sp.edu.sg Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 15 Sep 2025 15:57:37 GMT
Content-Type: text/html
Content-Type: text/html
Content-Length: 162
Location: https://sp.edu.sg/
Cache-Control: public, max-age=2628000
Via: 1.1 google

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 15 Sep 2025 15:57:38 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Keep-Alive: timeout=10
Location: https://www.sp.edu.sg/
Content-Type: text/html
Cache-Control: public, max-age=2628000
Strict-Transport-Security: max-age=31536000; includeSubDomains

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 15 Sep 2025 15:57:40 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Set-Cookie: ASP.NET_SessionId=1b1wys3m4rpahbu3nyestwtz; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: ASP.NET_SessionId=1b1wys3m4rpahbu3nyestwtz; path=/; secure; HttpOnly; SameSite=Lax
Content-Security-Policy: default-src 'self' https://www.search.gov.sg; script-src 'self' ajax.aspnetcdn.com https://*.wogaa.sg https://api.search.gov.sg https://map.mapsindoors.com https://www.googletagmanager.com https://www.gstatic.com/recaptcha https://www.google.com/recaptcha https://webchat.vica.gov.sg https://www.youtube.com https://static.elfsight.com/ https://www.search.gov.sg https://www.google.com https://www.gstatic.com https://*.googletagmanager.com cdn.ampproject.org 'unsafe-inline' 'unsafe-eval'; style-src 'self' netdna.bootstrapcdn.com kendo.cdn.telerik.com https://webchat.vica.gov.sg https://www.search.gov.sg https://assets.wogaa.sg/ 'unsafe-inline'; img-src 'self' https://bucket-common.vica.gov.sg data: blob: https://phosphor.utils.elfsightcdn.com/ https://assets.search.gov.sg https://*.google-analytics.com https://*.googletagmanager.com; font-src 'self' kendo.cdn.telerik.com netdna.bootstrapcdn.com data: https://www.search.gov.sg https://assets.wogaa.sg/fonts/; frame-src 'self' https://iframe.dacast.com https://vimeo.com https://www.search.gov.sg https://map.mapsindoors.com www.google.com/recaptcha https://www.youtube.com https://tourmkr.com https://www.google.com https://choose-your-right-course.formaloo.me/; connect-src 'self' data: https://stats.g.doubleclick.net wss://chat.vica.gov.sg https://chat.vica.gov.sg https://api.search.gov.sg https://assets.search.gov.sg https://autocomplete.vica.gov.sg https://*.tiktok.com https://core.service.elfsight.com/ https://storage.elfsight.com/ https://www.google.com https://www.googleleadservices.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.wogaa.sg; media-src 'self' data: blob:; child-src 'self'
Cross-Origin-Embedder-Policy: unsafe-none
Cross-Origin-Opener-Policy: unsafe-none
Cross-Origin-Resource-Policy: cross-origin
Permissions-Policy: accelerometer=(self), autoplay=(self), camera=(self), cross-origin-isolated=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), keyboard-map=(self), magnetometer=(self), microphone=(self), midi=(self), payment=(self), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self), usb=(self), web-share=(self), xr-spatial-tracking=(self)
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Cache: Miss from cloudfront
Via: 1.1 541ec8013f12d2a9d4abdbdb1647af30.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT57-P4
X-Amz-Cf-Id: Quz4QdT_zN_UodF8cPVTnv15HnY0Yz9XhUVw0SYW62wTNz-u1_ILUQ==
Vary: Origin