Checking results for: www.onenote.com
-
www.onenote.com is ONLINE
Additional info for https://www.onenote.com
Technical Information
| HTTP Status Code | 200 |
|---|---|
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 150.171.110.117 |
| CDN | CDN detected (Server-Timing) |
| Compression | gzip |
| ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 150.171.110.117
CDN CDN detected (Server-Timing)
Compression gzip
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 150.171.110.117
CDN CDN detected (Server-Timing)
Compression gzip
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
|---|---|---|---|
| 1 | https://www.onenote.com:443 | 307 | HTTP/2 307 |
| 2 | https://onenote.cloud.microsoft/ | 200 | HTTP/2 200 |
#1 URL https://www.onenote.com:443
HTTP Status Code 307
Status HTTP/2 307
#2 URL https://onenote.cloud.microsoft/
HTTP Status Code 200
Status HTTP/2 200
HTTP Status Code 307
Status HTTP/2 307
#2 URL https://onenote.cloud.microsoft/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 103.6 ms |
|---|---|
| TCP Connect | 121.7 ms |
| TLS Handshake | 51.1 ms |
| Time To First Byte (TTFB) | 215.1 ms |
| Content Download | 0.5 ms |
| Total Response Time | 215.6 ms |
DNS Lookup 103.6 ms
TCP Connect 121.7 ms
TLS Handshake 51.1 ms
Time To First Byte (TTFB) 215.1 ms
Content Download 0.5 ms
Total Response Time 215.6 ms
TCP Connect 121.7 ms
TLS Handshake 51.1 ms
Time To First Byte (TTFB) 215.1 ms
Content Download 0.5 ms
Total Response Time 215.6 ms
Security
| HTTPS | ✔ Enabled |
|---|---|
| HSTS | ✔ max-age=31536000; includeSubDomains |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ⚠ Not configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000; includeSubDomains
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ⚠ Not configured
HTTP/2 ⚠ HTTP/1.1
HSTS ✔ max-age=31536000; includeSubDomains
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ⚠ Not configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Take notes anywhere for free | Microsoft OneNote for the Web |
|---|---|
| Meta Description | Capture your ideas with Microsoft OneNote online. Organize notes, clip web content, and collaborate with others from any device. |
| Canonical | https://onenote.cloud.microsoft/en-us/ |
| Open Graph Image | https://res.cdn.office.net/apphome/onenoteogimage.png |
Title Take notes anywhere for free | Microsoft OneNote for the Web
Meta Description Capture your ideas with Microsoft OneNote online. Organize notes, clip web content, and collaborate with others from any device.
Canonical https://onenote.cloud.microsoft/en-us/
Open Graph Image https://res.cdn.office.net/apphome/onenoteogimage.png
Meta Description Capture your ideas with Microsoft OneNote online. Organize notes, clip web content, and collaborate with others from any device.
Canonical https://onenote.cloud.microsoft/en-us/
Open Graph Image https://res.cdn.office.net/apphome/onenoteogimage.png
Detected Technologies
| Technology | Google Analytics |
|---|
Technology Google Analytics
HTTP Headers
| Cache-control | max-age=300 |
|---|---|
| Content-length | 24154 |
| Content-type | text/html |
| Content-encoding | gzip |
| Last-modified | Mon, 20 Jul 2026 10:45:38 GMT |
| Vary | Accept-Encoding |
| X-ms-request-id | 1312761e-101e-0062-0a34-183db0000000 |
| Akamai-request-bc | [a=2.18.251.97,b=891866934,c=g,n=FR_IDF_PARIS,o=20940] |
| Ak-network | FF |
| Report-to | {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=PARIS&ASN=20940&Country=FR&Region=IDF&RequestIdentifier=0.61fb1202.1784720988.3528cf36&TotalRTCDNTime=17&CompressionType=gzip&FileSize=24154"}],"include_subdomains ":true} |
| Nel | {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} |
| Server-timing | clientrtt; dur=17, clienttt; dur=, origin; dur=0 , cdntime; dur=0 |
| Akamai-cache-status | Hit from child |
| Timing-allow-origin | * |
| Access-control-expose-headers | date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id |
| Access-control-allow-origin | * |
| Strict-transport-security | max-age=31536000; includeSubDomains |
| X-cdn-provider | Akamai |
| X-cache | CONFIG_NOCACHE |
| Content-security-policy | script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' 'wasm-unsafe-eval' *.cdn.office.net *.public.onecdn.static.microsoft *.office.com aadcdn.msauth.net aadcdn.msftauth.net blob: https: https://a-ring.msedge.net https://amcdn.msauth.net https://amcdn.msftauth.net https://b-ring.msedge.net https://graph.microsoft.com https://gtm-dyn-direct.office365.com https://js.monitor.azure.com https://k-ring.msedge.net https://outlook.live.com https://outlook.office.com https://ow1.res.office365.com https://partner.dev.oasis.microsoft.com https://r4.res.office365.com https://s-ring.msedge.net https://web.vortex.data.microsoft.com https://webshell.suite.office.com https://webshell.suite.officeppe.com res.cdn.office.net;style-src 'report-sample' 'self' 'unsafe-inline' *.cdn.office.net *.fluidpreview.office.net *.microsoft.com https://www.microsoft.com/ res-dev.cdn.officeppe.net res.public.onecdn.static.microsoft;default-src 'self' *.cdn.office.net *.public.onecdn.static.microsoft cdn.fluidpreview.office.net https://midgardbranches.blob.core.windows.net res-dev.cdn.officeppe.net res.cdn.office.net res.public.onecdn.static.microsoft;img-src 'self' *.augloop.svc.cloud.microsoft *.cdn.office.net *.clipchamp.com *.create.microsoft.com *.loki.delve.office.com *.oasis.microsoft.com *.onecdn.static.microsoft *.osi.office.net *.osi.officeppe.net *.public.onecdn.static.microsoft *.s-microsoft.com *.sharepointonline.com *.svc.ms aadcdn.msftauthimages.net az787822.vo.msecnd.net blob: browser.events.data.microsoft.com cdn.create.microsoft.com cdn.designerapp.osi.office.net cdn.hubblecontent.osi.office.net clipchamp.df.onecdn.static.microsoft clipchamp.public.onecdn.static.microsoft content.lifecycle.office.net content.lifecycle.officeppe.net content.powerapps.com copilotstudio.preview.microsoft.com data: designer.cloud.microsoft designer.microsoft.com designerapp.edog.officeapps.live.com designerapp.officeapps.live.com forms.office.com https://outlook.office.com https://sdfpilot.outlook.com https://webshell.suite.office.com m365.cloud.microsoft measure.office.com media.licdn.com outlook-1.cdn.office.net pmservices.cp.microsoft.com powerautomate.microsoft.com preview.content.powerapps.com prod.msocdn.com prodapiicons.cdn.powerappscdn.net res-1.cdn.office.net res-dev.cdn.officeppe.net res.cdn.office.net res.public.onecdn.static.microsoft.com secure.aadcdn.microsoftonline-p.com spoprod-a.akamaihd.net static2.sharepointonline.com staticresources.payments.microsoft.com statics.teams.cdn.office.net substrate.office.com tip1apiicons.cdn.powerappscdn.net tip2apiicons.cdn.powerappscdn.net www.microsoft365.com;connect-src 'self' *.augloop.svc.cloud.microsoft *.cdn.office.net *.collabhubrtc.officeapps.live.com *.public.onecdn.static.microsoft *.microsoft.com *.office.com *.office365.com *.officeapps.live.com *.rtc.svc.cloud.microsoft *.sharepoint-df.com *.sharepoint.com *.svc.ms arc-emea.msn.com arc.msn.com blob: data: https: https://admin.microsoft.com https://api.onedrive.com https://artifacts.dev.azure.com https://browser.events.data.microsoft.com https://browser.pipe.aria.microsoft.com https://cdn.config.centro.core.microsoft https://clients.config.gcc.office.net https://clients.config.office.net https://config.edge.skype.com https://config.edge.skype.net https://consentreceiverfd-prod.azurefd.net https://eu-mobile.events.data.microsoft.com https://eu-office.events.data.microsoft.com https://graph.microsoft.com https://login.microsoftonline.com https://my.microsoftpersonalcontent.com https://nleditor.osi.officeppe.net https://odc.edog.officeapps.live.com https://outlook.cloud.microsoft https://petrol-int.office.microsoft.com https://petrol.office.microsoft.com https://pp1.prd.bmc.teams.microsoft.com https://teams.cloud.microsoft https://titles.prod.mos.microsoft.com res-dev.cdn.officeppe.net res.cdn.office.net wss: wss://*.augloop.office.com wss://*.augloop-gcc.office.com wss://*.dogfood.augloop.svc.cloud.microsoft wss://*.gcc.augloop.svc.cloud.microsoft wss://*.trouter.teams.microsoft.com wss://augloop.office.com wss://augloop.svc.cloud.microsoft wss://gcc.augloop.svc.cloud.microsoft wss://substrate.office.com;font-src 'self' 'unsafe-inline' *.azureedge.net *.cdn.office.net *.public.onecdn.static.microsoft *.fluidpreview.office.net *.sharepointonline.com cdn.create.microsoft.com data: fs.microsoft.com https://c.s-microsoft.com prod.msocdn.com res-dev.cdn.officeppe.net res.cdn.office.net res.public.onecdn.static.microsoft sharepointonline.com spoprod-a.akamaihd.net;frame-ancestors 'self' data: https://support.office.com;frame-src 'self' * *.cdn.office.net *.oasis.microsoft.com *.office.com *.officeapps.live.com *.sharepoint-df.com *.sharepoint.com blob: https://amcdn.msftauth.net https://create.cloud.microsoft https://create.microsoft.com https://login.live.com https://login.microsoftonline.com https://microsoft-onmicrosoft-com.access.mcas.ms https://my.microsoftpersonalcontent.com https://onedrive.live.com https://webshell.suite.officeppe.com https://www.odwebp.svc.ms ms-excel: ms-powerpoint: ms-word: onenote:;upgrade-insecure-requests;media-src 'self' https://*.sharepoint-df.com https://*.sharepoint.com blob: data: *.cdn.office.net *.azureedge.net *.core.windows.net *.clipchamp.com *.oasis.microsoft.com *.create.microsoft.com;manifest-src 'self';child-src blob:;object-src 'none';form-action https://*;worker-src 'self' blob:;trusted-types 'allow-duplicates' 1DSScriptURL @1js/midgard-trusted-types @azure/ms-rest-js#xml.browser @centro/floodgate @centro/hvc-loader @fluidx/loop @fluidx/loop#loop-app @fluidx/loop#loop-page-container @fluidx/loop#odsp-driver @fluidx/loop#office-fluid-container @microsoft/1ds-getcollectorurlsnippet-js#sanitize-html @msstream/azuremediaplayer#worker-noop @msstream/one-player#noop-create-html @msteams/embed-client @msstream/one-player#sanitize-html MeControlScriptURL cdn-url#oneshell default domPurifyHTML domUtilsTrustedTypePolicy dompurify html2canvas html2canvas-feedback nextjs nextjs#bundler ocvPolicy officebrowserfeedback#domUtils safe-xml#oneshell sccChatTrustedTypesPolicy sccEntityDrawerTrustedTypesPolicy script-url#webpack shellInfoPolicy;report-uri https://csp.microsoft.com/report/OfficeAppHome-PROD;report-to AppHomeReportToEndpoint |
| Reporting-endpoints | AppHomeReportToEndpoint="https://csp.microsoft.com/report/OfficeAppHome-PROD" |
| X-msedge-ref | Ref A: 412902D6442D4355B3DA685FDB226BB1 Ref B: VIEAA3060302027 Ref C: 2026-07-22T11:49:48Z |
| Date | Wed, 22 Jul 2026 11:49:47 GMT |
Meta Tags
| Application-name | Microsoft OneNote |
|---|---|
| Apple-mobile-web-app-title | Microsoft OneNote |
| Description | Capture your ideas with Microsoft OneNote online. Organize notes, clip web content, and collaborate with others from any device. |
| Msvalidate.01 | 803A3C9BF0E708C68400C2BCE72CF8FE |
| Origin-trial | AnfyPEpysp70/3OJZUa9ehYTTSqueH2hAh/My7kswH47i+T0+fDoLzU6xmH5+n6b9JzPgEKqi96hwKa8v0jpJwQAAAB8eyJvcmlnaW4iOiJodHRwczovL2Nsb3VkLWRldi5taWNyb3NvZnQ6NDQzIiwiZmVhdHVyZSI6IlByZXJlbmRlcjJDcm9zc09yaWdpbklmcmFtZXMiLCJleHBpcnkiOjE3OTAwMzUyMDAsImlzU3ViZG9tYWluIjp0cnVlfQ== |
| Viewport | width=device-width,initial-scale=1 |
Cache-control max-age=300
Content-length 24154
Content-type text/html
Content-encoding gzip
Last-modified Mon, 20 Jul 2026 10:45:38 GMT
Vary Accept-Encoding
X-ms-request-id 1312761e-101e-0062-0a34-183db0000000
Akamai-request-bc [a=2.18.251.97,b=891866934,c=g,n=FR_IDF_PARIS,o=20940]
Ak-network FF
Report-to {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=PARIS&ASN=20940&Country=FR&Region=IDF&RequestIdentifier=0.61fb1202.1784720988.3528cf36&TotalRTCDNTime=17&CompressionType=gzip&FileSize=24154"}],"include_subdomains ":true}
Nel {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
Server-timing clientrtt; dur=17, clienttt; dur=, origin; dur=0 , cdntime; dur=0
Akamai-cache-status Hit from child
Timing-allow-origin *
Access-control-expose-headers date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
Access-control-allow-origin *
Strict-transport-security max-age=31536000; includeSubDomains
X-cdn-provider Akamai
X-cache CONFIG_NOCACHE
Content-security-policy script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' 'wasm-unsafe-eval' *.cdn.office.net *.public.onecdn.static.microsoft *.office.com aadcdn.msauth.net aadcdn.msftauth.net blob: https: https://a-ring.msedge.net https://amcdn.msauth.net https://amcdn.msftauth.net https://b-ring.msedge.net https://graph.microsoft.com https://gtm-dyn-direct.office365.com https://js.monitor.azure.com https://k-ring.msedge.net https://outlook.live.com https://outlook.office.com https://ow1.res.office365.com https://partner.dev.oasis.microsoft.com https://r4.res.office365.com https://s-ring.msedge.net https://web.vortex.data.microsoft.com https://webshell.suite.office.com https://webshell.suite.officeppe.com res.cdn.office.net;style-src 'report-sample' 'self' 'unsafe-inline' *.cdn.office.net *.fluidpreview.office.net *.microsoft.com https://www.microsoft.com/ res-dev.cdn.officeppe.net res.public.onecdn.static.microsoft;default-src 'self' *.cdn.office.net *.public.onecdn.static.microsoft cdn.fluidpreview.office.net https://midgardbranches.blob.core.windows.net res-dev.cdn.officeppe.net res.cdn.office.net res.public.onecdn.static.microsoft;img-src 'self' *.augloop.svc.cloud.microsoft *.cdn.office.net *.clipchamp.com *.create.microsoft.com *.loki.delve.office.com *.oasis.microsoft.com *.onecdn.static.microsoft *.osi.office.net *.osi.officeppe.net *.public.onecdn.static.microsoft *.s-microsoft.com *.sharepointonline.com *.svc.ms aadcdn.msftauthimages.net az787822.vo.msecnd.net blob: browser.events.data.microsoft.com cdn.create.microsoft.com cdn.designerapp.osi.office.net cdn.hubblecontent.osi.office.net clipchamp.df.onecdn.static.microsoft clipchamp.public.onecdn.static.microsoft content.lifecycle.office.net content.lifecycle.officeppe.net content.powerapps.com copilotstudio.preview.microsoft.com data: designer.cloud.microsoft designer.microsoft.com designerapp.edog.officeapps.live.com designerapp.officeapps.live.com forms.office.com https://outlook.office.com https://sdfpilot.outlook.com https://webshell.suite.office.com m365.cloud.microsoft measure.office.com media.licdn.com outlook-1.cdn.office.net pmservices.cp.microsoft.com powerautomate.microsoft.com preview.content.powerapps.com prod.msocdn.com prodapiicons.cdn.powerappscdn.net res-1.cdn.office.net res-dev.cdn.officeppe.net res.cdn.office.net res.public.onecdn.static.microsoft.com secure.aadcdn.microsoftonline-p.com spoprod-a.akamaihd.net static2.sharepointonline.com staticresources.payments.microsoft.com statics.teams.cdn.office.net substrate.office.com tip1apiicons.cdn.powerappscdn.net tip2apiicons.cdn.powerappscdn.net www.microsoft365.com;connect-src 'self' *.augloop.svc.cloud.microsoft *.cdn.office.net *.collabhubrtc.officeapps.live.com *.public.onecdn.static.microsoft *.microsoft.com *.office.com *.office365.com *.officeapps.live.com *.rtc.svc.cloud.microsoft *.sharepoint-df.com *.sharepoint.com *.svc.ms arc-emea.msn.com arc.msn.com blob: data: https: https://admin.microsoft.com https://api.onedrive.com https://artifacts.dev.azure.com https://browser.events.data.microsoft.com https://browser.pipe.aria.microsoft.com https://cdn.config.centro.core.microsoft https://clients.config.gcc.office.net https://clients.config.office.net https://config.edge.skype.com https://config.edge.skype.net https://consentreceiverfd-prod.azurefd.net https://eu-mobile.events.data.microsoft.com https://eu-office.events.data.microsoft.com https://graph.microsoft.com https://login.microsoftonline.com https://my.microsoftpersonalcontent.com https://nleditor.osi.officeppe.net https://odc.edog.officeapps.live.com https://outlook.cloud.microsoft https://petrol-int.office.microsoft.com https://petrol.office.microsoft.com https://pp1.prd.bmc.teams.microsoft.com https://teams.cloud.microsoft https://titles.prod.mos.microsoft.com res-dev.cdn.officeppe.net res.cdn.office.net wss: wss://*.augloop.office.com wss://*.augloop-gcc.office.com wss://*.dogfood.augloop.svc.cloud.microsoft wss://*.gcc.augloop.svc.cloud.microsoft wss://*.trouter.teams.microsoft.com wss://augloop.office.com wss://augloop.svc.cloud.microsoft wss://gcc.augloop.svc.cloud.microsoft wss://substrate.office.com;font-src 'self' 'unsafe-inline' *.azureedge.net *.cdn.office.net *.public.onecdn.static.microsoft *.fluidpreview.office.net *.sharepointonline.com cdn.create.microsoft.com data: fs.microsoft.com https://c.s-microsoft.com prod.msocdn.com res-dev.cdn.officeppe.net res.cdn.office.net res.public.onecdn.static.microsoft sharepointonline.com spoprod-a.akamaihd.net;frame-ancestors 'self' data: https://support.office.com;frame-src 'self' * *.cdn.office.net *.oasis.microsoft.com *.office.com *.officeapps.live.com *.sharepoint-df.com *.sharepoint.com blob: https://amcdn.msftauth.net https://create.cloud.microsoft https://create.microsoft.com https://login.live.com https://login.microsoftonline.com https://microsoft-onmicrosoft-com.access.mcas.ms https://my.microsoftpersonalcontent.com https://onedrive.live.com https://webshell.suite.officeppe.com https://www.odwebp.svc.ms ms-excel: ms-powerpoint: ms-word: onenote:;upgrade-insecure-requests;media-src 'self' https://*.sharepoint-df.com https://*.sharepoint.com blob: data: *.cdn.office.net *.azureedge.net *.core.windows.net *.clipchamp.com *.oasis.microsoft.com *.create.microsoft.com;manifest-src 'self';child-src blob:;object-src 'none';form-action https://*;worker-src 'self' blob:;trusted-types 'allow-duplicates' 1DSScriptURL @1js/midgard-trusted-types @azure/ms-rest-js#xml.browser @centro/floodgate @centro/hvc-loader @fluidx/loop @fluidx/loop#loop-app @fluidx/loop#loop-page-container @fluidx/loop#odsp-driver @fluidx/loop#office-fluid-container @microsoft/1ds-getcollectorurlsnippet-js#sanitize-html @msstream/azuremediaplayer#worker-noop @msstream/one-player#noop-create-html @msteams/embed-client @msstream/one-player#sanitize-html MeControlScriptURL cdn-url#oneshell default domPurifyHTML domUtilsTrustedTypePolicy dompurify html2canvas html2canvas-feedback nextjs nextjs#bundler ocvPolicy officebrowserfeedback#domUtils safe-xml#oneshell sccChatTrustedTypesPolicy sccEntityDrawerTrustedTypesPolicy script-url#webpack shellInfoPolicy;report-uri https://csp.microsoft.com/report/OfficeAppHome-PROD;report-to AppHomeReportToEndpoint
Reporting-endpoints AppHomeReportToEndpoint="https://csp.microsoft.com/report/OfficeAppHome-PROD"
X-msedge-ref Ref A: 412902D6442D4355B3DA685FDB226BB1 Ref B: VIEAA3060302027 Ref C: 2026-07-22T11:49:48Z
Date Wed, 22 Jul 2026 11:49:47 GMT
Content-length 24154
Content-type text/html
Content-encoding gzip
Last-modified Mon, 20 Jul 2026 10:45:38 GMT
Vary Accept-Encoding
X-ms-request-id 1312761e-101e-0062-0a34-183db0000000
Akamai-request-bc [a=2.18.251.97,b=891866934,c=g,n=FR_IDF_PARIS,o=20940]
Ak-network FF
Report-to {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=PARIS&ASN=20940&Country=FR&Region=IDF&RequestIdentifier=0.61fb1202.1784720988.3528cf36&TotalRTCDNTime=17&CompressionType=gzip&FileSize=24154"}],"include_subdomains ":true}
Nel {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}
Server-timing clientrtt; dur=17, clienttt; dur=, origin; dur=0 , cdntime; dur=0
Akamai-cache-status Hit from child
Timing-allow-origin *
Access-control-expose-headers date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id
Access-control-allow-origin *
Strict-transport-security max-age=31536000; includeSubDomains
X-cdn-provider Akamai
X-cache CONFIG_NOCACHE
Content-security-policy script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' 'wasm-unsafe-eval' *.cdn.office.net *.public.onecdn.static.microsoft *.office.com aadcdn.msauth.net aadcdn.msftauth.net blob: https: https://a-ring.msedge.net https://amcdn.msauth.net https://amcdn.msftauth.net https://b-ring.msedge.net https://graph.microsoft.com https://gtm-dyn-direct.office365.com https://js.monitor.azure.com https://k-ring.msedge.net https://outlook.live.com https://outlook.office.com https://ow1.res.office365.com https://partner.dev.oasis.microsoft.com https://r4.res.office365.com https://s-ring.msedge.net https://web.vortex.data.microsoft.com https://webshell.suite.office.com https://webshell.suite.officeppe.com res.cdn.office.net;style-src 'report-sample' 'self' 'unsafe-inline' *.cdn.office.net *.fluidpreview.office.net *.microsoft.com https://www.microsoft.com/ res-dev.cdn.officeppe.net res.public.onecdn.static.microsoft;default-src 'self' *.cdn.office.net *.public.onecdn.static.microsoft cdn.fluidpreview.office.net https://midgardbranches.blob.core.windows.net res-dev.cdn.officeppe.net res.cdn.office.net res.public.onecdn.static.microsoft;img-src 'self' *.augloop.svc.cloud.microsoft *.cdn.office.net *.clipchamp.com *.create.microsoft.com *.loki.delve.office.com *.oasis.microsoft.com *.onecdn.static.microsoft *.osi.office.net *.osi.officeppe.net *.public.onecdn.static.microsoft *.s-microsoft.com *.sharepointonline.com *.svc.ms aadcdn.msftauthimages.net az787822.vo.msecnd.net blob: browser.events.data.microsoft.com cdn.create.microsoft.com cdn.designerapp.osi.office.net cdn.hubblecontent.osi.office.net clipchamp.df.onecdn.static.microsoft clipchamp.public.onecdn.static.microsoft content.lifecycle.office.net content.lifecycle.officeppe.net content.powerapps.com copilotstudio.preview.microsoft.com data: designer.cloud.microsoft designer.microsoft.com designerapp.edog.officeapps.live.com designerapp.officeapps.live.com forms.office.com https://outlook.office.com https://sdfpilot.outlook.com https://webshell.suite.office.com m365.cloud.microsoft measure.office.com media.licdn.com outlook-1.cdn.office.net pmservices.cp.microsoft.com powerautomate.microsoft.com preview.content.powerapps.com prod.msocdn.com prodapiicons.cdn.powerappscdn.net res-1.cdn.office.net res-dev.cdn.officeppe.net res.cdn.office.net res.public.onecdn.static.microsoft.com secure.aadcdn.microsoftonline-p.com spoprod-a.akamaihd.net static2.sharepointonline.com staticresources.payments.microsoft.com statics.teams.cdn.office.net substrate.office.com tip1apiicons.cdn.powerappscdn.net tip2apiicons.cdn.powerappscdn.net www.microsoft365.com;connect-src 'self' *.augloop.svc.cloud.microsoft *.cdn.office.net *.collabhubrtc.officeapps.live.com *.public.onecdn.static.microsoft *.microsoft.com *.office.com *.office365.com *.officeapps.live.com *.rtc.svc.cloud.microsoft *.sharepoint-df.com *.sharepoint.com *.svc.ms arc-emea.msn.com arc.msn.com blob: data: https: https://admin.microsoft.com https://api.onedrive.com https://artifacts.dev.azure.com https://browser.events.data.microsoft.com https://browser.pipe.aria.microsoft.com https://cdn.config.centro.core.microsoft https://clients.config.gcc.office.net https://clients.config.office.net https://config.edge.skype.com https://config.edge.skype.net https://consentreceiverfd-prod.azurefd.net https://eu-mobile.events.data.microsoft.com https://eu-office.events.data.microsoft.com https://graph.microsoft.com https://login.microsoftonline.com https://my.microsoftpersonalcontent.com https://nleditor.osi.officeppe.net https://odc.edog.officeapps.live.com https://outlook.cloud.microsoft https://petrol-int.office.microsoft.com https://petrol.office.microsoft.com https://pp1.prd.bmc.teams.microsoft.com https://teams.cloud.microsoft https://titles.prod.mos.microsoft.com res-dev.cdn.officeppe.net res.cdn.office.net wss: wss://*.augloop.office.com wss://*.augloop-gcc.office.com wss://*.dogfood.augloop.svc.cloud.microsoft wss://*.gcc.augloop.svc.cloud.microsoft wss://*.trouter.teams.microsoft.com wss://augloop.office.com wss://augloop.svc.cloud.microsoft wss://gcc.augloop.svc.cloud.microsoft wss://substrate.office.com;font-src 'self' 'unsafe-inline' *.azureedge.net *.cdn.office.net *.public.onecdn.static.microsoft *.fluidpreview.office.net *.sharepointonline.com cdn.create.microsoft.com data: fs.microsoft.com https://c.s-microsoft.com prod.msocdn.com res-dev.cdn.officeppe.net res.cdn.office.net res.public.onecdn.static.microsoft sharepointonline.com spoprod-a.akamaihd.net;frame-ancestors 'self' data: https://support.office.com;frame-src 'self' * *.cdn.office.net *.oasis.microsoft.com *.office.com *.officeapps.live.com *.sharepoint-df.com *.sharepoint.com blob: https://amcdn.msftauth.net https://create.cloud.microsoft https://create.microsoft.com https://login.live.com https://login.microsoftonline.com https://microsoft-onmicrosoft-com.access.mcas.ms https://my.microsoftpersonalcontent.com https://onedrive.live.com https://webshell.suite.officeppe.com https://www.odwebp.svc.ms ms-excel: ms-powerpoint: ms-word: onenote:;upgrade-insecure-requests;media-src 'self' https://*.sharepoint-df.com https://*.sharepoint.com blob: data: *.cdn.office.net *.azureedge.net *.core.windows.net *.clipchamp.com *.oasis.microsoft.com *.create.microsoft.com;manifest-src 'self';child-src blob:;object-src 'none';form-action https://*;worker-src 'self' blob:;trusted-types 'allow-duplicates' 1DSScriptURL @1js/midgard-trusted-types @azure/ms-rest-js#xml.browser @centro/floodgate @centro/hvc-loader @fluidx/loop @fluidx/loop#loop-app @fluidx/loop#loop-page-container @fluidx/loop#odsp-driver @fluidx/loop#office-fluid-container @microsoft/1ds-getcollectorurlsnippet-js#sanitize-html @msstream/azuremediaplayer#worker-noop @msstream/one-player#noop-create-html @msteams/embed-client @msstream/one-player#sanitize-html MeControlScriptURL cdn-url#oneshell default domPurifyHTML domUtilsTrustedTypePolicy dompurify html2canvas html2canvas-feedback nextjs nextjs#bundler ocvPolicy officebrowserfeedback#domUtils safe-xml#oneshell sccChatTrustedTypesPolicy sccEntityDrawerTrustedTypesPolicy script-url#webpack shellInfoPolicy;report-uri https://csp.microsoft.com/report/OfficeAppHome-PROD;report-to AppHomeReportToEndpoint
Reporting-endpoints AppHomeReportToEndpoint="https://csp.microsoft.com/report/OfficeAppHome-PROD"
X-msedge-ref Ref A: 412902D6442D4355B3DA685FDB226BB1 Ref B: VIEAA3060302027 Ref C: 2026-07-22T11:49:48Z
Date Wed, 22 Jul 2026 11:49:47 GMT
Application-name Microsoft OneNote
Apple-mobile-web-app-title Microsoft OneNote
Description Capture your ideas with Microsoft OneNote online. Organize notes, clip web content, and collaborate with others from any device.
Og:image
Og:image:width 1200
Og:image:height 628
Og:type website
Og:site_name Microsoft OneNote Online
Msvalidate.01 803A3C9BF0E708C68400C2BCE72CF8FE
Origin-trial AnfyPEpysp70/3OJZUa9ehYTTSqueH2hAh/My7kswH47i+T0+fDoLzU6xmH5+n6b9JzPgEKqi96hwKa8v0jpJwQAAAB8eyJvcmlnaW4iOiJodHRwczovL2Nsb3VkLWRldi5taWNyb3NvZnQ6NDQzIiwiZmVhdHVyZSI6IlByZXJlbmRlcjJDcm9zc09yaWdpbklmcmFtZXMiLCJleHBpcnkiOjE3OTAwMzUyMDAsImlzU3ViZG9tYWluIjp0cnVlfQ==
Viewport width=device-width,initial-scale=1
Apple-mobile-web-app-title Microsoft OneNote
Description Capture your ideas with Microsoft OneNote online. Organize notes, clip web content, and collaborate with others from any device.
Og:image
Og:image:width 1200
Og:image:height 628
Og:type website
Og:site_name Microsoft OneNote Online
Msvalidate.01 803A3C9BF0E708C68400C2BCE72CF8FE
Origin-trial AnfyPEpysp70/3OJZUa9ehYTTSqueH2hAh/My7kswH47i+T0+fDoLzU6xmH5+n6b9JzPgEKqi96hwKa8v0jpJwQAAAB8eyJvcmlnaW4iOiJodHRwczovL2Nsb3VkLWRldi5taWNyb3NvZnQ6NDQzIiwiZmVhdHVyZSI6IlByZXJlbmRlcjJDcm9zc09yaWdpbklmcmFtZXMiLCJleHBpcnkiOjE3OTAwMzUyMDAsImlzU3ViZG9tYWluIjp0cnVlfQ==
Viewport width=device-width,initial-scale=1
Non-stop browsing
& internet stability
Best VPN in AdBlocking & Malware detection
& internet stability
Best VPN in AdBlocking & Malware detection
Offer ends in:

