SAMPLE PROBE · spotify.com

A real care-report shell, filled from a live public probe.

We did one HTTP request, one TLS handshake, one DNS lookup, one www check, and a header sniff against spotify.com and rendered the result through the same shell your agency would use to send its own client's monthly report. No claim is made about spotify.comor its owners — any site on the public internet is eligible for a shell like this. Slots we couldn't measure appear as UNKNOWN, never a guess.

Your agency can send this monthly. Probe your client's domain →← back to the chart

HTTP_STATUS: 200
STACK: unknown
TLS_DAYS_LEFT: UNKNOWN
FINAL_HOST: open.spotify.com
GENERATED_UTC: 2026-10-29 18:12

SAMPLE STRIP · open.spotify.com▸ rendered

Your agency - Website Care Snapshot

Reachability

HTTP200

ResponseUNKNOWN ms

Redirectedyes to open.spotify.com

Certificate

RenewsUNKNOWN

Days LeftUNKNOWN

FlagUNKNOWN

DNS

A Records1A record(s)

wwwresolves

Security headers

strict-transport-securityPRESENTmax-age=31536000

content-security-policyPRESENTscript-src 'self' 'unsafe-eval' blob: open.spotifycdn.com open-review.spotifycdn.com quicksilver.scdn.co www.google-analytics.com www.googletagmanager.com static.ads-twitter.com analytics.twitter.com s.pinimg.com sc-static.net https://www.google.com/recaptcha/ cdn.ravenjs.com connect.facebook.net www.gstatic.com sb.scorecardresearch.com pixel-static.spotify.com cdn.cookielaw.org geolocation.onetrust.com www.fastly-insights.com static.hotjar.com script.hotjar.com https://www.googleadservices.com/pagead/conversion_async.js https://www.googleadservices.com/pagead/conversion/ https://analytics.tiktok.com/i18n/pixel/sdk.js https://analytics.tiktok.com/i18n/pixel/identify.js https://analytics.tiktok.com/i18n/pixel/config.js https://www.redditstatic.com/ads/pixel.js https://t.contentsquare.net/uxa/22f14577e19f3.js https://get.microsoft.com/badge/ms-store-badge.bundled.js https://cdn.us.heap-api.com https://heapanalytics.com 'sha256-WfsTi7oVogdF9vq5d14s2birjvCglqWF842fyHhzoNw=' 'sha256-KRzjHxCdT8icNaDOqPBdY0AlKiIh5F8r4bnbe1PQwss=' 'sha256-Z5wh7XXSBR1+mTxLSPFhywCZJt77+uP1GikAgPIsu2s=' 'sha256-o2wzIImHJ4+WWE5DCTR+myWU0UNml0+wwpDXRo++vII='; frame-ancestors 'self' https://adgen-dev.spotify.com/account/*/ad/*/details https://adgen-dev.spotify.com/preview/* https://local.spotify.net/account/*/ad/*/details https://local.spotify.net/preview/* https://app.smartly.io/*;

x-frame-optionsMISSINGMISSING

Hardening opportunities: x-frame-options MISSING, x-content-type-options not nosniff, referrer-policy MISSING

Stack

unknown

HONESTY · WHAT THIS PAGE IS NOT

What we are not saying.

We are not auditing spotify.comor its owners. The numbers above come from one public probe of the apex — that's all.
We are not claiming any relationship between FleetOpus and spotify.com. Any site on the public internet will yield a shell like this.
A result of UNKNOWNmeans the probe could not measure it from our vantage point — not that the property is broken or absent.
The shell is a draft of what your agency's report could look like. Your agency writes the report; your client can verify it.