DNS Gurus
Cached · just now
23 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
Basic
base-uri; media-src; object-src; +7 more
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
origin
Permissions-Policy
Missing
Not configured
Recommendations
  • • Consider adding 'preload' to HSTS for maximum security
  • • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Consider adding Permissions-Policy to control browser features

Performance Headers

2 headers
Accept-Ranges
Performance
bytes
Connection
Performance
close

Caching Headers

3 headers
Cache-Control
Caching
no-store, must-revalidate, no-cache
Expires
Caching
0
Pragma
Caching
no-cache

Content Headers

2 headers
Content-Length
Content
7959
Content-Type
Content
text/html

Server Headers

0 headers
No server headers found

CORS Headers

0 headers
No CORS headers found

Cookies Headers

0 headers
No cookies headers found

Other Headers

12 headers
Content-Security-Policy-Report-Only
Other
base-uri 'self'; media-src 'none'; object-src 'self'; manifest-src 'self'; style-src 'self' 'unsafe-inline' https://*.content.powerapps.com https://*.static.powerapps.com https://*.cdn.office.net https://vsa.services.microsoft.com https://mfpembedcdnmsit.azureedge.net; script-src 'self' blob: https://wcpstatic.microsoft.com https://shell.cdn.office.net https://res.cdn.office.net https://r4.res.office365.com https://amcdn.msftauth.net https://js.monitor.azure.com https://vsa.services.microsoft.com https://api.flow.microsoft.com https://content.powerapps.com 'sha256-CnzmUY9XDWPjkAgzDPEHLlm4gygKztleRupzQDsr608=' 'sha256-JEwSVBrCE741EV9rbuu3EqBV+pc2dpFhRHIV6+9J0mY=' 'sha256-+2jm5SNRB4WubmMQDChnXjseeCIhj34lMFWKhVn1qBE=' 'sha256-y7y27Uq4p88K6EhwSUfbhCk9VakghnU/hORgjhopExY=' 'sha256-yt+SNVxRkIi6H6yb7ndFuZM1esMX9esg3UpRHaTsyVk=' 'sha256-5Ak7SFUphPwGgLz3V4Xelf0S0V5wEVMm1N8v9fI2/lw=' 'sha256-TRsq5vkmHlqVgkpiE7RBLWrt6Punq9JsRG+VubnDdAI=' 'sha256-pecrnaAxGZ2wjZgJTkmX2HrtPgExtWD83KkYoPL1CuY=' 'sha256-wODu+VfY8ND+vPVOUkzkfC/1jpkO6aSN5rGEBoSdnys='; font-src 'self' data: https://*.content.powerapps.com https://*.static.powerapps.com https://static2.sharepointonline.com https://*.cdn.office.net https://appsforoffice.microsoft.com https://spoprod-a.akamaihd.net; form-action 'self'; report-uri https://csp.microsoft.com/report/PowerAutomate-MakerPortal;
Date
Other
Thu, 25 Dec 2025 22:35:09 GMT
Link
Other
<https://content.powerapps.com>; rel="preconnect"
Server-Timing
Other
x-ms-igw-upstream-headers;dur=1.9,x-ms-igw-req-overhead;dur=0.1
X-Azure-Ref
Other
20251225T223509Z-16cb8b7df7fpjlfzhC1BL16ed800000004cg0000000091na
X-Cache
Other
CONFIG_NOCACHE
X-Ms-Activity-Vector
Other
00.00.00
X-Ms-Correlation-Id
Other
896533ee-3e2e-4d6f-a3ef-b0e85def76da
X-Ms-Igw-Tracking-Id
Other
4862d5b7-bedb-42a9-8ea4-73e18079490420251225223509_prdcm001eusgb0_2
X-Ms-Islandgateway
Other
_prdcm001eusgb0_2
X-Ms-Service-Request-Id
Other
4862d5b7-bedb-42a9-8ea4-73e180794904
X-Servicefabric
Other
NoRetry

Recommendations

Enable compression (gzip/brotli) to improve performance

Analysis completed in 200ms