HTTP Headers Analysis for https://status.pinnacle.com

Detected Technologies from Headers

See all in URL Inspect 5

Azure Application Proxy

AzureFrontDoor

Bing

Microsoft 365

Microsoft Azure

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

object-src; base-uri; script-src; +1 more Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-store, no-cache

Expires

Caching

-1

Pragma

Caching

no-cache

cache-control: no-store, no-cache
expires: -1
pragma: no-cache

Content Headers

Content-Length

Content

43358

Content-Type

Content

text/html; charset=utf-8

content-length: 43358
content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: buid=1.ASUAJDpPUyFGv0eVjzbt1_Bvzu3sNIqwddJPnNvq0Q2PE-8AAAAlAA.AQABGgEAAAAdDD7nC9b5Q7JPd_okEQRFRXZvU3RzQXJ0aWZhY3RzAwAAAAAA-j8POPddElDcm5UPY6NjEVAlLdAlulhUTKhOfLpXa9wh7HH3rRktCmrRhBba54yU0DV_PLuKoMS5MzOWzGDCRt0i0SFOBN3FkoK-l5hD8Q8gAA; expires=Wed, 30-Sep-2026 11:35:30 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PBgABBwEAAAAdDD7nC9b5Q7JPd_okEQRFRXZvU3RzQXJ0aWZhY3RzDQAAAAAAP98_lJk6Zfr49sE-bSezM1q-XoL-59n1X-ifXLW4IWdxq2DmGmZZIgEuUNPwVpjerXFxDai9tsWsw0vvin1XH_0M3dL_52CpGobRUaX5X57k7Ovh07Dlo0bf_BvBSpF0IyHfaT3Aw2Gu2LbATNn7zm474eFiKZxHvGxUdk0gtQCjKpKKRUQuoLf-tDfacXc2-LYN6gTIWz9d1PIIdGa5s7ozKob5OLcl44J50oNpVL4YPp6B3eIo0QMLL4ZxzUscLmB2ptvbjXLTF8OM_N15rFer8GFOYpF9hmQRneqg7qsfbeeLTLNOva2NpQDfTaEG7mRNaaRyiQ0LjCelqWcWuc6vmw8vsLWZYhmSBUyCD_V3ymOJw0LEOJurfk96E9UQ6jhXMDCa7ey--oapFtfRowXAkhfVP7rZsuChnaHm0PECYsGqAceq9agI4bs9xfkipwrKZjcbUFgP8O0YjLd1ZqXnDAsDL5r-Zoj6PRrspBbkn66Mnnm_ZrnAEFaz4g-ab4Hsla9PFERg_kbxYhvxlkg7u-a7jK3ObhUzCD25bK9vgFmhE6P7ezH7hhcm8Lhqe5bHbw5qazgeCQJCK-vQ77hqBTz89tGRSXLO1r9dHI-FSeedJlvKDZVBj5F_seCN0RFqyHTJmdPegZ0Vh_N62WQELx4ujVFw3gFkce_8jIr5qngXhM1BmQ6jazi-nHhmoBw4uglz2UB6mcJ_IqCegd583woY_6LVUCYuBQR0pLIgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
esctx-HO2fIKT9nR0=AQABCQEAAAAdDD7nC9b5Q7JPd_okEQRFRXZvU3RzQXJ0aWZhY3RzDQAAAAAABV7i30Y1wNO3kdjtvy_GCmGqzq3TG8z1e7wjt4jbKdj5Yu-NOWd5FhFufyeeb9hyKokIK557E2erx7ZHUUUh3qVVBSTPemdKrw95dRGrdkwfeJkmcFfX2MoiAn3FqzJwQlmZ18UJHj-6TPO0eWAahSAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
fpc=AuA8WfqP0BFOu2OOZM-5PbtU6BUYAQAAAAJeJ-IOAAAA; expires=Wed, 30-Sep-2026 11:35:30 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly

Other Headers

Cross-Origin-Opener-Policy-Report-Only

Other

same-origin; report-to="coop-endpoint"

Date

Other

Mon, 31 Aug 2026 11:35:30 GMT

Link

Other

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

URL https://aadcdn.msftauth.net

rel=dns-prefetch

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

P3p

Other

CP="DSP CUR OTPi IND OTRi ONL FIN"

Reporting-Endpoints

Other

coop-endpoint="https://coop.msauth.net:443/api/coopReport?client_type=web-none&client_id=8a34eced-75b0-4fd2-9cdb-ead10d8f13ef&correlation_id=6609875e-3f6d-4f5e-8607-ce30919414e5"

X-Dns-Prefetch-Control

Other

on

X-Ms-Ests-Server

Other

2.1.25126.4 - EUS ProdSlices

X-Ms-Request-Id

Other

20aa450d-1fb7-4f01-8374-6669cff94600

X-Ms-Srs

Other

1.P

cross-origin-opener-policy-report-only: same-origin; report-to="coop-endpoint"
date: Mon, 31 Aug 2026 11:35:30 GMT
link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch,<https://aadcdn.msauth.net>; rel=dns-prefetch
p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
reporting-endpoints: coop-endpoint="https://coop.msauth.net:443/api/coopReport?client_type=web-none&client_id=8a34eced-75b0-4fd2-9cdb-ead10d8f13ef&correlation_id=6609875e-3f6d-4f5e-8607-ce30919414e5"
x-dns-prefetch-control: on
x-ms-ests-server: 2.1.25126.4 - EUS ProdSlices
x-ms-request-id: 20aa450d-1fb7-4f01-8374-6669cff94600
x-ms-srs: 1.P

Recommendations

Enable compression (gzip/brotli) to improve performance