Spoti.fi

cache-control: no-cache, no-store, max-age=0, must-revalidate
content-type: text/html; charset=utf-8
date: Wed, 15 Nov 2023 05:55:25 GMT
location: http://www.spotify.com/
pragma: no-cache
server: nginx
strict-transport-security: max-age=1209600
via: 1.1 google
x-frame-options: DENY
content-length: 58

HTTP/1.1 301 Moved Permanently
location: https://www.spotify.com/
date: Wed, 15 Nov 2023 05:55:25 GMT
server: envoy
content-length: 0
Via: 1.1 google

HTTP/2 302 
date: Wed, 15 Nov 2023 05:55:25 GMT
content-type: text/html
location: https://www.spotify.com/us/
set-cookie: sp_m=us; Path=/; Domain=.spotify.com; Max-Age=115516800; Expires=Wed, 14 Jul 2027 05:55:25 GMT; Secure; HttpOnly; SameSite=Lax
sp-trace-id: b7487d49a68e5d83
x-envoy-upstream-service-time: 6
server: envoy
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-encoding: gzip
vary: Accept-Encoding
via: HTTP/2 edgeproxy, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

HTTP/2 307 
date: Wed, 15 Nov 2023 05:55:25 GMT
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
location: https://open.spotify.com/__noul__?pfhp=2c2ccb58-8a92-4713-a1c0-8b43b3090b49
content-security-policy: base-uri 'none'; connect-src https: wss:; form-action https:; frame-ancestors 'self' https://*.spotify.com https://*.spotify.net; object-src 'none'; script-src 'nonce-95b394f520704f6b9cd4768e324ebf90' 'strict-dynamic' 'unsafe-inline' https:
x-frame-options: deny
x-join-the-band: https://www.spotify.com/jobs/
set-cookie: sp_m=us; Path=/; Domain=.spotify.com; Max-Age=115516800; Expires=Wed, 14 Jul 2027 05:55:25 GMT; Secure; HttpOnly; SameSite=Lax
set-cookie: sp_t=ef4eb33a-3438-4923-b455-8d5a8b47588f; Path=/; Domain=.spotify.com; Max-Age=31536000; Expires=Thu, 14 Nov 2024 05:55:25 GMT; Secure
set-cookie: sp_new=1; Path=/; Domain=.spotify.com; Max-Age=86400; Expires=Thu, 16 Nov 2023 05:55:25 GMT; Secure
set-cookie: sp_landing=https%3A%2F%2Fwww.spotify.com%2Fus%2F; Path=/; Domain=.spotify.com; Max-Age=86400; Expires=Thu, 16 Nov 2023 05:55:25 GMT; Secure; HttpOnly
set-cookie: sp_landingref=https%3A%2F%2Fhypestat.com; Path=/; Domain=.spotify.com; Max-Age=86400; Expires=Thu, 16 Nov 2023 05:55:25 GMT; Secure; HttpOnly
sp-trace-id: 433d001c8c579643
x-envoy-upstream-service-time: 22
server: envoy
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-encoding: gzip
vary: Accept-Encoding
via: HTTP/2 edgeproxy, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

HTTP/2 200 
server: envoy
date: Wed, 15 Nov 2023 05:55:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding,Accept-Encoding
set-cookie: sp_t=6d040367d5e4bbffc97953463bed535c; path=/; expires=Thu, 14 Nov 2024 05:55:25 GMT; domain=.spotify.com; samesite=none; secure
set-cookie: sp_landing=https%3A%2F%2Fopen.spotify.com%2F%3Fsp_cid%3D6d040367d5e4bbffc97953463bed535c%26device%3Ddesktop; path=/; expires=Thu, 16 Nov 2023 05:55:25 GMT; domain=.spotify.com; samesite=none; secure; httponly
content-security-policy: script-src 'self' 'unsafe-eval' blob: open.spotifycdn.com open-review.spotifycdn.com quicksilver.scdn.co www.google-analytics.com www.googletagmanager.com static.ads-twitter.com analytics.twitter.com s.pinimg.com sc-static.net https://www.google.com/recaptcha/ cdn.ravenjs.com connect.facebook.net www.gstatic.com sb.scorecardresearch.com pixel-static.spotify.com cdn.cookielaw.org geolocation.onetrust.com www.googleoptimize.com www.fastly-insights.com static.hotjar.com script.hotjar.com https://www.googleadservices.com/pagead/conversion_async.js https://www.googleadservices.com/pagead/conversion/ https://analytics.tiktok.com/i18n/pixel/sdk.js https://analytics.tiktok.com/i18n/pixel/identify.js https://analytics.tiktok.com/i18n/pixel/config.js https://www.redditstatic.com/ads/pixel.js https://t.contentsquare.net/uxa/22f14577e19f3.js cdn.speedcurve.com 'sha256-WfsTi7oVogdF9vq5d14s2birjvCglqWF842fyHhzoNw=' 'sha256-KRzjHxCdT8icNaDOqPBdY0AlKiIh5F8r4bnbe1PQwss=' 'sha256-Z5wh7XXSBR1+mTxLSPFhywCZJt77+uP1GikAgPIsu2s='; frame-ancestors 'self';
content-encoding: gzip
x-envoy-upstream-service-time: 34
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
via: HTTP/1.1 fringe, HTTP/2 edgeproxy, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000