HTTP Headers Analysis for https://desire2learn.com

Detected Technologies from Headers

See all in URL Inspect 48

Gravatar

AWS CloudFront

Google AdSense

Google Tag Manager

Forethought

Bing

G2

SalesLoft

AppNexus (Xandr)

Google Translate

Mutiny

PheedLoop

SearchUnify

Google DoubleClick

CaliberMind

Google Analytics

Google Conversion Tracking

Yoast

Dropbox

6sense

New Relic

Cloudflare CDN

Greenhouse

Google Static File Front End

Google API JS Client

Google Fonts

Vidyard

CookieFirst

Zoom Active incidents

unpkg

Lottie Player

Google Search

Adobe Marketo

Navattic

Qualified

Storylane

Facebook

Amazon S3

Buzzsprout

AWS

Visual Website Optimizer

Vimeo

Swoogo

YouTube

Microsoft Clarity

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Basic

child-src; connect-src; default-src; +14 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

origin

Permissions-Policy

Present

geolocation=(), midi=(), sync-xhr=(); +6 more

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Improve CSP by adding more specific directives and removing 'unsafe-inline'

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding, Accept-Encoding,Cookie

connection: close
transfer-encoding: chunked
vary: Accept-Encoding, Accept-Encoding,Cookie

Caching Headers

Cache-Control

Caching

max-age=604800

cache-control: max-age=604800

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

Access-Control-Allow-Headers

Cors

Content-Type, Authorization

Access-Control-Allow-Origin

Cors

https://www.d2l.com

access-control-allow-headers: Content-Type, Authorization
access-control-allow-origin: https://www.d2l.com

Cookies Headers

Set-Cookie

Cookies

set-cookie: languageSite=en; expires=Tue, 06 Oct 2026 11:59:39 GMT; Max-Age=2592000; path=/
__cf_bm=Y3ZJBhAl_qO0VZhiYYn8jKhK6RZsEKkan63X42NgD94-1788696102.3710103-1.0.1.1-ue0oxno80rO5JXkpyARKqtlitn.VbnglG2b4coshjz4rqSffPYFQm_ghg_r44IOsRP.JbN6wvmX_8T6M6Fuiim0WarYuCPG6Q5B13mWkZSGulgV9z2L2TElkBFT4eUsE; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.d2l.com; Expires=Sun, 06 Sep 2026 12:31:42 GMT

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Cache-Status

Other

BYPASS

Cf-Ray

Other

a36d520fd95655c5-IAD

Date

Other

Sun, 06 Sep 2026 12:01:42 GMT

X-Cache

Other

X-Cache-Group

Other

normal

X-Cacheable

Other

SHORT

alt-svc: h3=":443"; ma=86400
cf-cache-status: BYPASS
cf-ray: a36d520fd95655c5-IAD
date: Sun, 06 Sep 2026 12:01:42 GMT
x-cache: HIT: 44
x-cache-group: normal
x-cacheable: SHORT

Recommendations

Enable compression (gzip/brotli) to improve performance