HTTP Headers Analysis for https://client-api.itunes.apple.com

Detected Technologies from Headers

See all in URL Inspect 1

Akamai

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

X-Apple-Store-Front, Cookie

connection: close
vary: X-Apple-Store-Front, Cookie

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store

Expires

Caching

Mon, 27 Apr 2026 03:25:31 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store
expires: Mon, 27 Apr 2026 03:25:31 GMT
pragma: no-cache

Content Headers

Content-Length

Content

43

Content-Type

Content

application/json

content-length: 43
content-type: application/json

Server Headers

Server

daiquiri/5

server: daiquiri/5

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Apple-Originating-System

Other

MZStorePlatform

Apple-Seq

Other

0.0

Apple-Timing-App

Other

0 ms

Apple-Tk

Other

false

B3

Other

4d49831ec8e6757912bbcbaaaa805c92-29cbd49ede01d7fb

Date

Other

Mon, 27 Apr 2026 03:25:31 GMT

X-Apple-Application-Instance

Other

2301304

X-Apple-Application-Site

Other

ST11

X-Apple-Jingle-Correlation-Key

Other

JVEYGHWI4Z2XSEV3ZOVKVAC4SI

X-Apple-Request-Uuid

Other

4d49831e-c8e6-7579-12bb-cbaaaa805c92

X-B3-Spanid

Other

29cbd49ede01d7fb

X-B3-Traceid

Other

4d49831ec8e6757912bbcbaaaa805c92

X-Cache

Other

TCP_MISS from a23-54-205-234.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)

X-Daiquiri-Debug-Worker-Pid

Other

117708, 114454

X-Daiquiri-Instance

Other

daiquiri:41896014:st47p00it-qujn12071501:7987:26HOTFIX15:daiquiri-amp-store-l7shared-int-001-st, daiquiri:42282004:st53p00it-qujn12050502:7987:26HOTFIX15:daiquiri-amp-store-l7shared-ext-001-st

X-Responding-Instance

Other

MZStorePlatform:2301304:::

X-True-Cache-Key

Other

/L/client-api.itunes.apple.com/ vcd=2897 ci2=[not cachable]

apple-originating-system: MZStorePlatform
apple-seq: 0.0
apple-timing-app: 0 ms
apple-tk: false
b3: 4d49831ec8e6757912bbcbaaaa805c92-29cbd49ede01d7fb
date: Mon, 27 Apr 2026 03:25:31 GMT
x-apple-application-instance: 2301304
x-apple-application-site: ST11
x-apple-jingle-correlation-key: JVEYGHWI4Z2XSEV3ZOVKVAC4SI
x-apple-request-uuid: 4d49831e-c8e6-7579-12bb-cbaaaa805c92
x-b3-spanid: 29cbd49ede01d7fb
x-b3-traceid: 4d49831ec8e6757912bbcbaaaa805c92
x-cache: TCP_MISS from a23-54-205-234.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
x-daiquiri-debug-worker-pid: 117708, 114454
x-daiquiri-instance: daiquiri:41896014:st47p00it-qujn12071501:7987:26HOTFIX15:daiquiri-amp-store-l7shared-int-001-st, daiquiri:42282004:st53p00it-qujn12050502:7987:26HOTFIX15:daiquiri-amp-store-l7shared-ext-001-st
x-responding-instance: MZStorePlatform:2301304:::
x-true-cache-key: /L/client-api.itunes.apple.com/ vcd=2897 ci2=[not cachable]

Recommendations

Enable compression (gzip/brotli) to improve performance