HTTP Headers Analysis for https://api.deezer.com

Detected Technologies from Headers

See all in URL Inspect 1

Apache

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

No caching headers found

Content Headers

Content-Length

Content

79

Content-Type

Content

application/json; charset=utf-8

content-length: 79
content-type: application/json; charset=utf-8

Server Headers

Server

Apache

server: Apache

CORS Headers

Access-Control-Allow-Credentials

Cors

true

Access-Control-Allow-Headers

Cors

X-Requested-With, Content-Type, Authorization, Origin, Accept, Accept-Encoding

Access-Control-Allow-Methods

Cors

POST, GET, OPTIONS, DELETE, PUT

Access-Control-Expose-Headers

Cors

Location

Access-Control-Max-Age

Cors

86400

access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type, Authorization, Origin, Accept, Accept-Encoding
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-expose-headers: Location
access-control-max-age: 86400

Cookies Headers

Set-Cookie

Cookies

set-cookie: dzr_uniq_id=dzr_uniq_id_fr1ccc5d160049f35049e762d3cedf41738a0423; expires=Sat, 13 Feb 2027 19:12:04 GMT; Max-Age=15552000; path=/; domain=.deezer.com; secure; SameSite=None
_abck=969E8AD36A3A2CB2D3ADB85AEAB26CB7~-1~YAAQLMgwF7DJCPmfAQAAS1gjERBEF9qN01RGGgVcgFThrxRnF2TKDmkMu2NnWF5D+lr7vS1ZA6jLCxhjPQTkbQyX0NYRqqu4R/wmxkelZd8WKLvBs/dTX2MaQ34bZguUhzY4LN4PQk29KZ1J3OfXRQWAYv5dxzggSC41xW5LSHGsLBSIL4Vjy1aoLt02B8+eebuwuDUEqM7aXkK89+6523QZ6rOqoEeu7c4cy4tUCmHSmgKMFr53xsLHUEryGoR5P1kFpo0u1Q8K763nNMJp8EXVu5ay7pLam88ihEcAWFaDu752L20Hy8+j97bRnoW5X4Z0oZL2Bj6l1Szewf4cLzYG+l2JkeIyybVHnkXUUfmIVWpOpIXMFGn68iJCkUTpfPD6ntSz2CC6zn7qnAexQ+C+nVmhAw4yTmr14YRBXucbuW5ADvyO+YmdBWl7aT5nCPHhZtM=~-1~-1~-1~-1~-1; Domain=.deezer.com; Path=/; Expires=Tue, 17 Aug 2027 19:12:04 GMT; Max-Age=31536000; Secure
bm_sz=9ECA5BD3A460B25C10AA2749300C0917~YAAQLMgwF7HJCPmfAQAAS1gjEQAlqpcAN62em84i+tc3awWsymF09rrpLu4rvFK3vJu87//+wOQoJNEmKP76dU7cixpYOyWWl1pRu+1IMp2C08ZCEYnVmGAAeMjZlocXJcl6XFXcUpGhuKgusv6LJTkBjMnhKSfSaiYiejYCXyP5T766/eP3Kota10yrMiWc83TqHf3JIYH4ud+5qWKIYDEEfkl30VQiCf7eTpXWoUX7yOv1KewipxEbGfxGsK1T9Np03fDQ8qBtGjFaw28tYBr7eAe+LN3PDTWuWvY2Wb5g89PpEqwHX5xfywAXq7GW9A6bDTQrwohJNtToy/K3TV30PkPOAOHRJ2QLtLk=~3686725~3682629; Domain=.deezer.com; Path=/; Expires=Mon, 17 Aug 2026 23:12:04 GMT; Max-Age=14400

Other Headers

Date

Other

Mon, 17 Aug 2026 19:12:04 GMT

P3p

Other

policyref="/w3c/p3p.xml" CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"

X-Host

Other

blm-web-192

X-Org

Other

FR

date: Mon, 17 Aug 2026 19:12:04 GMT
p3p: policyref="/w3c/p3p.xml" CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"
x-host: blm-web-192
x-org: FR

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching