HTTP Headers Analysis for https://copilot.cloud.microsoft

Detected Technologies from Headers

See all in URL Inspect 5

Microsoft Entra ID

AzureFrontDoor

Azure Monitor

Microsoft Clarity

Microsoft 365

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Good

default-src; base-uri; script-src; +13 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Strengthen CSP by removing 'unsafe-eval'
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

accept-ranges: bytes
connection: close

Caching Headers

Cache-Control

Caching

no-store,no-cache

Pragma

Caching

no-cache

cache-control: no-store,no-cache
pragma: no-cache

Content Headers

Content-Length

Content

969172

Content-Type

Content

text/html; charset=utf-8

content-length: 969172
content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: OH.SID=ac3f803b-0500-4199-8de9-3027fb144f30; path=/; secure; samesite=none; httponly
OH.FLID=b94c1626-a375-47de-a3e1-f337cb5ad81b; expires=Mon, 09 Aug 2027 08:51:39 GMT; path=/; secure; samesite=none; httponly
ASLBSA=0003d54208b33514fe7b4e93d3391855d7b0f8a7166555bad74345dd9f9839ae5f08; Path=/; Secure; HttpOnly;
ASLBSACORS=0003d54208b33514fe7b4e93d3391855d7b0f8a7166555bad74345dd9f9839ae5f08; SameSite=none; Path=/; Secure; HttpOnly;

Other Headers

Date

Other

Sun, 09 Aug 2026 08:51:39 GMT

Nel

Other

Report-To Group NelOfficeHubUpload1 max-age: 1h

success: 1.0% failure: 100.0%

Report-To

Other

Group NelOfficeHubUpload1 max-age: 1h

Endpoint 1 https://officehub.nel.measure.office.net/api/report?tenantId=unknown&destinationEndpoint=eus&frontEnd=AFD

Group csp-endpoint max-age: 1d

Endpoint 1 https://csp.microsoft.com/report/Harmony-App-PROD

X-Azure-Ref

Other

20260809T085139Z-168c7fd6477ljrflhC1IADsf100000000e50000000003uq0

X-Cache

Other

CONFIG_NOCACHE

X-Ua-Compatible

Other

IE=edge,chrome=1

date: Sun, 09 Aug 2026 08:51:39 GMT
nel: {"report_to":"NelOfficeHubUpload1","max_age":3600,"failure_fraction":1.0,"success_fraction":0.01}
report-to: {"group":"NelOfficeHubUpload1","max_age":3600,"endpoints":[{"url":"https://officehub.nel.measure.office.net/api/report?tenantId=unknown&destinationEndpoint=eus&frontEnd=AFD"}]}, { "group": "csp-endpoint", "max_age": 86400, "endpoints": [{ "url": "https://csp.microsoft.com/report/Harmony-App-PROD" }]}
x-azure-ref: 20260809T085139Z-168c7fd6477ljrflhC1IADsf100000000e50000000003uq0
x-cache: CONFIG_NOCACHE
x-ua-compatible: IE=edge,chrome=1

Recommendations

Enable compression (gzip/brotli) to improve performance