spotify.com
24 hours
100.00%
7 days
100.00%
30 days
100.00%
IPv4 / IPv6
1
1
SSL Certificate
241d
Security Headers
3/6
Badges:
Response Time & Availability (24h)
SSL / TLS Certificate
241
days left
Valid
Dec 8, 2025
Dec 8, 2026
Issued → Expires
| Subject | countryName=SE, localityName=Stockholm, organizationName=Spotify AB, commonName=*.spotify.com |
|---|---|
| Issuer | countryName=US, organizationName=DigiCert Inc, commonName=DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| Valid From | 2025-12-08 00:00 |
| Expires | 2026-12-08 23:59 |
| Serial Number | 04A7B6CCEC54B36CF146C0E8D8CC3839 |
| SHA-256 Fingerprint | d2:59:c0:71:b2:2e:e8:45:23:e7:b2:56:e4:b0:13:af:f3:c7:b4:f2:5e:ed:b1:ae:b5:a8:2b:93:58:8d:63:c6 |
| Subject Alt Names | *.spotify.com spotify.com |
| Last Checked | 2026-04-11 22:27:58 |
Latest HTTP Response Details
| Final URL | https://open.spotify.com/ |
|---|---|
| Status Code | 200 |
| Response Time | 262 ms |
| Content Size | 6 KB (6.0 KB) |
| Content Type | text/html; charset=utf-8 |
| Server | envoy |
| TLS Version | TLSv1.3 |
|---|---|
| TLS Cipher | TLS_AES_256_GCM_SHA384 |
| Redirects | 2 |
|
|
| Checked | 2026-04-11 22:27:58 |
Security Headers
3/6
| Header | Status | Value |
|---|---|---|
Strict-Transport-Security |
Present | max-age=31536000 |
Content-Security-Policy |
Present | script-src 'self' 'unsafe-eval' blob: open.spotifycdn.com open-review.spotifycdn.com quicksilver.scdn.co www.google-analytics.com www.googletagmanager.com static.ads-twitter.com analytics.twitter.com s.pinimg.com sc-static.net https://www.google.com/recaptcha/ cdn.ravenjs.com connect.facebook.net www.gstatic.com sb.scorecardresearch.com pixel-static.spotify.com cdn.cookielaw.org geolocation.onetrust.com www.fastly-insights.com static.hotjar.com script.hotjar.com https://www.googleadservices.com/pagead/conversion_async.js https://www.googleadservices.com/pagead/conversion/ https://analytics.tiktok.com/i18n/pixel/sdk.js https://analytics.tiktok.com/i18n/pixel/identify.js https://analytics.tiktok.com/i18n/pixel/config.js https://www.redditstatic.com/ads/pixel.js https://t.contentsquare.net/uxa/22f14577e19f3.js https://get.microsoft.com/badge/ms-store-badge.bundled.js https://cdn.us.heap-api.com https://heapanalytics.com 'sha256-WfsTi7oVogdF9vq5d14s2birjvCglqWF842fyHhzoNw=' 'sha256-KRzjHxCdT8icNaDOqPBdY0AlKiIh5F8r4bnbe1PQwss=' 'sha256-Z5wh7XXSBR1+mTxLSPFhywCZJt77+uP1GikAgPIsu2s=' 'sha256-o2wzIImHJ4+WWE5DCTR+myWU0UNml0+wwpDXRo++vII='; frame-ancestors 'self' https://adgen-dev.spotify.com/account/*/ad/*/details https://adgen-dev.spotify.com/preview/* https://local.spotify.net/account/*/ad/*/details https://local.spotify.net/preview/* https://app.smartly.io/*; |
X-Frame-Options |
Missing | — |
X-Content-Type-Options |
Present | nosniff |
Referrer-Policy |
Missing | — |
Permissions-Policy |
Missing | — |
DNS Intelligence (24h)
Avg Resolution
4.6 ms
Min / Max
3.3
/
7.9 ms
Record Types
7
Lookups (24h)
27
DNS Records
A
35.186.224.24
222s
3.3ms
AAAA
2600:1901:1:7c5::
177s
4.1ms
MX
| 1 | aspmx.l.google.com |
| 5 | alt2.aspmx.l.google.com |
| 5 | alt1.aspmx.l.google.com |
| 10 | aspmx3.googlemail.com |
| 10 | aspmx4.googlemail.com |
| 10 | aspmx5.googlemail.com |
| 10 | aspmx2.googlemail.com |
172800s
20.5ms
NS
ns-cloud-a3.googledomains.com
ns-cloud-a1.googledomains.com
ns-cloud-a2.googledomains.com
dns1.p07.nsone.net
ns-cloud-a4.googledomains.com
202s
4.6ms
TXT
SPF
(1)
v=spf1 ip4:80.76.146.172 ip4:80.76.146.173 include:_spf.google.com in…
v=spf1 ip4:80.76.146.172 ip4:80.76.146.173 include:_spf.google.com include:servers.mcsv.net include:_spf.salesforce.com include:_spf.netigate.se include:21894833.spf06.hubspotemail.net ~all
Domain Verification
(31)
vmware-cloud-verification-dab4c35d-1819-4431-add3-d3c382ee32bc
onetrust-domain-verification=508849d40e2b4b8fba2b7eaf84f1bddc
openai-domain-verification=dv-VNYvLsJIttFvRz7ymxFgjrPC
facebook-domain-verification=wtgn9pdvjdhs21j9gz6knsnpkafvs5
atlassian-sending-domain-verification=d90f2e0c-fa57-43b6-910f-065cc4d…
atlassian-sending-domain-verification=d90f2e0c-fa57-43b6-910f-065cc4d6a0e3
cursor-domain-verification-985xgr=7ROYkkLIfunrK2GtW0spMGDNw
loom-site-verification=3ee9ca8c2df34d08abbb7be5185bc768
yahoo-verification-key=bdudmGyddArwRiVafgItrfYq8nrhd5vzNZ7Ik/G0ILM=
notion-domain-verification=AqUDuql68X5rQ1qLwho6huUjf4QteXZlyvTIKS1txnq
atlassian-domain-verification=1My5WsxLluUY8uIjgbLs4MY3ySFp32k9aYNW2IR…
atlassian-domain-verification=1My5WsxLluUY8uIjgbLs4MY3ySFp32k9aYNW2IR4ihM64k58CxpFnB5R9SEiJAnR
anthropic-domain-verification-mqtmtz=BSac9xfxvigNt4Ralt2KPkt1V
jamf-site-verification=1kKxrm0glhWvrA0YiABH_w
facebook-domain-verification=qyrvuca7h4s7wevhzbprtt3tdyyhf1
google-site-verification=buTP-BbGUoP8lPntqskvSbeS68M4PDoIFkiUtQEA5n8
wiz-domain-verification=370862886b04dfa626d54d2c4cc955174c6f3164a104a…
wiz-domain-verification=370862886b04dfa626d54d2c4cc955174c6f3164a104a85d725ae5ece72ea3ef
google-site-verification=ESiNWockZgSgTPSsrsAdMX9afsj2-_8504nQ0qIHkDA
tiktok-developers-site-verification=ttGXJxgq1HQKquomgiljzFq53uoLHcUC
google-site-verification=uD4f4k01lFWX3qwVbqnVaJg8atpKgAgc-_RYcyT3ofU
tiktok-developers-site-verification=98xFqMKsOJ51nNJpUCGPGbo7m17gtf7f
tiktok-developers-site-verification=pZNawVY3o5Ma80MRCC6Fref1NiLzuEVU
docker-verification=82f3553a-fb50-4d4e-9607-8a8079ee354f
windsurf-verification=LRBAV_kH3G5aleY1GIc1jMUg_8iBpigIm2qYF00bRps=
reachdesk-verification=v0DuUrKxORfyqxIOMkJm57GlQtvaAv0watqt7x7ylMN21L…
reachdesk-verification=v0DuUrKxORfyqxIOMkJm57GlQtvaAv0watqt7x7ylMN21LAHqR6dEhUpSxOp7DCh
status-page-domain-verification=wq4jns7ydgbb
have-i-been-pwned-verification=33b7ae688099ee8cca63259b769a0ea8
parallels-domain-verification=7bb3a358f26f4e23a5077648266570c873182a5…
parallels-domain-verification=7bb3a358f26f4e23a5077648266570c873182a57d6d44e47a55ef6cf72cdb470
google-site-verification=ehIHBRyAOKdOfUyw_ONXT0TMuUsdk1gDGSYfk8YhRgw
liveramp-site-verification=IAXPTLlWofr4aaKtwVqirrHvOqUMiXnaMW8WMmuz1v0
apple-domain-verification=Dxae2sKJD2O5TKGK
google-site-verification=0wmxUE7T2OWPhtwjco6oCyqqbYgtosjQdywAr4G4kU0
zapier-domain-verification-challenge=db8a0b98-bb6a-4f84-a699-344dc23f…
zapier-domain-verification-challenge=db8a0b98-bb6a-4f84-a699-344dc23fef3b
TXT Record
(3)
cloudflare_dashboard_sso=19cd522a4fc20281209f03663d34ee76
MS=ms38184034
_anz60jg9dhixqlmcv20ntnooz9m0k8x
299s
120.3ms
SOA
Primary NS
ns-cloud-a1.googledomains.com
Admin
cloud-dns-hostmaster@google.com
Serial: 1
Refresh: 6h
Retry: 1h
Expire: 3d
Min TTL: 5m
21600s
26.7ms
PTR
24.224.186.35.bc.googleusercontent.com
30s
4.5ms
Email Security Posture
MX Records
SPF
Details
v=spf1 ip4:80.76.146.172 ip4:80.76.146.173 include:_spf.google.com include:servers.mcsv.net include:_spf.salesforce.com include:_spf.netigate.se include:21894833.spf06.hubspotemail.net ~all
DMARC
Details
v=DMARC1; p=reject; sp=reject; pct=100; fo=1; rf=afrf; rua=mailto:6jxge2ly@ag.eu.dmarcian.com;
BIMI
MTA-STS
Strong
Overall
DNS Propagation Consistent
| Resolver | IPs Returned | Response Time | Status |
|---|---|---|---|
| Quad9 |
35.186.224.24
|
1.47ms | |
35.186.224.24
|
7.94ms | ||
| AdGuard |
35.186.224.24
|
12.11ms | |
| OpenDNS |
35.186.224.24
|
1.97ms | |
| Cloudflare |
35.186.224.24
|
3.54ms |
WHOIS / Domain Registration
Registrar
Abion AB
Registrant Organization
Spotify AB
Created
2006-04-23
Updated
2024-07-08
Expires
2030-04-23
Name Servers (WHOIS)
dns1.p07.nsone.net
ns-cloud-a1.googledomains.com
ns-cloud-a2.googledomains.com
ns-cloud-a3.googledomains.com
ns-cloud-a4.googledomains.com
Domain Status
clientDeleteProhibited
clientTransferProhibited
serverDeleteProhibited
serverTransferProhibited
serverUpdateProhibited
DNSSEC
Unsigned
Country
SE
WHOIS Last Checked
2026-04-11 22:27
Resolution Time (A/AAAA recent)
20:06
22:27
| Time | Type | Values | TTL | Resolution | Nameserver |
|---|---|---|---|---|---|
| 22:27:57 | SRV |
0 20 5269 xmpp-server2.l.google.com
0 20 5269 xmpp-server4.l.google.com
0 20 5269 xmpp-server3.l.google.com
0 20 5269 xmpp-server1.l.google.com
0 5 5269 xmpp-server.l.google.com
|
300s | 19.8 ms | — |
| 22:27:57 | SRV |
0 5 5222 talk.l.google.com
0 20 5222 talk1.l.google.com
0 20 5222 talk4.l.google.com
0 20 5222 talk3.l.google.com
0 20 5222 talk2.l.google.com
|
300s | 38.2 ms | — |
| 22:27:57 | PTR |
35.186.224.24
|
30s | 4.5 ms | — |
| 22:27:57 | SOA |
ns-cloud-a1.googledomains.com cloud-dns-hostmaster.google.com 1 21600 3600 2592…
|
21600s | 26.7 ms | 10.89.0.1 |
| 22:27:57 | TXT |
35 records
|
299s | 120.3 ms | 10.89.0.1 |
| 22:27:57 | NS |
ns-cloud-a3.googledomains.com
ns-cloud-a1.googledomains.com
ns-cloud-a2.googledomains.com
dns1.p07.nsone.net
ns-cloud-a4.googledomains.com
|
202s | 4.6 ms | 10.89.0.1 |
| 22:27:57 | MX |
5 alt2.aspmx.l.google.com
5 alt1.aspmx.l.google.com
10 aspmx3.googlemail.com
10 aspmx4.googlemail.com
10 aspmx5.googlemail.com
1 aspmx.l.google.com
10 aspmx2.googlemail.com
|
172800s | 20.5 ms | 10.89.0.1 |
| 22:27:57 | AAAA |
2600:1901:1:7c5::
|
177s | 4.1 ms | 10.89.0.1 |
| 22:27:57 | A |
35.186.224.24
|
222s | 3.3 ms | 10.89.0.1 |
| 21:09:27 | SRV |
0 5 5269 xmpp-server.l.google.com
0 20 5269 xmpp-server1.l.google.com
0 20 5269 xmpp-server4.l.google.com
0 20 5269 xmpp-server2.l.google.com
0 20 5269 xmpp-server3.l.google.com
|
300s | 39.1 ms | — |
| 21:09:27 | SRV |
0 20 5222 talk2.l.google.com
0 20 5222 talk3.l.google.com
0 20 5222 talk1.l.google.com
0 5 5222 talk.l.google.com
0 20 5222 talk4.l.google.com
|
300s | 36.1 ms | — |
| 21:09:27 | PTR |
35.186.224.24
|
49s | 23.9 ms | — |
| 21:09:27 | SOA |
ns-cloud-a1.googledomains.com cloud-dns-hostmaster.google.com 1 21600 3600 2592…
|
3352s | 1.4 ms | 10.89.0.1 |
| 21:09:27 | TXT |
35 records
|
299s | 56.0 ms | 10.89.0.1 |
| 21:09:27 | NS |
ns-cloud-a4.googledomains.com
ns-cloud-a1.googledomains.com
ns-cloud-a2.googledomains.com
dns1.p07.nsone.net
ns-cloud-a3.googledomains.com
|
1130s | 5.4 ms | 10.89.0.1 |
| 21:09:27 | MX |
10 aspmx4.googlemail.com
10 aspmx3.googlemail.com
1 aspmx.l.google.com
5 alt1.aspmx.l.google.com
10 aspmx5.googlemail.com
10 aspmx2.googlemail.com
5 alt2.aspmx.l.google.com
|
3352s | 1.9 ms | 10.89.0.1 |
| 21:09:27 | AAAA |
2600:1901:1:7c5::
|
97s | 4.5 ms | 10.89.0.1 |
| 21:09:27 | A |
35.186.224.24
|
26s | 4.3 ms | 10.89.0.1 |
| 20:06:04 | SRV |
0 20 5269 xmpp-server1.l.google.com
0 5 5269 xmpp-server.l.google.com
0 20 5269 xmpp-server3.l.google.com
0 20 5269 xmpp-server4.l.google.com
0 20 5269 xmpp-server2.l.google.com
|
300s | 21.6 ms | — |
| 20:06:04 | SRV |
0 20 5222 talk3.l.google.com
0 20 5222 talk1.l.google.com
0 20 5222 talk4.l.google.com
0 5 5222 talk.l.google.com
0 20 5222 talk2.l.google.com
|
300s | 18.4 ms | — |
| 20:06:04 | PTR |
35.186.224.24
|
35s | 4.2 ms | — |
| 20:06:04 | SOA |
ns-cloud-a1.googledomains.com cloud-dns-hostmaster.google.com 1 21600 3600 2592…
|
21600s | 18.5 ms | 10.89.0.1 |
| 20:06:04 | TXT |
35 records
|
299s | 99.2 ms | 10.89.0.1 |
| 20:06:04 | NS |
dns1.p07.nsone.net
ns-cloud-a3.googledomains.com
ns-cloud-a2.googledomains.com
ns-cloud-a4.googledomains.com
ns-cloud-a1.googledomains.com
|
1043s | 4.6 ms | 10.89.0.1 |
| 20:06:04 | MX |
5 alt2.aspmx.l.google.com
10 aspmx4.googlemail.com
10 aspmx5.googlemail.com
5 alt1.aspmx.l.google.com
1 aspmx.l.google.com
10 aspmx3.googlemail.com
10 aspmx2.googlemail.com
|
172800s | 18.0 ms | 10.89.0.1 |
| 20:06:04 | AAAA |
2600:1901:1:7c5::
|
229s | 3.4 ms | 10.89.0.1 |
| 20:06:04 | A |
35.186.224.24
|
271s | 7.9 ms | 10.89.0.1 |
Open Ports
4
Open Ports
4
IPs Scanned
4
| Port | Protocol | Service | IP Address | Status | Latency | Banner |
|---|---|---|---|---|---|---|
80 |
TCP | http | 2600:1901:1:7c5:: |
Open | 40.2 ms | — |
80 |
TCP | http | 35.186.224.24 |
Open | 13.6 ms | — |
443 |
TCP | https | 35.186.224.24 |
Open | 13.4 ms | — |
443 |
TCP | https | 2600:1901:1:7c5:: |
Open | 40.2 ms | — |
Technology Stack
19 detected
HTTP/2
HTTP/3 (QUIC)
19
Technologies
CDN
1
Fastly
X-Served-By header
CRM
1
Salesforce
TXT verification: v=spf1 ip4:80.76.146.172 ip4:80.76.146.173 include:_spf.googl…
Cache
1
Varnish
v1.1
Via header
DNS
1
NS1
NS record: dns1.p07.nsone.net
Email
2
Google Workspace
MX record: 5 alt2.aspmx.l.google.com
SPF Record
TXT SPF: v=spf1 ip4:80.76.146.172 ip4:80.76.146.173 include:_spf.google.com inc…
Marketing
1
HubSpot
TXT verification: v=spf1 ip4:80.76.146.172 ip4:80.76.146.173 include:_spf.googl…
Security
4
CSP
v22
Content-Security-Policy present
Google reCAPTCHA
reCAPTCHA script
HSTS
HSTS header present
X-Content-Type-Options
nosniff header
Server
1
Envoy
Server header
Social
1
Open Graph
Open Graph meta tags
Verification
6
Apple
TXT verification: apple-domain-verification=Dxae2sKJD2O5TKGK
Atlassian
TXT verification: atlassian-domain-verification=1My5WsxLluUY8uIjgbLs4MY3ySFp32k…
Google Search Console
TXT verification: google-site-verification=buTP-BbGUoP8lPntqskvSbeS68M4PDoIFkiU…
Have I Been Pwned
TXT verification: have-i-been-pwned-verification=33b7ae688099ee8cca63259b769a0e…
Meta/Facebook
TXT verification: facebook-domain-verification=wtgn9pdvjdhs21j9gz6knsnpkafvs5
Microsoft 365
TXT verification: MS=ms38184034
Crawl Configuration
robots.txt
Sitemap
· 10 URLs
robots.txt 15 disallow · 0 allow · 1 agent
| User-Agent | Directive | Path / Value |
|---|---|---|
*
|
Disallow |
/*/about-us/contact/contact-spotify-password/
|
*
|
Disallow |
/*/about-us/contact/contact-spotify-account/
|
*
|
Disallow |
/*/get-spotify/*
|
*
|
Disallow |
/*/xhr/*
|
*
|
Disallow |
/*/external/*
|
*
|
Disallow |
/*/legal/*?ets=
|
*
|
Disallow |
/*/legal/advertiser-terms-and-conditions/
|
*
|
Disallow |
/*/legal/gdpr-article-15-information/
|
*
|
Disallow |
/*/legal/spotify-controller-data-processing-terms/
|
*
|
Disallow |
/*/legal/podcast-api-terms/
|
*
|
Disallow |
/*/account/cls/*
|
*
|
Disallow |
/*/starbuckspartners
|
*
|
Disallow |
/starbuckspartners
|
*
|
Disallow |
/ppt/*?
|
*
|
Disallow |
/partner/*?
|
*
|
Sitemap | https://www.spotify.com/sitemap.xml |
User-agent: * Disallow: /*/about-us/contact/contact-spotify-password/ Disallow: /*/about-us/contact/contact-spotify-account/ Disallow: /*/get-spotify/* Disallow: /*/xhr/* Disallow: /*/external/* Disallow: /*/legal/*?ets= Disallow: /*/legal/advertiser-terms-and-conditions/ Disallow: /*/legal/gdpr-article-15-information/ Disallow: /*/legal/spotify-controller-data-processing-terms/ Disallow: /*/legal/podcast-api-terms/ Disallow: /*/account/cls/* Disallow: /*/starbuckspartners Disallow: /starbuckspartners Disallow: /ppt/*? Disallow: /partner/*? Sitemap: https://www.spotify.com/sitemap.xml
Active IP Addresses
| IP Address | Version | Reverse DNS | CIDR | Country | City | ASN | First Seen | Last DNS | Hits | Misses | Uptime % | Avg Latency |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
2600:1901:1:7c5:: |
IPv6 | — |
2600:1901:1::/48
|
US | — | AS396982 Google LLC | 2026-04-11 20:06 | 2026-04-11 22:27 | 3 | 0 | 100.0% | 40.5 ms |
35.186.224.24 |
IPv4 |
24.224.186.35.bc.googleusercontent.com
|
35.186.224.0/24
|
US | — | AS396982 Google LLC | 2026-04-11 20:06 | 2026-04-11 22:27 | 3 | 0 | 100.0% | 12.6 ms |
Discovered Sub-domains
29
Wordlist Brute-force
29
1.
accounts.spotify.com
2.
analytics.spotify.com
3.
api.spotify.com
4.
beta.spotify.com
5.
blog.spotify.com
6.
c.spotify.com
7.
cms.spotify.com
8.
connect.spotify.com
9.
dev.spotify.com
10.
docs.spotify.com
11.
download.spotify.com
12.
help.spotify.com
13.
images.spotify.com
14.
learn.spotify.com
15.
live.spotify.com
16.
log.spotify.com
17.
m.spotify.com
18.
mail.spotify.com
19.
news.spotify.com
20.
newsroom.spotify.com
21.
payments.spotify.com
22.
pixel.spotify.com
23.
press.spotify.com
24.
promo.spotify.com
25.
share.spotify.com
26.
shop.spotify.com
27.
support.spotify.com
28.
ws.spotify.com
29.
www.spotify.com
Recent HTTP Checks (24 h)
Total Checks
3
Success Rate
100%
Avg Response
287 ms
Min / Max
262
/
336 ms
Recent Checks
20:06
22:27
| Time | Status | Code | Response | Agent | Error |
|---|---|---|---|---|---|
| 22:27:58 | UP | 200 | 262 ms | prod-local | — |
| 21:09:27 | UP | 200 | 336 ms | prod-local | — |
| 20:06:05 | UP | 200 | 264 ms | prod-local | — |
Incident History
No incidents recorded — all clear!