HTTP Headers Analysis for https://mail.iprotech.com

SSL Verification Bypassed

The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.

Reason:

Hostname Mismatch - certificate is issued for graph.windows.net, *.aadg.windows.net, *.aadkds.ppe.reporting.msidentity.com, *.aadkds.prd.reporting.msidentity.com, *.accesscontrol.aadtst3.windows-int.net, *.accesscontrol.windows-ppe.net, *.accesscontrol.windows.net, *.adls.aadkds.ppe.reporting.msidentity.com, *.adls.aadkds.prd.reporting.msidentity.com, not for mail.iprotech.com

Open Cached · just now

22 Headers

Detected Technologies from Headers

See all in URL Inspect 5

Azure Application Proxy

AzureFrontDoor

Bing

Microsoft 365

Microsoft Azure

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

object-src; base-uri; script-src; +1 more Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

connection: close

Caching Headers

Cache-Control

Caching

no-store, no-cache

Expires

Caching

-1

Pragma

Caching

no-cache

cache-control: no-store, no-cache
expires: -1
pragma: no-cache

Content Headers

Content-Length

Content

49305

Content-Type

Content

text/html; charset=utf-8

content-length: 49305
content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

set-cookie: buid=1.AQgAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoAAAAIAA.AQABGgEAAAAdDD7nC9b5Q7JPd_okEQRFRXZvU3RzQXJ0aWZhY3RzAwAAAAAAlmal8wmYA2Db9A77G9cvdu2QV0avVn7p7ZBqoYJS3BICilleMKeo1cIspfE2xFvnFtXQgvCVXfXF1113VZALMK0IGR1i7KgMavamcfvY0JsgAA; expires=Sun, 07-Jun-2026 22:01:36 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABBwEAAAAdDD7nC9b5Q7JPd_okEQRFRXZvU3RzQXJ0aWZhY3RzDQAAAAAAeuHbzqGGJMQihfMFqhov3nhZlN36Ik6alYSP3WQepDzXm7mCzdH9F0zAOTCRN1N5AhNzDEu5zgxNwo8o9yCKzdhAX0EblnRArsvfb__gltMgDxnmcCsRISb7OQ3Sd7FKF-UVtxTxvJBfmPKmozL5mVK6xeYX9DslElRdjR_Eb9cgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
esctx-4HOO6ryMh2k=AQABCQEAAAAdDD7nC9b5Q7JPd_okEQRFRXZvU3RzQXJ0aWZhY3RzDQAAAAAAWHeAhickrZCHNrTuUdOVU-8R6Higbw741r6UBI7UUTKoFXM2nGInT45EUGNrYiA8yby6yFsNxAwgTovlXuVTrgOWagG1za_OTF40fjTRnlEWm5w0EPUcTsTuAiNwKl9wBTSBh_QIam9hM1Q9tIy-YyAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
fpc=An3StUEyS8FOg5_4gxfD4KS8Ae7AAQAAAEBUkOEOAAAA; expires=Sun, 07-Jun-2026 22:01:36 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly

Other Headers

Cross-Origin-Opener-Policy-Report-Only

Other

same-origin; report-to="coop-endpoint"

Date

Other

Fri, 08 May 2026 22:01:36 GMT

Link

Other

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

URL https://aadcdn.msftauth.net

rel=dns-prefetch

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

P3p

Other

CP="DSP CUR OTPi IND OTRi ONL FIN"

Reporting-Endpoints

Other

coop-endpoint="https://coop.msauth.net:443/api/coopReport?client_type=web-msal&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&correlation_id=c2710944-3c4d-4416-92ea-1348e592e6ff&sku=IdNet&version=8.14.0&is1p=1"

X-Dns-Prefetch-Control

Other

X-Ms-Clitelem

Other

1,0,0,,

X-Ms-Ests-Server

Other

2.1.24153.2 - SCUS ProdSlices

X-Ms-Request-Id

Other

68a89b55-0f1e-40cb-9957-fc493ef46f00

X-Ms-Srs

Other

1.P

cross-origin-opener-policy-report-only: same-origin; report-to="coop-endpoint"
date: Fri, 08 May 2026 22:01:36 GMT
link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch,<https://aadcdn.msauth.net>; rel=dns-prefetch
p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
reporting-endpoints: coop-endpoint="https://coop.msauth.net:443/api/coopReport?client_type=web-msal&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&correlation_id=c2710944-3c4d-4416-92ea-1348e592e6ff&sku=IdNet&version=8.14.0&is1p=1"
x-dns-prefetch-control: on
x-ms-clitelem: 1,0,0,,
x-ms-ests-server: 2.1.24153.2 - SCUS ProdSlices
x-ms-request-id: 68a89b55-0f1e-40cb-9957-fc493ef46f00
x-ms-srs: 1.P

Recommendations

Enable compression (gzip/brotli) to improve performance