spotify.com

Live preview

This site's Content-Security-Policy restricts embedding to specific origins ("frame-ancestors 'self' https://adgen-dev.spotify.com/account/*/ad/*/details https://adgen-dev.spotify.com/preview/* https://local.spotify.net/account/*/ad/*/details https://local.spotify.net/preview/* https://app.smartly.io/*"), which does not include StatsMyWeb.

Since spotify.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

Not sent

Content-Encoding

Not sent

Security

Content-Security-Policy

script-src 'self' 'unsafe-eval' blob: open.spotifycdn.com open-review.spotifycdn.com quicksilver.scdn.co www.google-analytics.com www.googletagmanager.com static.ads-twitter.com analytics.twitter.com s.pinimg.com sc-static.net https://www.google.com/recaptcha/ cdn.ravenjs.com connect.facebook.net www.gstatic.com sb.scorecardresearch.com pixel-static.spotify.com cdn.cookielaw.org geolocation.onetrust.com www.fastly-insights.com static.hotjar.com script.hotjar.com https://www.googleadservices.com/pagead/conversion_async.js https://www.googleadservices.com/pagead/conversion/ https://analytics.tiktok.com/i18n/pixel/sdk.js https://analytics.tiktok.com/i18n/pixel/identify.js https://analytics.tiktok.com/i18n/pixel/config.js https://www.redditstatic.com/ads/pixel.js https://t.contentsquare.net/uxa/22f14577e19f3.js https://get.microsoft.com/badge/ms-store-badge.bundled.js https://cdn.us.heap-api.com https://heapanalytics.com 'sha256-WfsTi7oVogdF9vq5d14s2birjvCglqWF842fyHhzoNw=' 'sha256-KRzjHxCdT8icNaDOqPBdY0AlKiIh5F8r4bnbe1PQwss=' 'sha256-Z5wh7XXSBR1+mTxLSPFhywCZJt77+uP1GikAgPIsu2s=' 'sha256-o2wzIImHJ4+WWE5DCTR+myWU0UNml0+wwpDXRo++vII='; frame-ancestors 'self' https://adgen-dev.spotify.com/account/*/ad/*/details https://adgen-dev.spotify.com/preview/* https://local.spotify.net/account/*/ad/*/details https://local.spotify.net/preview/* https://app.smartly.io/*;

Strict-Transport-Security

max-age=31536000

X-Frame-Options

Not sent

X-Content-Type-Options

nosniff

Referrer-Policy

Not sent

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://spotify.com/HTTP 301

   → https://www.spotify.com/

2. 2.https://www.spotify.com/HTTP 301

   → https://open.spotify.com/

3. 3.https://open.spotify.com/HTTP 200

Meta tags

Title

Spotify - Web Player: Listen to Music, Podcasts, and Audiobooks Online

Description

Spotify is a digital music service that gives you access to millions of songs, podcasts, and audiobooks. Listen to your favorites online now.

Canonical

https://open.spotify.com

Robots

Not set

Generator

Not set

Open Graph title

Spotify - Web Player: Listen to Music, Podcasts, and Audiobooks Online

Open Graph description

Spotify is a digital music service that gives you access to millions of songs, podcasts, and audiobooks. Listen to your favorites online now.

Open Graph image

https://open.spotifycdn.com/cdn/images/download-page-image-mac.fec937cc.png

Open Graph type

website

Twitter card

summary

Twitter title

Spotify - Web Player: Listen to Music, Podcasts, and Audiobooks Online

Twitter image

https://open.spotifycdn.com/cdn/images/download-page-image-mac.fec937cc.png

robots.txt

Disallow rules (User-agent: *)

16

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

Related domains