HTTP Headers Analysis for https://visio.cloud.microsoft

Detected Technologies from Headers

See all in URL Inspect 5

Azure Application Proxy

AzureFrontDoor

Bing

Microsoft 365

Microsoft Azure

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

object-src; base-uri; script-src; +1 more Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-store, no-cache

Expires

Caching

-1

Pragma

Caching

no-cache

cache-control: no-store, no-cache
expires: -1
pragma: no-cache

Content Headers

Content-Length

Content

60482

Content-Type

Content

text/html; charset=utf-8

content-length: 60482
content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: buid=1.AUYAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoAAABGAA.BgABGgEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzAwAAAAAAIEEVxhwLr3x6i2lAJTYYXDsIw9FU4JL44Fsa76IXkazHNC4a2ZzLo-zr-KGd4Setnz3V5t1cD926EMlsui7N_Aj-BjEfly3A-YmSCrR0oQA0W4Vr3viwiR5ZEHHtPsl70f2FoBV0_BSs2Ty9Qr6Ja_cglyfxG1Lq1VfHWh024qSR25Her94GDyBP6oOPtkUKrn4dQwp3flgpqRo_M7ikE0JUGI8hWa8I9Rwn5iunXLdyKAwh0Ct0O_vFvRlE0qb_T1_Tuuak3FvxRp2RjxjK9xMxP2EB8PDI9c3I1XI1vK28mdXSLlf17rFfEVbo7TCxVqgMLoy2osLV72wWVXOhpNG7x1YqM63pzwn4pDpIqrPy8Sl2kfwF8VqKCuLjNDTgLCnWSwav4nzHAnI9-1SR2N4upztE_rShL3oVUQaK_32PAyNVM9pOFyujANT4z-FhoOzK8jG432sDNmyq4cj8Y5eza5mnfgpL6BP4jU7M-51SchmrIEzpdoAVMvsjU0l-NW0cSqA-yH_63laELBk6pGiAZXI4_te43daMQAx0OdmWaNci-7kqiyurp1UArHzGCUaDFUxf_8D2-OsjEYnHYbkEwWYeOmWHbG0TNwjj3Uv6GgpBilO3TAIS9bJtpuZOCKOkfaEqjTJShbqibniuxPmYYgAeE8xIx1Ywvp9OVscgAA; expires=Sun, 01-Nov-2026 14:47:21 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PBgABBwEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAglUxCCcWo-GSZGsxYq2VePzFracoAy88l-c8U9iWdnYHgiFKvoNFts84d5vzMcXd7jpoDBj_fhZTaWqSTdzYeRdcfczxe7dMduPajUgRe5yr2ALMItl1lvMGwKnEgpAnYsa2nMA9FC5RieLR0t2RJ_lXRqUuYvF6Q40s6liqzna4dpe03mc-uGBkmgKLVn0gu2zjGFxHQRbWcq_bLBq0IFKSFgpvlAGf_iO6OfwNFX2zns83Ks4caDMbD08f8_iYUe9dIdsB1-kCEXlHhjOxcuyQeQ48Es0O-7E-1lwhoKXOI_AGNg8mLEgb8d0UlMPJlwYBW56TxLBiyeP0ANVKVv0gubnUD3SjYnZEXID5RWkwfE5ksM3npIFSSsmSCD2iXxHnQT6mLMlMFIutg_MjFcTacuadehA9-37l97jq_2kR307NpuQeKDzG2CvBZUSTixPlBd7O46asjAwvV89in-jWQ4aRYEw0Og9b8PzhyHETJIqHZhr6_Siin55bw_pq0ZdDNbChgbuCft90wuxf_RGqHk-Q38WQEbB4RhdZ-7G0-Z2vui_0S_dvShWPknzSfTzE-fCYK9zXo8u5Q7H-rKqgMs1hblW0efrjW2oaywi2IfsImJk1KLuD4gkl_vc1E_1YHLe6-SndLHex8hO2vZjqE7fDqczCvKvEy3xnqVdWaS7awA3oOtep2QRDWW3D3kcAUwLxlZgP8nd7ye6gwGhyGtLGgL0eVmy4MOGCxNQgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
esctx-p4D9wqh0yno=AQABCQEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAAweW5Eoc_vxzQNlbq2FpajXsgU1xMocmIVFJjoCyyeGIfsGk45OcEEHlRxxvQO03Ob8qWf7t2DzBN5tCNMyH9HLto2_kXhX1-OMwsbiT20Lysli2rboCegVRrcmf4T50EACA9_dL6kj-JcWBgBQMMiAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
fpc=AgVZXc2chjxJryEcd9gHU7W8Ae7AAQAAAPm6UeIOAAAA; expires=Sun, 01-Nov-2026 14:47:21 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly

Other Headers

Cross-Origin-Opener-Policy-Report-Only

Other

same-origin; report-to="coop-endpoint"

Date

Other

Fri, 02 Oct 2026 14:47:21 GMT

Link

Other

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

URL https://aadcdn.msftauth.net

rel=dns-prefetch

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

P3p

Other

CP="DSP CUR OTPi IND OTRi ONL FIN"

Reporting-Endpoints

Other

coop-endpoint="https://coop.msauth.net:443/api/coopReport?client_type=web-msal&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&correlation_id=6cde44b1-802d-4b6e-9fcb-f3fccb1ad45e&sku=IdNet&version=8.16.0&is1p=1"

X-Dns-Prefetch-Control

Other

on

X-Ms-Clitelem

Other

1,50058,0,,

X-Ms-Ests-Server

Other

2.1.25283.12 - SCUS ProdSlices

X-Ms-Request-Id

Other

c0035d70-f77c-4aee-aae1-9a2224800501

X-Ms-Srs

Other

1.P

cross-origin-opener-policy-report-only: same-origin; report-to="coop-endpoint"
date: Fri, 02 Oct 2026 14:47:21 GMT
link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch,<https://aadcdn.msauth.net>; rel=dns-prefetch
p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
reporting-endpoints: coop-endpoint="https://coop.msauth.net:443/api/coopReport?client_type=web-msal&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&correlation_id=6cde44b1-802d-4b6e-9fcb-f3fccb1ad45e&sku=IdNet&version=8.16.0&is1p=1"
x-dns-prefetch-control: on
x-ms-clitelem: 1,50058,0,,
x-ms-ests-server: 2.1.25283.12 - SCUS ProdSlices
x-ms-request-id: c0035d70-f77c-4aee-aae1-9a2224800501
x-ms-srs: 1.P

Recommendations

Enable compression (gzip/brotli) to improve performance