqqbYgtosjQdywAr4G4kU0 cloudflare_dashboard_sso=19cd522a4fc20281209f03663d34ee76 windsurf-verification=LRBAV_kH3G5aleY1GIc1jMUg_8iBpigIm2qYF00bRps= have-i-been-pwned-verification=33b7ae688099ee8cca63259b769a0ea8 MS=ms38184034 notion-domain-verification=AqUDuql68X5rQ1qLwho6huUjf4QteXZlyvTIKS1txnq facebook-domain-verification=qyrvuca7h4s7wevhzbprtt3tdyyhf1 _anz60jg9dhixqlmcv20ntnooz9m0k8x onetrust-domain-verification=508849d40e2b4b8fba2b7eaf84f1bddc cursor-domain-verification-985xgr=7ROYkkLIfunrK2GtW0spMGDNw vmware-cloud-verification-dab4c35d-1819-4431-add3-d3c382ee32bc docker-verification=82f3553a-fb50-4d4e-9607-8a8079ee354f openai-domain-verification=dv-VNYvLsJIttFvRz7ymxFgjrPC tiktok-developers-site-verification=pZNawVY3o5Ma80MRCC6Fref1NiLzuEVU v=spf1 ip4:80.76.146.172 ip4:80.76.146.173 include:_spf.google.com include:servers.mcsv.net include:_spf.salesforce.com include:_spf.netigate.se include:21894833.spf06.hubspotemail.net ~all google-site-verification=ehIHBRyAOKdOfUyw_ONXT0TMuUsdk1gDGSYfk8YhRgw tiktok-developers-site-verification=98xFqMKsOJ51nNJpUCGPGbo7m17gtf7f loom-site-verification=3ee9ca8c2df34d08abbb7be5185bc768 reachdesk-verification=v0DuUrKxORfyqxIOMkJm57GlQtvaAv0watqt7x7ylMN21LAHqR6dEhUpSxOp7DCh jamf-site-verification=1kKxrm0glhWvrA0YiABH_w google-site-verification=ESiNWockZgSgTPSsrsAdMX9afsj2-_8504nQ0qIHkDA facebook-domain-verification=wtgn9pdvjdhs21j9gz6knsnpkafvs5 |
WHOIS / RDAP Public registration data: who registered the domain, when, and when it expires.Read more →
▼
| Registrar | Abion AB |
| Registered | 2006-04-23 |
| Expires | 2030-04-23 (in 1342 days) |
| Last Updated | 2024-07-08 |
| Status | client delete prohibitedclient transfer prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited |
SSL Certificate Encrypts the connection between browsers and this website. Valid SSL = HTTPS works.Read more → Valid
▼
| Subject (CN) | *.spotify.com |
| Issuer | DigiCert Inc |
| Valid From | 2026-07-09 |
| Valid Until | 2027-01-23 (156 days left) |
| SANs (2) | *.spotify.comspotify.com |
HTTP Headers Metadata sent by the server: reveals software, caching rules, and security configuration.Read more →
▼
| Status | 200 |
| Server | envoy |
| Content-Type | text/html; charset=utf-8 |
| Final URL | https://open.spotify.com/ |
| strict-transport-security | max-age=31536000 |
| content-security-policy | script-src 'self' 'unsafe-eval' blob: open.spotifycdn.com open-review.spotifycdn.com quicksilver.scdn.co www.google-analytics.com www.googletagmanager.com static.ads-twitter.com analytics.twitter.com s.pinimg.com sc-static.net https://www.google.com/recaptcha/ cdn.ravenjs.com connect.facebook.net www.gstatic.com sb.scorecardresearch.com pixel-static.spotify.com cdn.cookielaw.org geolocation.onetrust.com www.fastly-insights.com static.hotjar.com script.hotjar.com https://www.googleadservices.com/pagead/conversion_async.js https://www.googleadservices.com/pagead/conversion/ https://analytics.tiktok.com/i18n/pixel/sdk.js https://analytics.tiktok.com/i18n/pixel/identify.js https://analytics.tiktok.com/i18n/pixel/config.js https://www.redditstatic.com/ads/pixel.js https://t.contentsquare.net/uxa/22f14577e19f3.js https://get.microsoft.com/badge/ms-store-badge.bundled.js https://cdn.us.heap-api.com https://heapanalytics.com 'sha256-WfsTi7oVogdF9vq5d14s2birjvCglqWF842fyHhzoNw=' 'sha256-KRzjHxCdT8icNaDOqPBdY0AlKiIh5F8r4bnbe1PQwss=' 'sha256-Z5wh7XXSBR1+mTxLSPFhywCZJt77+uP1GikAgPIsu2s=' 'sha256-o2wzIImHJ4+WWE5DCTR+myWU0UNml0+wwpDXRo++vII='; frame-ancestors 'self' https://adgen-dev.spotify.com/account/*/ad/*/details https://adgen-dev.spotify.com/preview/* https://local.spotify.net/account/*/ad/*/details https://local.spotify.net/preview/* https://app.smartly.io/*; |
| x-content-type-options | nosniff |
| x-cache | MISS |
| via | HTTP/1.1 fringe, HTTP/2 edgeproxy, 1.1 google, 1.1 varnish |
Security headers HTTP headers that protect visitors from attacks. HSTS forces HTTPS, CSP controls resource loading, X-Frame-Options prevents clickjacking.Read more →
Hosting Physical infrastructure: where the server is, who operates it, and what network it belongs to.Read more →
▼
| IP Address | 35.186.224.24 |
| Provider | Google Cloud |
| Organization | Google LLC |
| ASN | AS396982 |
| Country | US |
| City | Kansas City |
Security Score
C (4/7)
▼
Sitemap & Robots
▼
| robots.txt | Found Restricted |
| Sitemap | Found 10 sitemaps (index) pages |
| Disallowed paths |
/*/about-us/contact/contact-spotify-password/
/*/about-us/contact/contact-spotify-account/
/*/get-spotify/*
/*/xhr/*
/*/external/*
/*/legal/*?ets=
/*/legal/advertiser-terms-and-conditions/
/*/legal/gdpr-article-15-information/
/*/legal/spotify-controller-data-processing-terms/
/*/legal/podcast-api-terms/
... +5 more |
Social & Meta Tags
Missing
▼
| Title | Spotify – Web Player |
| OG Site Name | Spotify |
| Canonical URL | https://open.spotify.com/ |
| Language | en |
Mail Security Email authentication records (SPF & DMARC) that prevent spoofing and phishing from this domain.Read more →
▼
| SPF | ✓ Present v=spf1 ip4:80.76.146.172 ip4:80.76.146.173 include:_spf.google.com include:servers.mcsv.net include:_spf.salesforce.com include:_spf.netigate.se include:21894833.spf06.hubspotemail.net ~all |
| DMARC | ✓ Present v=DMARC1; p=reject; sp=reject; pct=100; fo=1; rf=afrf; rua=mailto:[email protected]; |
| MX Records | 10 → aspmx5.googlemail.com 10 → aspmx3.googlemail.com 10 → aspmx2.googlemail.com 10 → aspmx4.googlemail.com 5 → alt1.aspmx.l.google.com 5 → alt2.aspmx.l.google.com 1 → aspmx.l.google.com |