HTTP Headers Analysis for https://www.sncomps.com

Detected Technologies from Headers

See all in URL Inspect 5

Azure Application Proxy

AzureFrontDoor

Bing

Microsoft 365

Microsoft Azure

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

object-src; base-uri; script-src; +1 more Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-store, no-cache

Expires

Caching

-1

Pragma

Caching

no-cache

cache-control: no-store, no-cache
expires: -1
pragma: no-cache

Content Headers

Content-Length

Content

44302

Content-Type

Content

text/html; charset=utf-8

content-length: 44302
content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: buid=1.AagAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAAAAACoAA.BgABGgEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzAwAAAAAAQM_JMt_2v2_zJffiGevEgRHF8DxKelBUpeaI6kmiLz0gk1FNef_A7Bb-sNzlqUXNr7EqpZHSbYv4_vV6fRpleH1JI0TxUpzUevLJipUL9dMKtZkyvSLFw8Nzd7x6xjPwtHmDRE3LVQBUgUq6fkSG8hmIgEjdjlIehfpGO-As3gQDEeyblakOqCnlVbPIgIz6eHUh6MDa0_TpjYf7EIYt6hRrqa6CPiZn94vRTyUhXTiM2GCoN8gCBAXKMaUxydLkvGf9zDxrbgzIDnmYhvUp40tQdSBIz9AJsYZVv-Bf9434et79hNPd-zweR3ChtN4BwuP82RWvjwc9G1Cn3l6aRqqZrg-32X_K_Lzv7vVsPeYofmnOUf706AojsPimszfbn0ud7uICm7oEd6CqrgdRpSvflZM4O0JomwWHu8-VSKqqIWH_dspHArlTXDUq2Zp6CyxnEMgkgYzK_tnywRep7uaBEYyn47O-wqjoTgFaKfQsCQ2iU6xMxNWDIlZlkn8lBofAFi-IxKKnysjfMu14XLJgjRcnP6jTk5HndhR4_je7OhTGcJYyfDwTHtpSqZGBwrsNXS5p_1TccHJeCtY1e4bOZEOswG7I8WJp24CY8JLEvBJlJPDvSyinoECTYmPhS-Sm2TDpb_iiyXs6AmnQ-dI1ynIMDrOi5EHhpHGVImkgAA; expires=Tue, 06-Oct-2026 04:41:40 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PBgABBwEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAzHJJIy0avH-oxRZisyOsHujzyklxST0fEEdO4tC2U6E4nG2vI2ahnKrQ8b7w1C4BLUs_pSaG6CBbjQK66QuXIsf-rlieltv6qp46j6o6ydLohmsCbh6JZmWktbv7vKS2vfAFGW3PVOV5Lur-hh5cuhZFHvCmgRs8U0AgitkWoS5h8GJl55BZYxI52dDN_ZOhqrGBAsZyHJ5BguH3WVO954rxim2LsBeghVA_Xx7dwib0vUD9kkYn6JzeIEWUPHqdr4yUeTIk625hXIe5Rq_YgZvQYEGKq1VUN42QqgBTp48BHU7FfJA7zT08ygCQ3PGW9Rk4HvyDZxAq7xqdGMjqktOLuvhXsyuBi--PIiPLlXI_PbeqImDJEp3a9M-D_4Iypk3nevv7_7nbinRNUTvdCDaa4Dc8_OkCFCU5ToKeNl7VPkaj69pHxBtXlHRtb2QkIUIJPwi6-6VOIKkymorLMvi5MULVAz9ukNKReLNAcnunSgY9efgJT-XtpkXhIU7UxBdiOWmiliUhADaLI8Y7McRWy6N0SiUkWFf_yYcsZn_Pqu1PreUhOX8EgWUGYairgoKZrxmiTe_ydZufwLvw8qVQPJ3z0Lyxk0l_vSILzn5nXtpavRk-vZG10VOtZ_Pfdt547pimWz2Cq6uaca3KdgBupSIATF8i5ASjSUBkgJe5DMH1Crp6liWi9g9rUSPSCzPPrXcX_sgvr2tCj90MSb_kelen5ToiKFG8XrjjDjUgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
esctx-AbkEaVqcNGI=AQABCQEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAQiB7g0zlryBpMhuCBX6Stkds4zl0mfXsdBL7Ma4qPyM6PQg2ThXqGlltGzZzxtNB6dop17Bm2t6xUmpsmCgT-e5qYeAGdoubNmn_6HZqY6uTCF5HJE0YOMedgihKJfnGBiRDQ2VAgB_qO1B0VI6OHiAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
fpc=AkFPdu6TWp5Nj1aSbP7ux4KerOTJAQAAAAPmLuIOAAAA; expires=Tue, 06-Oct-2026 04:41:40 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly

Other Headers

Cross-Origin-Opener-Policy-Report-Only

Other

same-origin; report-to="coop-endpoint"

Date

Other

Sun, 06 Sep 2026 04:41:39 GMT

Link

Other

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

URL https://aadcdn.msftauth.net

rel=dns-prefetch

URL https://aadcdn.msftauth.net

rel=preconnect crossorigin

P3p

Other

CP="DSP CUR OTPi IND OTRi ONL FIN"

Reporting-Endpoints

Other

coop-endpoint="https://coop.msauth.net:443/api/coopReport?client_type=none-none&client_id=00000002-0000-0ff1-ce00-000000000000&correlation_id=1d9ee1c2-5a40-4126-a0b9-157dfe9b5e32&is1p=1"

X-Dns-Prefetch-Control

Other

on

X-Ms-Ests-Server

Other

2.1.25204.3 - SCUS ProdSlices

X-Ms-Request-Id

Other

2317633e-51fd-4dd0-9dde-a396c20bf200

X-Ms-Srs

Other

1.P

cross-origin-opener-policy-report-only: same-origin; report-to="coop-endpoint"
date: Sun, 06 Sep 2026 04:41:39 GMT
link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch,<https://aadcdn.msauth.net>; rel=dns-prefetch
p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
reporting-endpoints: coop-endpoint="https://coop.msauth.net:443/api/coopReport?client_type=none-none&client_id=00000002-0000-0ff1-ce00-000000000000&correlation_id=1d9ee1c2-5a40-4126-a0b9-157dfe9b5e32&is1p=1"
x-dns-prefetch-control: on
x-ms-ests-server: 2.1.25204.3 - SCUS ProdSlices
x-ms-request-id: 2317633e-51fd-4dd0-9dde-a396c20bf200
x-ms-srs: 1.P

Recommendations

Enable compression (gzip/brotli) to improve performance