HTTP Headers Analysis for https://internal.beta.ads.microsoft.com

Detected Technologies from Headers

See all in URL Inspect 5

Azure Application Proxy

AzureFrontDoor

Bing

Microsoft 365

Microsoft Azure

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

object-src; base-uri; script-src; +1 more Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-store, no-cache

Expires

Caching

-1

Pragma

Caching

no-cache

cache-control: no-store, no-cache
expires: -1
pragma: no-cache

Content Headers

Content-Length

Content

45498

Content-Type

Content

text/html; charset=utf-8

content-length: 45498
content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: buid=1.ARoAMe_N-B6jSkuT5F9XHpElWm7xaF6LtY5KszxPc38ces4AAAAaAA.AQABGgEAAAAdDD7nC9b5Q7JPd_okEQRFRXZvU3RzQXJ0aWZhY3RzAwAAAAAA1A7Go9AXsi46I4_6aBD73WaLmXDs4T0BduTJUV1lapGIIch1SN_sFc4B_jzpBHEsKpFJ5JUMSzYzCCOJ4lUBcRkuoU_wHloHBTyoFEuq_6cgAA; expires=Fri, 28-Aug-2026 00:47:06 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PBgABBwEAAAAdDD7nC9b5Q7JPd_okEQRFRXZvU3RzQXJ0aWZhY3RzDQAAAAAA7b8c3kOUOI1Ihn9QzLlaO67nladgMwl3-5kiczVjCGTt8yrLaS3LSyI7TSnJvpHYPib9j-6oNJRnFAT3qpbIg8llaqRxSRKdderUqr4060blNZH2jJQlSlxFp04dziPCsa0GeQ5pmCB6Usal_BzyElqqw6zOgAuf3prL5cabQlk7LtmKFdKbZ6nf_7aUTbMeiGbduk6DPJ64TmdlKd2q38fN4pGk-cv0SNmNp8qDR0BBGKRg6eyq0oFEIoPtmQJCBiPMY30j9HmvbkQv9BIawGRSM5kre383oaEF_GH-WsubnS4s7OFRa1tO6JPI4dZWkCKtJakZad7X8XxqtiQSAWZzp_PPBeGwyytvp1kUZOFlkYyZPMetMScnSkCy1lmwLIH1kqqPfnUDfrFAtFAfLAh6zIoWCOjrFaUqQ0NdRPLRNX_O_s0LEIXRTz0H3JUiYC8NFzyJMOz7CbwgO8lu-weYMtXzG43PanaQ2hqutgtdVE4HZBiNnJ6YjIr-qw4Yixb8Q12Gf75wG1ka3TnflOWnhfBsX5tNC2HWjxRWOETMwGR_Fa3mmg4NvdV9p9DK9ZknXOory6R338bkRGXN4cetg3ePS0YIGJxsVJsPGFdg9pILLmSvlGVf3dlRh-pj25dBoDwrKUU8ANF8znaNAPH301pcSbDpU6Apdau1BCMhA6cBGMYzeJ1Oc70TgBoigJYaeP-_MWgo11MmXd-InPhyAgK-sfq2JXWTnDYarhggAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
esctx-CF4je4lyo1o=AQABCQEAAAAdDD7nC9b5Q7JPd_okEQRFRXZvU3RzQXJ0aWZhY3RzDQAAAAAAmWXdh3U9FZaFc0XQbpj0AOLLhtnPL-WIty2j82QSnePSgP0eBJ3edfNcgzFbmJ4reZHMC0DJAt0Jn66stoBUzi9y-oo6oOELupc4TEdYC10Adht_0MVv-db88yvtIx3__uxiZHTvtrdLTbUOSr7JACAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
fpc=AiJR1wa8NflNt3xSuwY4-EcEOgbwAQAAAIpE--EOAAAA; expires=Fri, 28-Aug-2026 00:47:06 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly

Other Headers

Cross-Origin-Opener-Policy-Report-Only

Other

same-origin; report-to="coop-endpoint"

Date

Other

Wed, 29 Jul 2026 00:47:06 GMT

Link

Other

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

URL https://aadcdn.msftauth.net

rel=dns-prefetch

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

P3p

Other

CP="DSP CUR OTPi IND OTRi ONL FIN"

Reporting-Endpoints

Other

coop-endpoint="https://coop.msauth.net:443/api/coopReport?client_type=web-msal&client_id=5e68f16e-b58b-4a8e-b33c-4f737f1c7ace&correlation_id=5995d6b5-1295-4b70-a634-abbedd0eb899&sku=IdNet&version=6.6.0&is1p=1"

X-Dns-Prefetch-Control

Other

on

X-Ms-Clitelem

Other

1,50058,0,,

X-Ms-Ests-Server

Other

2.1.24997.8 - NCUS ProdSlices

X-Ms-Request-Id

Other

3d773644-cb4b-4111-9a2a-50a9e0c71a00

X-Ms-Srs

Other

1.P

cross-origin-opener-policy-report-only: same-origin; report-to="coop-endpoint"
date: Wed, 29 Jul 2026 00:47:06 GMT
link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch,<https://aadcdn.msauth.net>; rel=dns-prefetch
p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
reporting-endpoints: coop-endpoint="https://coop.msauth.net:443/api/coopReport?client_type=web-msal&client_id=5e68f16e-b58b-4a8e-b33c-4f737f1c7ace&correlation_id=5995d6b5-1295-4b70-a634-abbedd0eb899&sku=IdNet&version=6.6.0&is1p=1"
x-dns-prefetch-control: on
x-ms-clitelem: 1,50058,0,,
x-ms-ests-server: 2.1.24997.8 - NCUS ProdSlices
x-ms-request-id: 3d773644-cb4b-4111-9a2a-50a9e0c71a00
x-ms-srs: 1.P

Recommendations

Enable compression (gzip/brotli) to improve performance