Site Health Report Card

spotify.com

  • Spotify
  • Entertainment · Music
  • Online since 2006
  • Checked Sep 30, 2026

“Good rhythm. Slightly long intro.”

Pica's take. Spotify's site loads at a nice tempo, keeps its locks tuned, and lives on Google's cloud. A few outside scripts sing backup. Overall: a solid track, not a skip.

A94 / 100

Overall health

#30 of 100 sites graded

  • Largest paint

    2.4s

  • Page weight

    3.5 MB

  • Requests

    100

  • Third-party scripts

    12

  • Domain age

    20 yrs

  • Blocklists

    0 / 60

Timed by our own browser

Site Speed

A-
91

In excellent shape.

Largest paint (LCP)
2.4s
First paint (FCP)
1.1s
Server response (TTFB)
230 ms
Layout shift (CLS)
0.03
Page weight
3.5 MB
Requests
100

Pica: Three and a half megabytes. Long intro, good chorus.

Run the Speed Test on spotify.com

A look from the outside

Security Check

A-
91

In excellent shape.

HTTPS everywhere
Yes
HSTS
Preloaded
TLS
1.3
Content Security Policy
Partial
Mixed content
None
Third-party scripts
12

Pica: Twelve outside scripts. Backing vocals.

Run the Hack Check on spotify.com

What the internet says about it

Reputation Check

A
95

In excellent shape.

Domain age
20 years
Blocklists
0 of 60
Malware reports
None
Email authentication
DMARC reject
Certificate
Valid · 80 days
Lookalike domains
Plenty

Pica: Twenty years old. Wrapped every December, without fail.

Run the Tracker Check on spotify.com

Is it in a good neighborhood?

Hosting Check

A+
100

In excellent shape.

Network
Google Cloud · AS396982
Content delivery
Fastly + GCP
IPv6
Yes
HTTP/3
Yes
Shared-IP neighbors
Shared cloud, well kept
Flagged neighbors
0

Pica: Rents on Google Cloud. Nice acoustics.

Run the TTFB Check on spotify.com

Want a report card for your site?

Pica runs these checks on your site every day, and only writes when a grade slips. $11.11 a month for 50 sites.

Watch my website

More report cards

Browse all 100

How we grade. Four checks, weighted equally: speed timed by our own browser, a security look from the outside, public reputation signals, and the network the site lives on. A look from the outside is not a server audit.