cengage.com

HTML metadata

Title

The Leading Provider of Higher Education Course Materials – Cengage

Description

Cengage helps higher education instructors, learners and institutions thrive with Cengage's Learning Platforms and course materials built around their needs.

Language

en

Canonical

https://www.cengage.com/

Translations

en-au
en-ca
en-gb
en-nz
en-us

Open Graph

title: Cengage - The Leading Provider of Higher Education Course Materials
description: Cengage helps higher education instructors, learners and institutions thrive with course materials built around their needs. At Cengage, we’re here for you.

Technology

CDN: Cloudflare

Analytics

Google Analytics
Google Tag Manager
Hotjar

Fonts

Google Fonts

Third-party hosts loaded (25)

embed.widencdn.net×17
fonts.googleapis.com×5
cdn.optimizely.com×4
play.vidyard.com×4
bat.bing.com×3
cdn3.optimizely.com×3
client-eventing-production01.cengage.info×3
d3v27wwd40f0xu.cloudfront.net×3
facebook.com×3
google-analytics.com×3
google.com×3
gstatic.com×3
img.en25.com×3
logx.optimizely.com×3
px.ads.linkedin×3
s.btstatic.com×3
s.salecycle.com×3
s.thebrighttag.com×3
vars.hotjar.com×3
cdn.evgnet.com×1
cengage.widen.net×1
instant.page×1
www.cengage.ca×1
www.cengage.uk×1
www.googletagmanager.com×1

Social

Registration

Registrar

Key-Systems GmbH

Created

2007-06-15

Expires

2027-06-15 391 days left

Updated

2026-05-15

Name servers

a1-49.akam.net
a13-64.akam.net
a14-65.akam.net
a20-66.akam.net
a6-67.akam.net
a9-64.akam.net

DNS records live

NS

a20-66.akam.net
a6-67.akam.net
a9-64.akam.net

MX

10 mxa-0012df01.gslb.pphosted.com
10 mxb-0012df01.gslb.pphosted.com

TXT

Show 35 TXT records

nx1g6jw40mf9kk91kk9fhp097qgzjfgw
atlassian-domain-verification=nlYxrfHVHOx6xAROWhYkj0qlqsuD8icY76/zzexHo7ltLc37TR65PX4JXnfKTKsk
jetbrains-domain-verification=a0y0wvbxlf5cjmzp5xxeue5s1
pendo-domain-verification=b29152b5-8c0a-4ca9-bcb7-cd4a9f3167be
amazonses:9gG9U0Lq8dN2UmomYK8l3KdOlkgMa+mnI2rykI6k5OE=
hlg77cp9rqkrvmw1gcdk85rzr0mlwpz2
google-site-verification=81nfnsdzn7AkMec_CFlzwpc-74eEYPewLRbTHz4PQ68
ca3-010c96dc70424fcf926cbbcc328895b9
canva-site-verification=i-clypBOQ_EIkPkiTrsj5Q
jamf-site-verification=lbpt07mBT7VIXextB7Z2iw
-aVVLZih6eW_hJI8U15kTukhjMoJ
ca3-77af619fc9f94842ac5b06c656c09de1
ca3-08347303430347caa5efdc0f16011f86
amazonses:ZM4eVRk97YUcHxkUC86AVem6V2IpdP6OnnY1W5LGrho=
lqyrmnh95ytdfl4t33jvdg9n8xf61cwq
openai-domain-verification=dv-ElVgkGuW38ITDqs3vQ3OilBu
e259XBTIajsWpP7xjZXeBs8g+Hx9cAxlKHEs5yE49eti2FFCEmmZeumJ79QU7Xf2h7rjJrKMCxDJp8VCIfgRbw==
onetrust-domain-verification=8992c9ef19b14ccf84bc7c93bdd68372
Dynatrace-site-verification=8846c63b-5bc7-4933-a1e3-ba5d266f31cf__dkc7snecm1tqgv92msaufmv1a0
extensis-domain-verification=521ba37c-0621-4e5a-bffc-aac3658c82e6
google-site-verification=tCSYUitMiwJtbVb_9zj0h0KgQ2dg7UtcGArBd0nPjAM
facebook-domain-verification=94xv76rrwldjw6bter1pd09lebpvzp
Dynatrace-site-verification=ae835581-28a2-4c27-806a-a296df18563f__k74n86q9sk62ojhtv9s2cchdm0
google-site-verification=rMegLmxTlbTTydYNGH-cOiN9WcOFsuaXx9gpR2RMwx8
tvmd0p25vpf6p8qj6bqkfx4cwpnb3f7p
6kg49tjr73tbbphlx3g5tyy3v5kfyscf
docusign=3b8ea700-ffcd-4502-85ec-47cee340dcc8
ca3-72aa42386d5f4267986bf164aef3b924
_89073x4a4jxl8bo4acft6lvx4sij4nf
m7g/5gjTgLDClq+067EKbbxE2fKjHuuo3yJz2/q+JcHmqgoiLrouEtb4aaYusUBl+gXCxnsPwBIk+gsJtxWZng==
cl_verification=5ee9438f-89f0-4e9b-8509-45a7d55c8fd2
slack-domain-verification=kVF5zo1TjQzg8muoanv1ET8v6hVwMhCwdvJeTUlE
wrike-verification=MjcxNDk5NTozZmFhMWNjN2FjMWE5ZjBhMjNiMjlkOGRlYjc2OGNiNzUxNGE4NDM1M2Y2ZWFiMGM3MzJlMDBjMmQzMzhiYjU2
google-site-verification=L_XIohOodP_pkkG1LWK5fgTNPu5zY992G2p9vzxnpT0
pardot964913=ebff28138cab9f5156f2232eedce4d4d9d0b347c567e7355bf45717b5cfdee5d

Email authentication strong

SPF

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO01S9FJj3ClQQHUE7WoAl1pUxm/Do3g8ANlsy5v4XtI7ohXezVMHfmimmTghWzJziR82nl7lIat2X…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5M5vf8S6kfU0xoXAW8EWge1KPW+SRd4bxehiEI1Hrq4n+9si+OA1s1IYUV9enc0QNHFPZiKIe8C5wy26W…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR2t8BH/v9xdCjeF7k4sJraw95Cb2Z3MIbkk+j1LMOq+SMHyRUir2WGwqIBgmEkLkCUopUCNvjmY/O3FC3…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2026-02-11 to 2027-03-13

Expires in 297 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.cengage.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src https: blob: 'self' 'unsafe-inline' 'unsafe-eval' http://ngl.cengage.com https://embed.widencdn.net https://cengage.widen.net https://ngl.cengage.com https://*.cengage.com/; connect-src https://*.redditstatic.com https://*.reddit.com http://ngl.cengage.com https://ixfd2-api.bc0a.com https://ngl.cengage.com https://cengage630.outgrow.us https://44.238.122.172 https://100.20.58.101 https://35.85.84.151 https://44.228.85.26 https://34.215.155.61 https://35.160.46.251 https://52.71.121.170 https://18.210.229.244 https://44.212.189.233 https://3.212.39.155 https://52.22.50.55 https://54.156.2.105 https://px.ads.linkedin.com https://*.survicate.com wss://*.zopim.com https://*.company-target.com https://*.demandbase.com https://*.zendesk.com https://*.zdassets.com https://*.cengage.com https://*.cengage.ca https://analytics.pangle-ads.com/api/v2/pangle_pixel https://*.cengage.info https://*.googleapis.com https://*.optimizely.com https://stats.g.doubleclick.net https://*.googleap
strict-transport-security: max-age=31536000; includeSubDomains