Summary
A Concise Overview of the scan result of url https://open.spotify.com/episode/1ZumVUbpWqaJyVSE2mVfpA
- Document
- HTML
- 29
- StyleSheets
- 6
- Scripts
- 20
- Font
- 0
- Images
- 1
- Links
- 0
- JavaScript Variables
- 23
- Console log messages
- 0
- Network
- Requests
- 63
- Bytes Transferred
- 1.58MB
- Bytes Total
- 7.38MB
- DNS Record
- CNAME Record
- 2
- A Record
- 4
- AAAA Record
- 4
- Technology
- Caching
- 1
- Reverse proxies
- 1
- JavaScript frameworks
- 1
- Security
- 2
- A/B Testing
- 1
Document
Links
The outgoing links identified from the page.
| Link | Text |
|---|
JavaScript Variables
Global JavaScript variables are variables that are defined outside of any function or block scope in JavaScript.
eventundefinedonbeforetoggleobjectsharedStorageobjectdocumentPictureInPictureobjectonpageswapobjectonpagerevealobjectfenceobjectonscrollendobject___grecaptcha_cfgobjectgrecaptchaobject__recaptcha_apistring__google_recaptcha_clientbooleanwebpackChunkclient_webobjectMousetrapfunction__reactRouterVersionstringregeneratorRuntimeobjectspektrumLoggingInternalsFromAppobject__SENTRY__object__sentry_instrumentation_handlers__objectgoogle_tag_managerobjectgoogle_tag_dataobjectdataLayerobjectgtagfunction
Technology
The technologies identified are present on the scanned URL.
| Name | Description | Detected patterns |
|---|---|---|
| JavaScript frameworks | ||
React | React is an open-source JavaScript library for building user interfaces or UI components. | Type: html Regex: <[^>]{1,250}data-react |
| Security | ||
reCAPTCHA | reCAPTCHA is a free service from Google that helps protect websites from spam and abuse. | Type: scriptSrc Regex: \/recaptcha\/(?:api|enterprise)\.js |
| HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. | Type: headers Name: strict-transport-security Regex: (?:) | |
| Caching | ||
| Varnish is a reverse caching proxy. | Type: headers Name: via Regex: varnish(?: \(Varnish\/([\d.]{1,250})\))? | |
| Reverse proxies | ||
| Envoy is an open-source edge and service proxy, designed for cloud-native applications. | Type: headers Name: x-envoy-upstream-service-time Regex: ^envoy$ | |
| A/B Testing | ||
Google Optimize | Google Optimize allows you to test variants of web pages and see how they perform. | Type: scriptSrc Regex: googleoptimize\.com\/optimize\.js |
Performance
The speed and efficiency of the scanned URL loads and displays its content.
- dns
- 1 msGood
- tcp
- 33 msGood
- requestTime
- 4 msGood
- dom
- 3816 msPoor
DNS Record
A DNS record maps a domain name to an IP address or other resource information.
| Type | Name | Content | DNSSEC |
|---|---|---|---|
| CNAME | open.spotify.com | atc.spotify.map.fastly.net. | no |
| A | atc.spotify.map.fastly.net | 151.101.67.42 | no |
| A | atc.spotify.map.fastly.net | 151.101.195.42 | no |
| A | atc.spotify.map.fastly.net | 151.101.3.42 | no |
| A | atc.spotify.map.fastly.net | 151.101.131.42 | no |
| CNAME | open.spotify.com | atc.spotify.map.fastly.net. | no |
| AAAA | atc.spotify.map.fastly.net | 2a04:4e42:600::810 | no |
| AAAA | atc.spotify.map.fastly.net | 2a04:4e42:400::810 | no |
| AAAA | atc.spotify.map.fastly.net | 2a04:4e42::810 | no |
| AAAA | atc.spotify.map.fastly.net | 2a04:4e42:200::810 | no |
SSL Certificate
An SSL certificate is a digital certificate that verifies the authenticity and encrypts the communication between a website and its visitors.
| Subject | Issue date | Expiry date | Valid |
|---|---|---|---|
open.spotify.com Certainly Intermediate R1 | 11/12/2025 | 12/12/2025 | 29 days |
*.scdn.co DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 6/27/2025 | 7/28/2026 | 1 year 1 month 1 day |
*.spotifycdn.com GlobalSign Atlas R3 DV TLS CA 2025 Q1 | 2/10/2025 | 3/14/2026 | 1 year 1 month 1 day |
www.google.com WR2 | 10/27/2025 | 1/19/2026 | 2 months 23 days |
*.google-analytics.com WR2 | 10/27/2025 | 1/19/2026 | 2 months 23 days |
*.gstatic.com WR2 | 10/13/2025 | 1/5/2026 | 2 months 23 days |
ingest.sentry.io DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 7/24/2025 | 8/24/2026 | 1 year 1 month 1 day |
*.spotify.com DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 1/6/2025 | 1/6/2026 | 1 year |
HTTP Headers
HTTP Header
An HTTP header is a component of an HTTP request or response that contains additional information about the message being sent or received.
| Name | Value |
|---|---|
| accept-ranges | bytes |
| content-encoding | gzip |
| content-security-policy | script-src 'self' 'unsafe-eval' blob: open.spotifycdn.com open-exp.spotifycdn.com open-review.spotifycdn.com open-exp-review.spotifycdn.com quicksilver.scdn.co www.google-analytics.com www.googletagmanager.com static.ads-twitter.com analytics.twitter.com s.pinimg.com sc-static.net https://www.google.com/recaptcha/ cdn.ravenjs.com connect.facebook.net www.gstatic.com sb.scorecardresearch.com pixel-static.spotify.com cdn.cookielaw.org geolocation.onetrust.com www.googleoptimize.com www.fastly-insights.com static.hotjar.com script.hotjar.com https://www.googleadservices.com/pagead/conversion_async.js https://www.googleadservices.com/pagead/conversion/ https://analytics.tiktok.com/i18n/pixel/sdk.js https://analytics.tiktok.com/i18n/pixel/identify.js https://analytics.tiktok.com/i18n/pixel/config.js https://www.redditstatic.com/ads/pixel.js https://t.contentsquare.net/uxa/22f14577e19f3.js https://get.microsoft.com/badge/ms-store-badge.bundled.js https://cdn.us.heap-api.com https://heapanalytics.com 'sha256-WfsTi7oVogdF9vq5d14s2birjvCglqWF842fyHhzoNw=' 'sha256-KRzjHxCdT8icNaDOqPBdY0AlKiIh5F8r4bnbe1PQwss=' 'sha256-Z5wh7XXSBR1+mTxLSPFhywCZJt77+uP1GikAgPIsu2s=' 'sha256-o2wzIImHJ4+WWE5DCTR+myWU0UNml0+wwpDXRo++vII='; frame-ancestors 'self' https://adgen-dev.spotify.com/account/*/ad/*/details https://adgen-dev.spotify.com/preview/* https://local.spotify.net/account/*/ad/*/details https://local.spotify.net/preview/* https://app.smartly.io/*; |
| content-type | text/html; charset=utf-8 |
| date | Thu, 27 Nov 2025 17:21:10 GMT |
| server | envoy |
| strict-transport-security | max-age=31536000 |
| vary | Accept-Encoding |
| via | HTTP/1.1 fringe, HTTP/2 edgeproxy, 1.1 google, 1.1 varnish |
| x-cache | MISS, MISS |
| x-cache-hits | 0, 0 |
| x-content-type-options | nosniff |
| x-envoy-upstream-service-time | 12 |
| x-served-by | cache-sjc1000124-SJC, cache-sjc1000111-SJC |
| x-spotify-open-index | true |
| x-timer | S1764264070.358926,VS0,VE113 |
Content Security Policy
Content Security Policy (CSP) is a security mechanism that helps prevent cross-site scripting (XSS) and other code injection attacks by specifying which content sources are allowed to be loaded on a web page.
| Name | Value |
|---|---|
| script-src | 'self''unsafe-eval'blob:open.spotifycdn.comopen-exp.spotifycdn.comopen-review.spotifycdn.comopen-exp-review.spotifycdn.comquicksilver.scdn.cowww.google-analytics.comwww.googletagmanager.comstatic.ads-twitter.comanalytics.twitter.coms.pinimg.comsc-static.nethttps://www.google.com/recaptcha/cdn.ravenjs.comconnect.facebook.netwww.gstatic.comsb.scorecardresearch.compixel-static.spotify.comcdn.cookielaw.orggeolocation.onetrust.comwww.googleoptimize.comwww.fastly-insights.comstatic.hotjar.comscript.hotjar.comhttps://www.googleadservices.com/pagead/conversion_async.jshttps://www.googleadservices.com/pagead/conversion/https://analytics.tiktok.com/i18n/pixel/sdk.jshttps://analytics.tiktok.com/i18n/pixel/identify.jshttps://analytics.tiktok.com/i18n/pixel/config.jshttps://www.redditstatic.com/ads/pixel.jshttps://t.contentsquare.net/uxa/22f14577e19f3.jshttps://get.microsoft.com/badge/ms-store-badge.bundled.jshttps://cdn.us.heap-api.comhttps://heapanalytics.com'sha256-WfsTi7oVogdF9vq5d14s2birjvCglqWF842fyHhzoNw=''sha256-KRzjHxCdT8icNaDOqPBdY0AlKiIh5F8r4bnbe1PQwss=''sha256-Z5wh7XXSBR1+mTxLSPFhywCZJt77+uP1GikAgPIsu2s=''sha256-o2wzIImHJ4+WWE5DCTR+myWU0UNml0+wwpDXRo++vII=' |
| frame-ancestors | 'self'https://adgen-dev.spotify.com/account/*/ad/*/detailshttps://adgen-dev.spotify.com/preview/*https://local.spotify.net/account/*/ad/*/detailshttps://local.spotify.net/preview/*https://app.smartly.io/* |
Cookies
Cookies are small pieces of data stored on a user's web browser to track and remember information about their browsing activity on a website.
| Name | Value | Domain/Path | Expires | Secure | HTTP Only |
|---|---|---|---|---|---|
| sp_t | 4c498e1c-72f1-4df9-baf8-8b47286f45b2 | .spotify.com/ | 11/27/2026, 5:21:10 PM | yes | no |
| sp_new | 1 | .spotify.com/ | 11/28/2025, 5:21:10 PM | yes | no |
| sp_landing | https%3A%2F%2Fopen.spotify.com%2Fepisode%2F1ZumVUbpWqaJyVSE2mVfpA | .spotify.com/ | 11/28/2025, 5:21:10 PM | yes | yes |