HTTP Headers Analysis for https://www.2u.com

Detected Technologies from Headers

See all in URL Inspect 1

Netlify

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

same-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

accept-ranges: bytes
connection: close

Caching Headers

Age

Caching

0

Cache-Control

Caching

public,max-age=0,must-revalidate

Etag

Caching

"97f1f75dc6efeeb8402bd33d6e67bf50-ssl"

age: 0
cache-control: public,max-age=0,must-revalidate
etag: "97f1f75dc6efeeb8402bd33d6e67bf50-ssl"

Content Headers

Content-Length

Content

106612

Content-Type

Content

text/html; charset=UTF-8

content-length: 106612
content-type: text/html; charset=UTF-8

Server Headers

Server

Netlify

server: Netlify

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Cache-Status

Other

"Netlify Edge"; fwd=miss; fwd-status=200; stored

Date

Other

Wed, 05 Aug 2026 11:54:34 GMT

Link

Other

URL /webpack-runtime-6c29b00503bd672ed5ca.js

rel=preload as=script

URL /framework-9a40190c3e86b88ea56f.js

rel=preload as=script

URL /dc6a8720040df98778fe970bf6c000a41750d3ae-54835343dddb2e5645dd.js

rel=preload as=script

URL /app-49da38ba2beea48e3df6.js

rel=preload as=script

URL /webpack-runtime-6c29b00503bd672ed5ca.js

rel=preload as=script

URL /framework-9a40190c3e86b88ea56f.js

rel=preload as=script

URL /dc6a8720040df98778fe970bf6c000a41750d3ae-54835343dddb2e5645dd.js

rel=preload as=script

URL /app-49da38ba2beea48e3df6.js

rel=preload as=script

URL /03d6bb62d186765457762b27458e75044f4c2d1a-f8690f806ee612ebe629.js

rel=preload as=script

URL /19ab41b0f8b2f68a6c29326a342a17f861365487-68b19377aeebf1ab063c.js

rel=preload as=script

URL /7c9cc165e4e084320befdc2a3c54e92e05f39d46-d7bd843470cac6cd1816.js

rel=preload as=script

URL /06374bcc5b1a959451507220f6f897d5af525318-e01b668b04f0602d50ec.js

rel=preload as=script

URL /b4042903dc84918f8f71da0b4d34c7a1122108f6-92dd2850afcf89742ee7.js

rel=preload as=script

URL /component---src-pages-index-tsx-df43db0e526052c33dec.js

rel=preload as=script

URL /page-data/app-data.json

rel=preload as=fetch crossorigin

URL /page-data/index/page-data.json

rel=preload as=fetch crossorigin

X-Nf-Request-Id

Other

01KZ8WCZW8APWS55F0VT0DHJXE

cache-status: "Netlify Edge"; fwd=miss; fwd-status=200; stored
date: Wed, 05 Aug 2026 11:54:34 GMT
link: </webpack-runtime-6c29b00503bd672ed5ca.js>; rel=preload; as=script, </framework-9a40190c3e86b88ea56f.js>; rel=preload; as=script, </dc6a8720040df98778fe970bf6c000a41750d3ae-54835343dddb2e5645dd.js>; rel=preload; as=script, </app-49da38ba2beea48e3df6.js>; rel=preload; as=script, </03d6bb62d186765457762b27458e75044f4c2d1a-f8690f806ee612ebe629.js>; rel=preload; as=script, </19ab41b0f8b2f68a6c29326a342a17f861365487-68b19377aeebf1ab063c.js>; rel=preload; as=script, </7c9cc165e4e084320befdc2a3c54e92e05f39d46-d7bd843470cac6cd1816.js>; rel=preload; as=script, </06374bcc5b1a959451507220f6f897d5af525318-e01b668b04f0602d50ec.js>; rel=preload; as=script, </b4042903dc84918f8f71da0b4d34c7a1122108f6-92dd2850afcf89742ee7.js>; rel=preload; as=script, </component---src-pages-index-tsx-df43db0e526052c33dec.js>; rel=preload; as=script, </page-data/app-data.json>; rel=preload; as=fetch; crossorigin, </page-data/index/page-data.json>; rel=preload; as=fetch; crossorigin
x-nf-request-id: 01KZ8WCZW8APWS55F0VT0DHJXE

Recommendations

Enable compression (gzip/brotli) to improve performance