HTTP Headers Analysis for https://uts-api.itunes.apple.com

Detected Technologies from Headers

See all in URL Inspect 1

Akamai

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

private, no-cache, must-revalidate, max-age=0

cache-control: private, no-cache, must-revalidate, max-age=0

Content Headers

Content-Length

Content

22

Content-Type

Content

text/plain

content-length: 22
content-type: text/plain

Server Headers

Server

daiquiri/5

server: daiquiri/5

CORS Headers

Access-Control-Allow-Headers

Cors

Content-Type,*

Access-Control-Allow-Methods

Cors

GET,POST,DELETE,PUT,PATCH

Access-Control-Allow-Origin

Cors

*

Access-Control-Expose-Headers

Cors

X-Apple-Next-Ekv

access-control-allow-headers: Content-Type,*
access-control-allow-methods: GET,POST,DELETE,PUT,PATCH
access-control-allow-origin: *
access-control-expose-headers: X-Apple-Next-Ekv

Cookies Headers

No cookies headers found

Other Headers

Alt-Svc

Other

h3=":443"; ma=93600,h3-29=":443"; ma=93600

Apple-Timing-App

Other

599439035

Date

Other

Wed, 22 Apr 2026 11:42:17 GMT

X-Apple-Application-Instance

Other

10001

X-Apple-Application-Site

Other

asrdc

X-Apple-Auth-Token-Valid

Other

false

X-Apple-Jingle-Correlation-Key

Other

ZGP27N77SWSDCWCJBDS6F2N3KY

X-Apple-Response-Time

Other

599439035

X-Apple-Timing-App

Other

599439035

X-Cache

Other

TCP_MISS from a23-36-66-150.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)

X-Daiquiri-Debug-Worker-Pid

Other

129455

X-Daiquiri-Instance

Other

daiquiri:10001:daiquiri-uts-ext-748bbc7578-8cx6w:7987:26RELEASE66:daiquiri-amp-kubernetes-uts-ext-ak8s-prod-as4-amp-daiquiri-ingress-prod

X-Responding-Instance

Other

uts-api:10001:uts-api-main-7785b784c5-2mwbh:8080:production-26.5.15674-314171db

alt-svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600
apple-timing-app: 599439035
date: Wed, 22 Apr 2026 11:42:17 GMT
x-apple-application-instance: 10001
x-apple-application-site: asrdc
x-apple-auth-token-valid: false
x-apple-jingle-correlation-key: ZGP27N77SWSDCWCJBDS6F2N3KY
x-apple-response-time: 599439035
x-apple-timing-app: 599439035
x-cache: TCP_MISS from a23-36-66-150.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
x-daiquiri-debug-worker-pid: 129455
x-daiquiri-instance: daiquiri:10001:daiquiri-uts-ext-748bbc7578-8cx6w:7987:26RELEASE66:daiquiri-amp-kubernetes-uts-ext-ak8s-prod-as4-amp-daiquiri-ingress-prod
x-responding-instance: uts-api:10001:uts-api-main-7785b784c5-2mwbh:8080:production-26.5.15674-314171db

Recommendations

Enable compression (gzip/brotli) to improve performance