book.ms

Live preview

This site's Content-Security-Policy restricts embedding to specific origins ("frame-ancestors 'self' teams.cloud.microsoft outlook.cloud.microsoft m365.cloud.microsoft 'self' teams.microsoft.com outlook.office.com *.live.com"), which does not include StatsMyWeb.

Since book.ms can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html

Cache-Control

no-cache

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft 'self'; script-src 'nonce-SOeKeflCqk5zA41NLBGKFQ==' *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft amcdn.msftauth.net *.skype.com *.delve.office.com teams.microsoft.com blob: 'report-sample' 'self' js.monitor.azure.com *.public.onecdn.static.microsoft; style-src *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.skype.com fonts.googleapis.com 'self' 'unsafe-inline' 'report-sample' *.engage.cloud.microsoft 'unsafe-inline'; img-src data: blob: cid: *.office.com *.office.net *.office365.com *.public.onecdn.static.microsoft * filesystem: *.public.onecdn.static.microsoft; connect-src blob: data: *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.services.web.outlook.com spoprod-a.akamaihd.net *.bing.com login.live.com *.office.net *.office.com *.office365.com *.officeapps.live.com *.skype.com *.office.de browser.pipe.aria.microsoft.com media.licdn.com *.facebook.com outlook.live.com graph.microsoft.com *.graph.microsoft.com *.users.storage.live.com *.sharepoint.com *.sharepoint.de *.delve.office.com *.loki.delve.office.com web.vortex.data.microsoft.com *.events.data.microsoft.com *.msedge.net teams.microsoft.com *.teams.microsoft.com 'self' *.engage.cloud.microsoft wss://augloop-dogfood.officeppe.com wss://*.augloop-dogfood.officeppe.com wss://augloop-gcc.office.com wss://*.augloop-gcc.office.com wss://augloop.office.com wss://*.augloop.office.com wss://augloop.svc.cloud.microsoft wss://*.augloop.svc.cloud.microsoft aesir.office.com *.oscs.protection.outlook.com *.safelinks.protection.outlook.com arc.msn.com *.dynamics.com *.mos.microsoft.com ris.api.iris.microsoft.com services.bingapis.com prod-autodetect.outlookmobile.com *.googleapis.com admin.microsoft.com *.bpa.microsoft.com teams.cloud.microsoft api.tenor.com attachment.outlook.live.net *.msedge.net app.whiteboard.microsoft.com whiteboard.office.com whiteboard.cloud.microsoft outlook.cloud.microsoft identity.osi.office.net wss://substrate.office.com *.adnxs.com wss://*.trouter.teams.microsoft.com *.cloud.microsoft *.events.data.microsoft.com login.microsoftonline.com eu-office.events.data.microsoft.com; base-uri browser.pipe.aria.microsoft.com 'self'; form-action *.officeapps.live.com *.sharepoint.com login.microsoftonline.com; object-src *.office.net 'self' attachments.office.net attachment.outlook.live.net; frame-ancestors 'self' teams.cloud.microsoft outlook.cloud.microsoft m365.cloud.microsoft 'self' teams.microsoft.com outlook.office.com *.live.com; font-src data: *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft spoprod-a.akamaihd.net *.skype.com sharepointonline.com *.sharepointonline.com *.delve.office.com fonts.gstatic.com static2.sharepointonline.com 'self' *.engage.cloud.microsoft; media-src blob: *.res.office.com *.res.office365.com *.cdn.office.net *.df.onecdn.static.microsoft *.public.onecdn.static.microsoft *.skype.com *.office.net *.office365.net *.office.com ssl.gstatic.com 'self' *.engage.cloud.microsoft attachments.office.net attachment.outlook.live.net *.sharepoint.com; frame-src *.sharepoint-df.com *.sharepoint.com *.sharepoint.de *.yammer.com login.microsoftonline.com outlook.office365.com webshell.suite.office.com www.youtube.com ms-appx-web: 'self' *.office.com *.cdn.office.net; manifest-src outlook.office.com 'self'; worker-src 'self' blob: *.res.office.com *.office.com; child-src 'self' blob: *.office.com; report-uri https://csp.microsoft.com/report/Office365-BookingsWeb-PROD; upgrade-insecure-requests;

Strict-Transport-Security

max-age=31536000; includeSubDomains

X-Frame-Options

Not sent

X-Content-Type-Options

nosniff

Referrer-Policy

no-referrer

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://book.ms/HTTP 301

   → https://bookingsfd-g6bpghh7b3adh2ew.b01.azurefd.net/

2. 2.https://bookingsfd-g6bpghh7b3adh2ew.b01.azurefd.net/HTTP 302

   → https://outlook.office.com/bookings/

3. 3.https://outlook.office.com/bookings/HTTP 302

   → https://bookings.cloud.microsoft/bookings/

4. 4.https://bookings.cloud.microsoft/bookings/HTTP 200

Meta tags

Title

Bookings

Description

Not set

Canonical

Not set

Robots

Not set

Generator

Not set

Open Graph title

Not set

Open Graph description

Not set

Open Graph image

Not set

Open Graph type

Not set

Twitter card

Not set

Twitter title

Not set

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

0

Disallow rules (other agents)

0

No Sitemap declared in robots.txt.

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

Related domains