music.apple.com | Analytics by SecurityHeaders

HTTP Headers report for music.apple.com

Header Name Header Data
HTTP status code 200
Content-Type text/html
Content-Security-Policy default-src 'self' https://*.apple.com; img-src 'self' https://*.apple.com https://*.mzstatic.com data: blob:; style-src 'self' https://*.apple.com 'unsafe-inline'; script-src 'self' https://*.apple.com blob: 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E=' 'sha256-tQjf8gvb2ROOMapIxFvFAYBeUJ0v1HCbOcSmDNXGtDo=' 'sha256-p7PoC97FO+Lu90RNjGWxhbm13yALSR4xzV8vaDhaQBo=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc=' 'unsafe-eval'; connect-src 'self' https://*.apple.com https://*.applemusic.com https://*.mzstatic.com https://mediaservices.cdn-apple.com https://*.push.apple.com wss://*.push.apple.com; media-src 'self' https://*.apple.com https://*.applemusic.com https://*.mzstatic.com blob:; child-src 'self' https://*.apple.com music: musics: blob: itms: itmss:; frame-ancestors 'none'; block-all-mixed-content
Vary accept-encoding
X-Apple-Jingle-Correlation-Key E74XMJU25PQ55373KOOFE4AGV4
X-Content-Type-Options nosniff
X-Original-Content-Length 1369102
X-Cache-Remote TCP_IMS_HIT from a2-16-7-4.deploy.akamaitechnologies.com (AkamaiGHost/22.0.1.1-cb770bcce5a4b6f65d099c05e1cbd435) (-)
Link <https://is1-ssl.mzstatic.com>; rel=preconnect
X-Frame-Options DENY
X-Responding-Instance amp-web-music-server:amp-web-music-server-main-9b4d6774b-bpj9k:5000:2514.12.0-external
Connection keep-alive
Cache-Control public, max-age=60
X-Xss-Protection 1; mode=block
X-Daiquiri-Instance daiquiri:10001:daiquiri-cluster-7f7d95dc6d-p5bvp:7987:25RELEASE27:daiquiri-amp-kubernetes-shared-cluster-ak8s-prod-pv4-amp-web-music-prod
X-Cache TCP_REFRESH_MISS from a2-16-7-35.deploy.akamaitechnologies.com (AkamaiGHost/22.0.1.1-cb770bcce5a4b6f65d099c05e1cbd435) (S)
Server daiquiri/5
Etag "4JgMrKA2leJWnavLuE1Ac8CSiHWNOTaNHG3RyFPYbwI="
Strict-Transport-Security max-age=31536000; includeSubDomains
Date Sat, 05 Apr 2025 12:39:23 GMT

About the tool

By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.

This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.

We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.

Watch it now at TrustRadar