Results foradvertising.microsoft.com

6 Successes

• content-security-policy: default-src 'self' *.microsoft.com *.windows.net; script-src 'self' *.microsoft.com js.monitor.azure.com assets.adobedtm.com wcpstatic.microsoft.com mem.gfx.ms 'unsafe-inline' 'unsafe-eval' snap.licdn.com *.clarity.ms *.google.com *.gstatic.com 204-kzg-685.mktoweb.com bat.bing.com acdn.adnxs.com *.hsforms.net *.hsforms.com *.amazonaws.com *.azurefd.net admin.microsoft.com adsuxsiwest.blob.core.windows.net *.api.sandbox.ads.microsoft.com *.api.ads.microsoft.com directline.botframework.com petrol-int.office.microsoft.com petrol.office.microsoft.com *.omnichannelengagementhub.com browser.pipe.aria.microsoft.com us-prod.asyncgw.teams.microsoft.com edge.skype.com customervoice.microsoft.com adrecommendation.api.sandbox.ads.microsoft.com adrecommendation.api.ads.microsoft.com res.cdn.office.net *.windows.net *.hsappstatic.net *.hubspotusercontent-na1.net *.hubspotusercontent-eu1.net; style-src 'self' *.microsoft.com 'unsafe-inline' 204-kzg-685.mktoweb.com *.azurefd.net; font-src 'self' c.s-microsoft.com *.microsoft.com res-1.cdn.office.net *.azurefd.net *.gstatic.com *.hubspot.net data:; img-src 'self' data: img-prod-cms-rt-microsoft-com.akamaized.net googleads.g.doubleclick.net www.facebook.com px.ads.linkedin.com *.google.com *.google.co * dev-about.ads.microsoft.com qa-about.ads.microsoft.com about.ads.microsoft.com blob:; connect-src 'self' wss: 'unsafe-inline' *.google.com js.monitor.azure.com assets.adobedtm.com wcpstatic.microsoft.com mem.gfx.ms px.ads.linkedin.com *.hsforms.net *.hsforms.com *.amazonaws.com mscom.demdex.net browser.events.data.microsoft.com d.clarity.ms target.microsoft.com dpm.demdex.net *.clarity.ms/collect bat.bing.com dev-about.ads.microsoft.com qa-about.ads.microsoft.com about-uat.ads.microsoft.com beta-about.ads.microsoft.com about.ads.microsoft.com *.azurefd.net msftenterprise.sc.omtrdc.net westus2-2.in.applicationinsights.azure.com bat.bing.net *.microsoft.com adsuxsiwest.blob.core.windows.net *.api.sandbox.ads.microsoft.com *.api.ads.microsoft.com directline.botframework.com petrol-int.office.microsoft.com petrol.office.microsoft.com *.omnichannelengagementhub.com browser.pipe.aria.microsoft.com us-prod.asyncgw.teams.microsoft.com edge.skype.com comms.omnichannelengagementhub.com *.trouter.skype.com *.communication.azure.com us-prod.asyncgw.teams.microsoft.com adrecommendation.api.sandbox.ads.microsoft.com adrecommendation.api.ads.microsoft.com res.cdn.office.net *.azurewebsites.net; frame-src 'self' *.google.com * 204-kzg-685.mktoweb.com *.microsoft.com; media-src 'self' blob: *.eventbuilder.com dev-about.ads.microsoft.com qa-about.ads.microsoft.com about-uat.ads.microsoft.com beta-about.ads.microsoft.com about.ads.microsoft.com *.windows.net
• x-content-type-options: nosniff
• x-frame-options: SAMEORIGIN
• strict-transport-security: max-age=63072000; includeSubdomains; preload
• HSTS configured with max-age: 63072000 seconds
• HTTPS is enabled