What technology does spotistats.app use?

spotistats.app is built with Next.js, Cloudflare Analytics.

Is spotistats.app secure (HTTPS)?

Yes. spotistats.app uses TLS 1.3 with a certificate issued by Google Trust Services, valid until Oct 6, 2026.

Who hosts spotistats.app?

Hosting provider information for spotistats.app is not available yet.

What is spotistats.app's SEO score?

spotistats.app scored 70/100 for SEO in the latest analysis (fair).

What is spotistats.app's overall website score?

spotistats.app has an overall SiteGraph score of 82/100, combining SEO, performance, security, and accessibility.

spotistats.app

stats.fm (Formerly Spotistats for Spotify)

Last scanned Jul 26, 2026, 5:47 AM

Overall score

Great

Summary

Your music, your stats, your story. This website uses Next.js behind Cloudflare CDN. SEO is fair (70/100) and accessibility is excellent (100/100). Security scores fair (65/100) and performance excellent (100/100). Top issue: Missing canonical link.

Your music, your stats, your story. Enter a new dimension of music by getting unique insights into your music taste.

Top issues to fix

11 issues found · 2 high priority

Missing Strict-Transport-Security header
Security
Add HSTS so browsers always use HTTPS — this closes the protocol-downgrade attack window.
Missing Content-Security-Policy header
Security
Add a CSP to control which sources can run scripts — the strongest single defense against XSS.
Missing X-Content-Type-Options header
Security
Add X-Content-Type-Options: nosniff to stop MIME-sniffing attacks.
Missing X-Frame-Options header
Security
Add X-Frame-Options (or a CSP frame-ancestors rule) to prevent clickjacking via hidden iframes.
1 cookie without Secure/HttpOnly flags
Security
Set Secure and HttpOnly on session cookies so they can't leak over HTTP or be read by injected scripts.
Missing canonical link
SEO
Add <link rel="canonical"> so search engines know which URL variant to index.

+5 more issues — details in the sections below.

SEO

5 issue(s) found

100

Performance

426 ms

Security

HTTPS & header checks

100

Accessibility

0 issue(s) found

Not enough scan history yet to show a trend — check back after this site has been re-scanned a few more times.

Organization

Company details published in this site's own structured data.

Your music, your stats, your story. Enter a new dimension of music by getting unique insights into your music taste.

X (Twitter)Instagram GitHub

Meta tags

Title: stats.fm (Formerly Spotistats for Spotify)
Description: Your music, your stats, your story. Enter a new dimension of music by getting unique insights into your music taste.
Canonical
Language: en
Charset: utf-8
Viewport: width=device-width
Robots meta
Manifest: https://spotistats.app/manifest.json

Technologies

Detected frameworks, languages, and tools.

Next.js Cloudflare Analytics

Hosting & CDN

Hosting provider: —
CDN provider: Cloudflare
IP address: —
ASN: —

DNS records

Type	Value
A	—
AAAA	—
MX	—
TXT	—
NS	—
CAA	—
CNAME	—
IPv6 support	No

TLS / SSL certificate

Version: TLS 1.3
Issuer: Google Trust Services
Subject: spotistats.app
Valid from: Jul 8, 2026
Valid to: Oct 6, 2026
Days until expiry: 69
SAN domains: spotistats.app, *.spotistats.app

Security headers

Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-OptionsMissing
X-Content-Type-OptionsMissing
Referrer-PolicyMissing
Permissions-PolicyMissing

Compression: gzip · 1 cookie(s) observed

Content & assets

Headings

H1 5 · H2 4 · H3 1

Links

10 internal · 12 external · 8 broken

Images

23 total · 0 missing alt

Scripts / Styles

12 scripts · 1 stylesheets

JS / CSS size

1.1 KB · 0 B

Page size

21.6 KB

Robots.txt & Sitemap

robots.txt: Not found
Disallow rules: 0
sitemap.xml: Not found
URLs in sitemap: 0

SEO issues

Missing canonical link
Multiple H1 headings found
No structured data (JSON-LD) found
robots.txt not found
sitemap.xml not found

Scan details

Requested URL: https://spotistats.app
Final URL: https://spotistats.app
HTTP status: 200
HTTP version: HTTP/2
Response time: 426 ms
HTML size: 21.6 KB
Redirect chain: https://spotistats.app

See something wrong on this report? Request a correction

Frequently asked questions

What technology does spotistats.app use?: spotistats.app is built with Next.js, Cloudflare Analytics.
Is spotistats.app secure (HTTPS)?: Yes. spotistats.app uses TLS 1.3 with a certificate issued by Google Trust Services, valid until Oct 6, 2026.
Who hosts spotistats.app?: Hosting provider information for spotistats.app is not available yet.
What is spotistats.app's SEO score?: spotistats.app scored 70/100 for SEO in the latest analysis (fair).
What is spotistats.app's overall website score?: spotistats.app has an overall SiteGraph score of 82/100, combining SEO, performance, security, and accessibility.