HTTP/2 301 location: https://www.spotify.com/ strict-transport-security: max-age=31536000 x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 vary: Accept-Encoding date: Sun, 28 Dec 2025 10:47:17 GMT server: envoy via: HTTP/2 edgeproxy, 1.1 google content-length: 0 HTTP/2 301 strict-transport-security: max-age=31536000 server: envoy via: HTTP/2 edgeproxy, 1.1 google, 1.1 varnish location: https://open.spotify.com/ x-content-type-options: nosniff accept-ranges: bytes date: Sun, 28 Dec 2025 10:47:17 GMT x-served-by: cache-bom-vanm7210055-BOM, cache-bom-vanm7210055-BOM x-cache: MISS, MISS x-cache-hits: 0, 0 x-timer: S1766918837.430580,VS0,VE126 vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 0 HTTP/2 200 strict-transport-security: max-age=31536000 set-cookie: sp_t=4995a70d-45c3-4f21-bd68-c315d3198f8f; path=/; expires=Mon, 28 Dec 2026 10:47:17 GMT; domain=.spotify.com; samesite=none; secure set-cookie: sp_landing=https%3A%2F%2Fopen.spotify.com%2F%3Fsp_cid%3D4995a70d-45c3-4f21-bd68-c315d3198f8f%26device%3Ddesktop; path=/; expires=Mon, 29 Dec 2025 10:47:17 GMT; domain=.spotify.com; samesite=none; secure; httponly set-cookie: sp_t=4995a70d-45c3-4f21-bd68-c315d3198f8f; Path=/; Domain=.spotify.com; Max-Age=31536000; Expires=Mon, 28 Dec 2026 10:47:17 GMT; Secure set-cookie: sp_new=1; Path=/; Domain=.spotify.com; Max-Age=86400; Expires=Mon, 29 Dec 2025 10:47:17 GMT; Secure set-cookie: sp_landing=https%3A%2F%2Fopen.spotify.com%2F; Path=/; Domain=.spotify.com; Max-Age=86400; Expires=Mon, 29 Dec 2025 10:47:17 GMT; Secure; HttpOnly set-cookie: sp_landingref=https%3A%2F%2Fwww.spotify.com%2F; Path=/; Domain=.spotify.com; Max-Age=86400; Expires=Mon, 29 Dec 2025 10:47:17 GMT; Secure; HttpOnly content-type: text/html; charset=utf-8 content-security-policy: script-src 'self' 'unsafe-eval' blob: open.spotifycdn.com open-exp.spotifycdn.com open-review.spotifycdn.com open-exp-review.spotifycdn.com quicksilver.scdn.co www.google-analytics.com www.googletagmanager.com static.ads-twitter.com analytics.twitter.com s.pinimg.com sc-static.net https://www.google.com/recaptcha/ cdn.ravenjs.com connect.facebook.net www.gstatic.com sb.scorecardresearch.com pixel-static.spotify.com cdn.cookielaw.org geolocation.onetrust.com www.googleoptimize.com www.fastly-insights.com static.hotjar.com script.hotjar.com https://www.googleadservices.com/pagead/conversion_async.js https://www.googleadservices.com/pagead/conversion/ https://analytics.tiktok.com/i18n/pixel/sdk.js https://analytics.tiktok.com/i18n/pixel/identify.js https://analytics.tiktok.com/i18n/pixel/config.js https://www.redditstatic.com/ads/pixel.js https://t.contentsquare.net/uxa/22f14577e19f3.js https://get.microsoft.com/badge/ms-store-badge.bundled.js https://cdn.us.heap-api.com https://heapanalytics.com 'sha256-WfsTi7oVogdF9vq5d14s2birjvCglqWF842fyHhzoNw=' 'sha256-KRzjHxCdT8icNaDOqPBdY0AlKiIh5F8r4bnbe1PQwss=' 'sha256-Z5wh7XXSBR1+mTxLSPFhywCZJt77+uP1GikAgPIsu2s=' 'sha256-o2wzIImHJ4+WWE5DCTR+myWU0UNml0+wwpDXRo++vII='; frame-ancestors 'self' https://adgen-dev.spotify.com/account/*/ad/*/details https://adgen-dev.spotify.com/preview/* https://local.spotify.net/account/*/ad/*/details https://local.spotify.net/preview/* https://app.smartly.io/*; via: HTTP/1.1 fringe, HTTP/2 edgeproxy, 1.1 google, 1.1 varnish x-envoy-upstream-service-time: 8 x-content-type-options: nosniff content-encoding: gzip server: envoy accept-ranges: bytes date: Sun, 28 Dec 2025 10:47:17 GMT x-served-by: cache-bom-vanm7210035-BOM, cache-bom-vanm7210059-BOM x-cache: MISS, MISS x-cache-hits: 0, 0 x-timer: S1766918838.611503,VS0,VE143 vary: Accept-Encoding