HTTP Headers Analysis for https://status.brookings.edu

Detected Technologies from Headers

See all in URL Inspect 5

Azure Application Proxy

AzureFrontDoor

Bing

Microsoft 365

Microsoft Azure

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

object-src; base-uri; script-src; +1 more Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-store, no-cache

Expires

Caching

-1

Pragma

Caching

no-cache

cache-control: no-store, no-cache
expires: -1
pragma: no-cache

Content Headers

Content-Length

Content

42087

Content-Type

Content

text/html; charset=utf-8

content-length: 42087
content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: buid=1.ATUAjjgCCnhhE0Wbgoi53Gv0V98ZzAdxVW9Dn4CTmVxLEw0AAAA1AA.AQABGgEAAAAdDD7nC9b5Q7JPd_okEQRFRXZvU3RzQXJ0aWZhY3RzAwAAAAAA_xTtUrTaJklaAsc4NCwu3M5p5GX_twfp3S_ARdTDVuGPc2sD1-xRNQxhhP_GcfFy22KB5ge5JCA4Nj-8Cwp5SUvl3RGgmfr9y1i81ZRfX94gAA; expires=Wed, 02-Sep-2026 16:52:08 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PBgABBwEAAAAdDD7nC9b5Q7JPd_okEQRFRXZvU3RzQXJ0aWZhY3RzDQAAAAAAkEeEgXaSCZfzTiWsYtkjzayiCkXzZdfzUcdnVLE1J4xrEb9jJW-5vNGKi789uEals1OqFYsjG1tPQ7yt85dLe7hOFF7tz9as47HAaGF0HUzcjrgRpyuQ0GM2BkrCWrB-TJFgaKvPKfj8cuOJOfElWtdQvvJOKcgjkls93URuuaX5yNeTuQlGoG0GT0mdfupwa15wZDxK9zuI-rwxQwuVIBOAgDx1ciKyCW9wCTXIY1Egtb0FR8w3MZqlvCj9w_qFvNqVdL4zqDMQFpLiaeQQ3xrQawhpZ9fHOOzs4puze_-Mhe1_jRTb12j5bsncK7tnDwFg39MuER83hK-dza9OD8vot2CG91ypGKu99NoOpkGxsuvTrThsZbhk-UuCW94jd7D77Ab2F0USehd8rkMDq4Gbv7PEXXjeACeTL6nfx8ZBZQSnzlNHo7upNcAqsIzUL8bm9bRHxAyXrvGFYnGSD4j6fUp2Frplz_rO1AB5nYpppHebIdF-2RZQWAK83C7-744Lx6cRT0U-8NmMhYTvYh4g7QjJMNHFtKLcp1NO_EaLZ1SUHXEDAHwH94m78IMal6zA9oPowJSaUhMCSmYk21FsTSsRj-hFMyzzTkTkgZ34YiII5kJzDwkxGDSrxIKcXwEed95OnmQ8KEN22unkMOOCm-GiAPlI8zRRuKex0YWxedIWaIs8W9NjR4ygi3yEWOmUZXcu67bilpRqeL9ri_PLeaCl7TR2SgVFw2G3QdIgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
esctx-ybzoFeXkUMM=AQABCQEAAAAdDD7nC9b5Q7JPd_okEQRFRXZvU3RzQXJ0aWZhY3RzDQAAAAAALyMNkkoB9U0iN9fb-0nNALbZ3MUMYtfw8mIJC-xTUkLKedqzyrOLJlL160Wk1TzqqKIS_tZgSjbDUCcgQE4lFu2B5wp7Ej96pQelSXMVraPuJ-zJ7DToHKaJXle6o6-doLcykyT26Tw2Qh-kVuAPwyAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
fpc=AjQ9ppjXsKdJijC75m-kH3VoJJ5rAQAAADi-AuIOAAAA; expires=Wed, 02-Sep-2026 16:52:08 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly

Other Headers

Cross-Origin-Opener-Policy-Report-Only

Other

same-origin; report-to="coop-endpoint"

Date

Other

Mon, 03 Aug 2026 16:52:07 GMT

Link

Other

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

URL https://aadcdn.msftauth.net

rel=dns-prefetch

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

P3p

Other

CP="DSP CUR OTPi IND OTRi ONL FIN"

Reporting-Endpoints

Other

coop-endpoint="https://coop.msauth.net:443/api/coopReport?client_type=web-none&client_id=07cc19df-5571-436f-9f80-93995c4b130d&correlation_id=8dbd6bd6-5065-418a-b79e-40d934ad9a2a"

X-Dns-Prefetch-Control

Other

on

X-Ms-Ests-Server

Other

2.1.24997.11 - NCUS ProdSlices

X-Ms-Request-Id

Other

f1364b25-de69-473e-a888-bc7d040e6b00

X-Ms-Srs

Other

1.P

cross-origin-opener-policy-report-only: same-origin; report-to="coop-endpoint"
date: Mon, 03 Aug 2026 16:52:07 GMT
link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch,<https://aadcdn.msauth.net>; rel=dns-prefetch
p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
reporting-endpoints: coop-endpoint="https://coop.msauth.net:443/api/coopReport?client_type=web-none&client_id=07cc19df-5571-436f-9f80-93995c4b130d&correlation_id=8dbd6bd6-5065-418a-b79e-40d934ad9a2a"
x-dns-prefetch-control: on
x-ms-ests-server: 2.1.24997.11 - NCUS ProdSlices
x-ms-request-id: f1364b25-de69-473e-a888-bc7d040e6b00
x-ms-srs: 1.P

Recommendations

Enable compression (gzip/brotli) to improve performance