HTTP Headers Analysis for https://preview.crm.dynamics.com

Detected Technologies from Headers

See all in URL Inspect 5

Azure Application Proxy

AzureFrontDoor

Bing

Microsoft 365

Microsoft Azure

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

object-src; base-uri; script-src; +1 more Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-store, no-cache

Expires

Caching

-1

Pragma

Caching

no-cache

cache-control: no-store, no-cache
expires: -1
pragma: no-cache

Content Headers

Content-Length

Content

49564

Content-Type

Content

text/html; charset=utf-8

content-length: 49564
content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: buid=1.AQQA6qIbmQsdtkCm8Z-y94p9XgcAAAAAAAAAwAAAAAAAAAAAAAAEAA.AQABGgEAAACvnsHKEvvRQb3Bz3Qc7wnaRXZvU3RzQXJ0aWZhY3RzAwAAAAAAn0roHft6SMK4SCvDaTpv8fqimLK3wavQfMXDBBAKYq7JDjngfgHF0s3HXt30mUg1hzKSnNFUvH3NcarSH0hET4H583-BAbCo_GB7sXczS6ggAA; expires=Thu, 14-May-2026 16:16:12 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABBwEAAACvnsHKEvvRQb3Bz3Qc7wnaRXZvU3RzQXJ0aWZhY3RzDQAAAAAAZm9IKxL7Q-Ihxp7mudo0K44yxFS1s61GCIqEMivxANiTGLdH2dxVt9a2MER8yxyxLbji3_WaPIQ2VSSGNaVayyw0R_RdGXbJuch0NzOTkXaw-aA_68QDJ3hqFgOWrlM_8gszG0ozfKPatia7OyF5ZR74qJG-kRBN_p9_TbjcIt4gAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
esctx-k2m0FAUV8kY=AQABCQEAAACvnsHKEvvRQb3Bz3Qc7wnaRXZvU3RzQXJ0aWZhY3RzDQAAAAAAe5UGl1ZZik1iVv5ncO-K1mfDSV9A5b6j8p_a-AizO0gaKDGPlfd-n8taWEtCI3TdBM9iXOJakdDU00gFubL-wh5aJh7X6lwplG8sASVT9D_jkqnhY-cGhgWF3QOFNR4kfLwDwExW7rzZTYJCFzQ0oCAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
fpc=AuAmiHl6x7JCs4qH0YrzHTk6v3npAQAAAExfcOEOAAAA; expires=Thu, 14-May-2026 16:16:12 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly

Other Headers

Cross-Origin-Opener-Policy-Report-Only

Other

same-origin; report-to="coop-endpoint"

Date

Other

Tue, 14 Apr 2026 16:16:12 GMT

Link

Other

URL https://aadcdn.msauth.net

rel=preconnect crossorigin

URL https://aadcdn.msauth.net

rel=preconnect crossorigin

URL https://aadcdn.msauth.net

rel=dns-prefetch

URL https://aadcdn.msauth.net

rel=preconnect crossorigin

P3p

Other

CP="DSP CUR OTPi IND OTRi ONL FIN"

Reporting-Endpoints

Other

coop-endpoint="https://idux.azurewebsites.net:443/api/coopReport?client_type=none-msal&client_id=00000007-0000-0000-c000-000000000000&correlation_id=f6c32a61-9092-42d7-90fa-64331d4d73c3&sku=IdNet&version=8.14.0&tenant=991ba2ea-1d0b-40b6-a6f1-9fb2f78a7d5e"

X-Dns-Prefetch-Control

Other

on

X-Ms-Clitelem

Other

1,0,0,,

X-Ms-Ests-Server

Other

2.1.23906.2 - EUS ProdSlices

X-Ms-Request-Id

Other

88942c3e-de0e-4713-943b-85dfa8282700

X-Ms-Srs

Other

1.P

cross-origin-opener-policy-report-only: same-origin; report-to="coop-endpoint"
date: Tue, 14 Apr 2026 16:16:12 GMT
link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch,<https://aadcdn.msftauth.net>; rel=dns-prefetch
p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
reporting-endpoints: coop-endpoint="https://idux.azurewebsites.net:443/api/coopReport?client_type=none-msal&client_id=00000007-0000-0000-c000-000000000000&correlation_id=f6c32a61-9092-42d7-90fa-64331d4d73c3&sku=IdNet&version=8.14.0&tenant=991ba2ea-1d0b-40b6-a6f1-9fb2f78a7d5e"
x-dns-prefetch-control: on
x-ms-clitelem: 1,0,0,,
x-ms-ests-server: 2.1.23906.2 - EUS ProdSlices
x-ms-request-id: 88942c3e-de0e-4713-943b-85dfa8282700
x-ms-srs: 1.P

Recommendations

Enable compression (gzip/brotli) to improve performance