Collegeboard.org - Allaccess.collegeboard.org

date: Thu, 04 Dec 2025 04:30:02 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
cache-control: max-age=300, public, s-maxage=2628000
x-drupal-dynamic-cache: UNCACHEABLE (poor cacheability)
content-language: en
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
expires: Sun, 19 Nov 1978 05:00:00 GMT
vary: Cookie,Accept-Encoding
x-generator: Drupal 10 (https://www.drupal.org)
content-security-policy: default-src 'self' *.collegeboard.org; connect-src 'self' ws: *.collegeboard.org k625k2vrzvdo5g7ynbvtjejehi.appsync-api.us-east-1.amazonaws.com/graphql dgtkl2ep7natjmkbefhxflglie.appsync-api.us-east-1.amazonaws.com/graphql cdn.cookielaw.org geolocation.onetrust.com lambda.us-east-1.amazonaws.com bam.nr-data.net cdn.aimtell.io cognito-identity.us-east-1.amazonaws.com sts.us-east-1.amazonaws.com www.google.com privacyportal.onetrust.com apform.secure.force.com cdnm3.cdnservice.space/start5.json code.jquery.com api.trongrid.io/wallet/getnodeinfo dgtkl2ep7natjmkbefhxflglie.appsync-api.us-east-1.amazonaws.com dgtkl2ep7natjmkbefhxflglie.appsync-realtime-api.us-east-1.amazonaws.com analytics.aimtell.com sts.us-west-2.amazonaws.com cognito-identity.us-west-2.amazonaws.com d1ktxyteejjrbw.cloudfront.net full-apform.cs190.force.com yt3.ggpht.com collegeboard-full.my.salesforce.com i.ytimg.com cdn.ckeditor.com telemetry.wiris.net wiris-v7.hive-prod.collegeboard.org:80 wiris-v7.hive-nonprod.collegeboard.org:80 *.appcues.com *.appcues.net *.my.salesforce-sites.com ipapi.co 9frgh2i4b9.execute-api.us-east-1.amazonaws.com collegeboard--full.sandbox.my.salesforce-scrt.com collegeboard.my.salesforce-scrt.com signals.aimtell.com api.getambassador.com pagead2.googlesyndication.com *.googlevideo.com/videoplayback www.googleadservices.com google.com cs-chat.crmlms-prod.collegeboard.org; font-src 'self' *.collegeboard.org themes.googleusercontent.com fonts.gstatic.com data: moz-extension: use.fontawesome.com static3.avast.com at.alicdn.com cdn.loom.com/assets/fonts/ wiris-v7.hive-prod.collegeboard.org:80 wiris-v7.hive-nonprod.collegeboard.org:80 cdnjs.cloudflare.com/ajax/libs/mathjax/3.2.2/es5/output/chtml/fonts/woff-v2/; frame-src 'self' *.collegeboard.org service.force.com beacon.aimtell.com datacloudstat.com www.youtube.com ws-lmdc-app03.dhs.state.nj.us gateway.zscloud.net mozbar.moz.com *.id.opendns.com lsrelay-config-production.s3.amazonaws.com pg-sasscer-ckf04.pgcps.org static.deledao.com data: schools-blocked.s3-website-us-east-1.amazonaws.com calendly.com platform.twitter.com *.appcues.com credentialfinder.org apps.credentialengine.org *.webcasts.com td.doubleclick.net www.googletagmanager.com cb-zscaler-pages.s3.amazonaws.com us-east-1.quicksight.aws.amazon.com www.buzzsprout.com cdn.aimtell.com collegeboard--full.sandbox.my.site.com collegeboard.my.site.com; img-src 'self' *.collegeboard.org data: www.google.com googleads.g.doubleclick.net www.googletagmanager.com www.google.co.jp www.google.ca www.google.co www.google.jo translate.google.com d10lpsik1i8c69.cloudfront.net *.appcues.com res.cloudinary.com twemoji.maxcdn.com cdn.cookielaw.org signals.aimtell.com pagead2.googlesyndication.com www.googleadservices.com google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.collegeboard.org cdnjs.cloudflare.com sdk.amazonaws.com cdn.cookielaw.org www.googletagmanager.com googleads.g.doubleclick.net www.googleadservices.com connect.facebook.net www.youtube.com *.salesforceliveagent.com service.force.com ajax.cloudflare.com js-agent.newrelic.com bam.nr-data.net d10lpsik1i8c69.cloudfront.net s3.amazonaws.com/cdn.aimtell.com/ www.google.com static.lightning.force.com *.my.salesforce.com *.my.salesforce-sites.com apform.secure.force.com www.pagespeed-mod.com cdn.ckeditor.com cdnjs.cloudflare.com/ajax/libs/cropper/4.0.0/cropper.min.js assets.calendly.com platform.twitter.com *.appcues.com cb-zscaler-pages.s3.amazonaws.com www.buzzsprout.com cdn.jsdelivr.net/npm/js-cookie@3.0.5/dist/js.cookie.min.js collegeboard--full.sandbox.my.site.com collegeboard.my.site.com cdn.aimtell.com client.rum.us-east-1.amazonaws.com/1.0.2/cwr.js cdn.jsdelivr.net/npm/@fingerprintjs/fingerprintjs@3.3.2/dist/fp.js pagead2.googlesyndication.com blue.mbsy.co https://athena.collegeboard.org/2.2.4/cbw-widgets.min.js https://atlas.collegeboard.org/apricot/prod/4.10.3/dx_profile.js https://atlas.collegeboard.org/apricot/prod/4.10.3/main.min.js https://cdn.jsdelivr.net/npm/html2canvas@1.3.2/dist/html2canvas.min.js https://cdn.jsdelivr.net/npm/js-cookie@3.0.5/dist/js.cookie.min.js https://cdnjs.cloudflare.com/ajax/libs/cropper/4.0.0/cropper.min.js https://cdnjs.cloudflare.com/ajax/libs/mathjax/3.2.2/es5/tex-mml-chtml.js https://github.com/mattfarina/farbtastic/blob/master/src/farbtastic.js platform.twitter.com/widgets.js; style-src 'self' 'unsafe-inline' *.collegeboard.org service.force.com translate.googleapis.com use.fontawesome.com apform.secure.force.com *.my.salesforce-sites.com d10lpsik1i8c69.cloudfront.net/css/reset.css fonts.googleapis.com cdn.ckeditor.com cdnjs.cloudflare.com/ajax/libs/cropper/4.0.0/cropper.min.css wiris-v7.hive-prod.collegeboard.org:80 wiris-v7.hive-nonprod.collegeboard.org:80 *.appcues.com fonts.google.com collegeboard--full.sandbox.my.site.com collegeboard.my.site.com cdn.cookielaw.org https://atlas.collegeboard.org/apricot/prod/4.10.3/athena.min.css https://atlas.collegeboard.org/apricot/prod/4.10.3/dx_ckeditor.min.css https://atlas.collegeboard.org/apricot/prod/4.10.3/dx_profile.css https://atlas.collegeboard.org/apricot/prod/4.10.3/illustrations.css https://atlas.collegeboard.org/apricot/prod/4.10.3/main.min.css https://cdnjs.cloudflare.com/ajax/libs/cropper/4.0.0/cropper.min.css; frame-ancestors 'self' credentialfinder.org; report-uri https://endpoint5.collection.us2.sumologic.com/receiver/v1/http/ZaVnC4dhaV0RBARw3e7I1maofn0rkqtWoPBPNh0wBLdICmPwpVd0aV427YIAMoG3
strict-transport-security: max-age=15552000; includeSubDomains; preload
last-modified: Wed, 03 Dec 2025 19:59:30 GMT
age: 266
x-request-id: v-94ae6648-d082-11f0-bd25-6faa94482855
x-ah-environment: prod
cf-cache-status: HIT
via: varnish
x-cache: HIT
x-cache-hits: 90
content-encoding: gzip
cf-ray: 9a8890ee992b4db8-FRA
alt-svc: h3=":443"; ma=86400