HTTP Headers Analysis for https://test.idmadmin.mayo.edu

Detected Technologies from Headers

See all in URL Inspect 5

Azure Application Proxy

AzureFrontDoor

Bing

Microsoft 365

Microsoft Azure

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

object-src; base-uri; script-src; +1 more Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-store, no-cache

Expires

Caching

-1

Pragma

Caching

no-cache

cache-control: no-store, no-cache
expires: -1
pragma: no-cache

Content Headers

Content-Length

Content

46773

Content-Type

Content

text/html; charset=utf-8

content-length: 46773
content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: buid=1.ARIAnP9fomM_sk-aitm90DIfmv-6cF2zyPJNs9zH2SFynecAAAASAA.AQABGgEAAAAdDD7nC9b5Q7JPd_okEQRFRXZvU3RzQXJ0aWZhY3RzAwAAAAAAMcOxEG8ngpfPt8HCV9xBdS2jpUky8YBK4fYN_GsdWk1lzFAyKFdbENhQjRJYsxtKUL8hbRdKk3za1jrd7y_fIarujpoztH9hES3XLb3TWKcgAA; expires=Sat, 05-Sep-2026 09:43:07 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PBgABBwEAAAAdDD7nC9b5Q7JPd_okEQRFRXZvU3RzQXJ0aWZhY3RzDQAAAAAAq1ZI3JMvCuUimHJvtsQqUtsvLCqxbP5tbEjdfI6hwmGcgXiZ-SID1C4zMG2lo9afWs8ec7eYrwu1SM9hKWX0UeKvSk1xUpfe-0HdA0IztuEd3J2-DMv00t82sd-oEW_lZASMwqA6_eSaoPkba_J6Y1DV_JJByqqHM61gEw2g3LO_gefzgNMBZ_Acy-qn63FvkoGLR-Qrnc_KvYu9ZAKyfTyPfTAtVoUu0jC-NkuD9ihvJnTvgrEF0NZ0oV7ypDdoXOlQXolzdtQmo76GVXXBu1xGOl4Y5E-8oQBPyndWary2rELPRcmnkb1MhJsiV94GN_wDep3yA7-p0KIhT93mOTi1c4syqXeysmq5Or_QPaJuHU73Mnpdf9UL48gD4BVnWYTUI62GODf5wOUnjZfHK4emK4oUTDijqpt-jEg95LPYBKW8RT5L_VZTXu0YezMudgr5XqgBfkUkblCFIG030QTLIg-lBEmGuUhvmrq2PJiNqb-UnmF13WMKx-Ka_KCqflW3iWBTGCPnB8XRzeDmt9B3j5WmuWx1kFj8KcqrfC72x4ZSG26p8YdopcclG4v08K37Soj_cW2yjRlDmLoZpd9nf16zwmakj0gRbtbrXPWq5Z5Q9BwV_FTt8Uc37yFSQRaFu_DWb4U3nGXPC-HyVt_beZlqoFUCFbmddFx0CAZcL8wIQpvhGjep9NvFxiXL0xEJNFg00Pev3dfRyz-Fu3jnoUwkCOMnHKiZiRUjakwgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
esctx-zPiLO8o57lI=AQABCQEAAAAdDD7nC9b5Q7JPd_okEQRFRXZvU3RzQXJ0aWZhY3RzDQAAAAAAy8P6TXXoL_qKDSzQiCkuZAYzUCtZ8wxT_sMkJZz9xvERohqDTTHFahyNLpsGcgCP23llJRcBAYQo6pTPselMWUTM8BxLtW6exnr0H1_JH7fnXcgvpauJh46OLHmetQFm3rQ8vPc2Ks5Xe6eNt9n_LiAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
fpc=Au3lRSeiRllInGPWilZnT7wuSUqJAQAAACpOBuIOAAAA; expires=Sat, 05-Sep-2026 09:43:07 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly

Other Headers

Cross-Origin-Opener-Policy-Report-Only

Other

same-origin; report-to="coop-endpoint"

Date

Other

Thu, 06 Aug 2026 09:43:06 GMT

Link

Other

URL https://aadcdn.msauth.net

rel=preconnect crossorigin

URL https://aadcdn.msauth.net

rel=preconnect crossorigin

URL https://aadcdn.msauth.net

rel=dns-prefetch

URL https://aadcdn.msauth.net

rel=preconnect crossorigin

P3p

Other

CP="DSP CUR OTPi IND OTRi ONL FIN"

Reporting-Endpoints

Other

coop-endpoint="https://coop.msauth.net:443/api/coopReport?client_type=web-msal&client_id=5d70baff-c8b3-4df2-b3dc-c7d921729de7&correlation_id=cdc77a69-9fd5-455e-bc8e-e7593c0e0781&sku=IdNet&version=8.6.1"

X-Dns-Prefetch-Control

Other

on

X-Ms-Clitelem

Other

1,50058,0,,

X-Ms-Ests-Server

Other

2.1.24997.11 - EUS ProdSlices

X-Ms-Request-Id

Other

864be1c3-252f-4ff5-aef8-484576cf1300

X-Ms-Srs

Other

1.P

cross-origin-opener-policy-report-only: same-origin; report-to="coop-endpoint"
date: Thu, 06 Aug 2026 09:43:06 GMT
link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch,<https://aadcdn.msftauth.net>; rel=dns-prefetch
p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
reporting-endpoints: coop-endpoint="https://coop.msauth.net:443/api/coopReport?client_type=web-msal&client_id=5d70baff-c8b3-4df2-b3dc-c7d921729de7&correlation_id=cdc77a69-9fd5-455e-bc8e-e7593c0e0781&sku=IdNet&version=8.6.1"
x-dns-prefetch-control: on
x-ms-clitelem: 1,50058,0,,
x-ms-ests-server: 2.1.24997.11 - EUS ProdSlices
x-ms-request-id: 864be1c3-252f-4ff5-aef8-484576cf1300
x-ms-srs: 1.P

Recommendations

Enable compression (gzip/brotli) to improve performance