canoe.com
HTML metadata
Technology
- Server
- istio-envoy
- CMS
- WordPress
- Ads
-
- Amazon Ads
- Google Ads (DoubleClick)
- Magnite
- Fonts
-
- Google Fonts
Third-party hosts loaded (17)
- smartcdn.gprod.postmedia.digital×61
- dcs-static.gprod.postmedia.digital×21
- fonts.googleapis.com×3
- auth.lrcontent.com×2
- ak.sail-horizon.com×1
- c.amazon-adsystem.com×1
- cdn-gateflipp.flippback.com×1
- edge-auth.microsoft.com×1
- experiments.parsely.com×1
- fem.gprod.postmedia.digital×1
- fonts.gstatic.com×1
- html-load.com×1
- micro.rubiconproject.com×1
- sb.scorecardresearch.com×1
- securepubads.g.doubleclick.net×1
- tags.qortex.ai×1
- www.youtube.com×1
Social
Contact
- Address
- 600 – 365 Bloor Street E, M4W 3L4, Toronto, Ontario, Canada
Registration
- Registrar
- Webnames.ca Inc.
- Created
- 1996-02-04
- Expires
- 2027-02-05 262 days left
- Updated
- 2026-04-07
- Name servers
-
- ns-cloud-d1.googledomains.com
- ns-cloud-d2.googledomains.com
- ns-cloud-d3.googledomains.com
- ns-cloud-d4.googledomains.com
DNS records live
- NS
-
- ns-cloud-d1.googledomains.com
- ns-cloud-d2.googledomains.com
- ns-cloud-d3.googledomains.com
- ns-cloud-d4.googledomains.com
- MX
-
- 10 mxa-00385001.gslb.pphosted.com
- 10 mxb-00385001.gslb.pphosted.com
- TXT
-
Show 5 TXT records
ms=ms38881893 v=spf1 include:spf.protection.outlook.com include:postmedia.com include:spf-00385001.pphosted.com -allgoogle-site-verification=fEY6vae_hrygmP9AWoY0er4s8zaz1m6_iGOVuyvM1SIgoogle-site-verification=Yy93wTFqdPrmiZCcVsv5SAD03LAxGbYsrwQL4uaCvTsfacebook-domain-verification=33qde62g7cen0x6mcs8y1fbqur7su8globalsign-domain-verification=KaParXxs1OHDy7o8CMbPpHBN-2m_mzwdPqKMMQ66a6
Email authentication weak
- SPF
- not published
- DMARC
-
v=DMARC1; p=none; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.compolicy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
WR3
Expires in 52 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
autoplay=(*), camera=(*), display-capture=(*), encrypted-media=(*), fullscreen=(*), geolocation=(*), microphone=(*), payment=(*)- x-content-type-options
nosniff- content-security-policy
default-src * 'unsafe-eval' 'unsafe-inline' data: blob:- strict-transport-security
max-age=31536000- cross-origin-opener-policy
same-origin-allow-popups
Links to (8)
Linked from (18)
- lfpress.com×4
- vancouversun.com×4
- torontosun.com×4
- financialpost.com×4
- windsorstar.com×4
- thestarphoenix.com×4
- ottawasun.com×4
- calgaryherald.com×4
- calgarysun.com×4
- nationalpost.com×4
- ottawacitizen.com×4
- leaderpost.com×4
- theprovince.com×4
- montrealgazette.com×4
- edmontonjournal.com×4
- edmontonsun.com×4
- vitamindsociety.org×2
- saltwire.com×2