HTTP Headers Analysis for https://live-teaching.imaginelearning.com

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Basic

default-src; script-src; style-src; +6 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Present

ALLOW-FROM http://app.pendo.io/in-app/guides, SAMEORIGIN

X-Content-Type-Options

Present

nosniff, nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

connection: close
transfer-encoding: chunked
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

max-age=0, private, must-revalidate

Etag

Caching

W/"d2801655ec301c82b40faad20bc7b0f2"

cache-control: max-age=0, private, must-revalidate
etag: W/"d2801655ec301c82b40faad20bc7b0f2"

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

X-Runtime

Server

0.062958

x-runtime: 0.062958

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: XSRF-TOKEN=K3shujOv0mL1fvUyYPq2BHRylVYaBQw3-cymH-ptMyOq0ZvO_oGOuIPAGKGG-N-M276M1Rg--udLTV85u_WfEQ; path=/; SameSite=Lax
_apangea_session=2M3qKTK8LCLKYHdCxa3MnyDyl69vb9QtZ2jYs6m7wEMBRZ9ZubcmmwQ%2BSxYIfRiWmhP69ZdRUHOEm7LwFPGdEaKiWUUr%2Bmpl5PF3pmfE8%2Fun%2F8xQaStHla3syKpaG3iGjAdbPFaWvIUOyvsR0DTNAPAnqh2k0G%2Flnvo8O%2Fmj89REn4gJ64J2mNqJETl7jtV9dTmz6BZGgjkDgHqR%2FeeKNZAOs5KRj3f89wQn48JY0KjIQF0cMI2wJKGc0h93JExFnm0ChDB20lFPgBxcpBOsnuQeO2XBMQuPaNLFnDQuNj0zVsYMo6FaUPHKslie6sAK--p4rNzcTlPSKUPpgi--Xa1I%2Fi9q7oEzq5CEw4bnHw%3D%3D; path=/; secure; HttpOnly; SameSite=Lax

Other Headers

Date

Other

Wed, 06 May 2026 07:55:19 GMT

Link

Other

URL /packs/js/newrelic-0cfa02b00bf7e372f1e2.js

rel=preload as=script nopush

URL /assets/login_common-c8e9a000a377d033b4efd369b21f1e9082301c2c00df14ffa4e56a2adcdeab60.js

rel=preload as=script nopush

URL /assets/compression_check-09da6cf25574a7b696c9f87adb3f3259e167dcc5382a0711101406111d33e404.js

rel=preload as=script nopush

URL /assets/bootstrap-5.3.3.bundle.min-99c747a23e03171045f40e6f3625e6155895d34ebad5fd0c45ba14e72814a7a7.js

rel=preload as=script nopush

URL /packs/js/newrelic-0cfa02b00bf7e372f1e2.js

rel=preload as=script nopush

URL /assets/login_common-c8e9a000a377d033b4efd369b21f1e9082301c2c00df14ffa4e56a2adcdeab60.js

rel=preload as=script nopush

URL /assets/compression_check-09da6cf25574a7b696c9f87adb3f3259e167dcc5382a0711101406111d33e404.js

rel=preload as=script nopush

URL /assets/bootstrap-5.3.3.bundle.min-99c747a23e03171045f40e6f3625e6155895d34ebad5fd0c45ba14e72814a7a7.js

rel=preload as=script nopush

URL /assets/login-1fe9564ce728be53492f5118b58acd39f18a72e982b847328d68f06242f68018.js

rel=preload as=script nopush

URL /assets/login-dc2944f02e3449beaf01db5be4dd1f1957283595bd4ef8a8e0efa082ad7df7de.css

rel=preload as=style nopush

URL /assets/shared/browser_warning-450e32a4076d39fdbff647ae5dbf799b3794f9489e8d861f027ceb1c82eb2b06.css

rel=preload as=style nopush

URL /assets/shared/browser_warning-7d0c81851a744f946288a6f8a6abdb9ba95aaa2cf60f6f42fab47165d94bb2c5.js

rel=preload as=script nopush

X-Request-Id

Other

1b4727cb-0a29-4df2-92d4-4ef443b0e6ac

date: Wed, 06 May 2026 07:55:19 GMT
link: </packs/js/newrelic-0cfa02b00bf7e372f1e2.js>; rel=preload; as=script; nopush,</assets/login_common-c8e9a000a377d033b4efd369b21f1e9082301c2c00df14ffa4e56a2adcdeab60.js>; rel=preload; as=script; nopush,</assets/compression_check-09da6cf25574a7b696c9f87adb3f3259e167dcc5382a0711101406111d33e404.js>; rel=preload; as=script; nopush,</assets/bootstrap-5.3.3.bundle.min-99c747a23e03171045f40e6f3625e6155895d34ebad5fd0c45ba14e72814a7a7.js>; rel=preload; as=script; nopush,</assets/login-1fe9564ce728be53492f5118b58acd39f18a72e982b847328d68f06242f68018.js>; rel=preload; as=script; nopush,</assets/login-dc2944f02e3449beaf01db5be4dd1f1957283595bd4ef8a8e0efa082ad7df7de.css>; rel=preload; as=style; nopush,</assets/shared/browser_warning-450e32a4076d39fdbff647ae5dbf799b3794f9489e8d861f027ceb1c82eb2b06.css>; rel=preload; as=style; nopush,</assets/shared/browser_warning-7d0c81851a744f946288a6f8a6abdb9ba95aaa2cf60f6f42fab47165d94bb2c5.js>; rel=preload; as=script; nopush
x-request-id: 1b4727cb-0a29-4df2-92d4-4ef443b0e6ac

Recommendations

Enable compression (gzip/brotli) to improve performance