globalpartnership.org

HTML metadata

Title

Global Partnership for Education

Description

GPE seeks to raise $15 billion in grants and innovative financing over 2026-2030 to help nearly 750 million children get a better education in 96 countries.

Language

en

Canonical

https://www.globalpartnership.org/

Translations

en
fr

Open Graph

title: Global Partnership for Education
site name: Global Partnership for Education

Technology

CDN: Amazon CloudFront
CMS: Drupal

Analytics

Google Tag Manager

Social widgets

Vimeo Embed

Third-party hosts loaded (5)

cdnjs.cloudflare.com×2
player.vimeo.com×2
cdn.jsdelivr.net×1
kit.fontawesome.com×1
www.googletagmanager.com×1

Social

Contact

Address: st newsYou must have JavaScript enabled to use this form.EmailBody© 2026

Registration

Registrar

Amazon Registrar, Inc.

Created

2002-02-26

Expires

2035-02-26 3204 days left

Updated

2026-05-06

Name servers

ns-1281.awsdns-32.org
ns-152.awsdns-19.com
ns-1768.awsdns-29.co.uk
ns-890.awsdns-47.net

DNS records live

NS

ns-1281.awsdns-32.org
ns-152.awsdns-19.com
ns-1768.awsdns-29.co.uk
ns-890.awsdns-47.net

MX

10 wbvapiron01.worldbank.org
10 wbvapiron02.worldbank.org
10 wbvapiron03.worldbank.org
10 wbvapiron04.worldbank.org

TXT

Show 5 TXT records

webexdomainverification.DHS2=9a315b91-646b-4c32-9efa-b45b0747e18b
MS=ms29092921
cisco-ci-domain-verification=13af9d67d8d6cca32da3e31defa2a26c0ecfc8095b9392bfda1bba25e6aa2bd8
google-site-verification=XMeQTSz3USybqkVjU0C1JZgzE86jxu840Yq3hIszXyw
onetrust-domain-verification=b9401d6f25c849e4a102558cb3e5a348

Email authentication strong

SPF

v=spf1 include:globalpartnership.org._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email; ruf=mailto:Dmarc@worldbankgroup.org

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAVO6Ux4I/Ic0nBnpV7gAZ70LkHKXNTjgtq/RW4olVsnn3n6RSZqQIyze8IcsNf4T96fbo16slB1X0NtkP…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxeNI6N5nqfW+p6ldo5QN6YQ1Kss54nBp2AD0+7WcQ/tsw47fj5fdixT/olsN4ZA+lGx0fTqyhJ1zOyXEiiv1mD8…

selectors probed

Certificate (current)

COMODO RSA Extended Validation Secure Server CA

from 2025-10-16 to 2026-10-17

Expires in 150 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.globalpartnership.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' globalpartnership.org *.globalpartnership.org; child-src 'self' blob:; connect-src 'self' globalpartnership.org *.globalpartnership.org api.mapbox.com api.curator.io cdn.jsdelivr.net events.mapbox.com ka-p.fontawesome.com kit.fontawesome.com translate.googleapis.com noembed.com cdn.plyr.io cdnjs.cloudflare.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com; font-src 'self' cdnjs.cloudflare.com fonts.gstatic.com ka-p.fontawesome.com kit.fontawesome.com data: https://fonts.gstatic.com; frame-src 'self' cdnapisec.kaltura.com player.castr.com player.vimeo.com www.youtube.com www.youtube-nocookie.com *.linkedin.com *.licdn.com *.twitter.com *.instagram.com *.surveymonkey.com; img-src 'self' globalpartnership.org *.globalpartnership.org cdn-be.curator.io curator-assets.b-cdn.net *.fbcdn.net fonts.gstatic.com i.vimeocdn.com i.ytimg.com translate.google.com data: *.surveymonkey.com *.smassets.net https://*.googletagmanager.com ht
strict-transport-security: max-age=63072000; includeSubDomains