highlights.com

HTML metadata

Title: Subscriptions, Books & Puzzles | Highlights for Children
Description: Join millions of young readers with Highlights for Children! Discover puzzles, magazines and learning activities that provide endless fun for kids.
Language: en
Canonical: https://shop.highlights.com

Technology

CMS: Drupal

Analytics

Google Tag Manager

Fonts

Adobe Fonts
Google Fonts

Third-party hosts loaded (10)

parents.azureedge.net×19
www.googletagmanager.com×2
cdn-widgetsrepository.yotpo.com×1
fonts.googleapis.com×1
rum.hlx.page×1
static.klaviyo.com×1
staticw2.yotpo.com×1
try.abtasty.com×1
use.typekit.net×1
www.facebook.com×1

Social

Contact

Phone

Registration

Registrar

Network Solutions, LLC

Created

1999-04-02

Expires

2028-04-02 684 days left

Updated

2026-03-12

Name servers

ns1-03.azure-dns.com
ns2-03.azure-dns.net
ns3-03.azure-dns.org
ns4-03.azure-dns.info

DNS records live

NS

ns1-03.azure-dns.com
ns2-03.azure-dns.net
ns3-03.azure-dns.org
ns4-03.azure-dns.info

MX

0 highlights-com.mail.protection.outlook.com

TXT

Show 20 TXT records

google-site-verification=wCDncAple_yyuIB6IJXHPSYlC5VbzgT6vTGVht2Tg1g
sending_domain431812=9b1e9d0ede4690d1192a0346458dea42bad94f79654e8fe92575e65f43afd350
box-domain-verification=ad655d01b7892051da4aaadedab05900672858ee15d487796452bfd9e2e65cd2
MS=ms92360780
airtable-verification=1f3f732e6d80c11c1435f76cf476b187
_globalsign-domain-verification=gGX2GE0RtzqfPpvRIICZSe0MyOeNwyD-vj7ZtKCyvG
klaviyo-site-verification=Wj8EQt
ZOOM_verify_M0oILOhaDKck3cNTnQ62gE
facebook-domain-verification=douv4n4oss5puzpg1zorgb8ju1vtz1
jh1ka7jgp8mcb1efe9gc96pjo8
bv9e9etv3qc4u993i2rrelrgcj.
jamf-site-verification=BW6U5Pz52pCp3jJxIfq6GA
openai-domain-verification=dv-QCitlb37OATTcq7PybwPhwaa
extensis-domain-verification=937e2c92-39fa-45f8-8a97-9b649d578044
monday-com-verification=GcIFd9B2rzePUpRJBLm75-t-YGDvazJPdEByM8epI0M
logmein-verification-code=M81Ho0x0kmFWZ2vhfAR6i2MIi
docusign=ca5be12d-1fce-4203-ae78-f0ab2aeccf51
miro-verification=aa1f61171db9eba6d6c2863a2a306fd28b14eeb9c
apple-domain-verification=m7IyJx9Op38FTRGp
pardot431812=6c025fde0aa052b4cb8a44c43030391ae702d864276033dee8ee58326ef5a382

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:sendgrid.net include:em3891.highlights.com include:es._spf.adp.com include:_spf.brainier.com include:et._spf.pardot.com ip4:209.170.246.101/24 ip4:66.192.198.48/28 ip4:207.166.92.11 ip4:207.166.95.11 ip4:207.166.101.207 include:spf.workfront.com include:amazonses.com ip4:67.228.101.202/31 ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 ip4:68.154.16.213/32 -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc_agg@vali.email

policy: none (monitoring only)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDYO9XE8NYMFZUrl+gAPvR9ow7/wdhk6J4GylVG4lCyiAKSy+CJxhjteqLflKe/7MdE9nRByVxO209ZC9t5sL…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5xXUQ1ery8oCbaB/T++ZYVzg/TXVIWwtLsNiYxnc5bvR71aaX5BgFE2inAbN+VcpHMyAFcTaVY8Sd…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vkZ7CFNjtZ3AXN6XAy8iGoYrDZNOErwk1Z3i4c+TxgqirUGxeu8ZOhXofYfFY73QOlfek8hK/qKWrf47j…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHCAmhKBztK7GjdXCxqtQVbmhZgHEtC8PbZ1p/sqZ9qO9ElOtI6dwgnmljqbGwlBUpNj9LgFztBQ+Zr5OO…

selectors probed

Certificate (current)

Go Daddy Secure Certificate Authority - G2

from 2025-04-25 to 2026-05-27

Expires in 8 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://shop.highlights.com

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com static-assets.bamgrid.com *.fontawesome.com *.yotpo.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com staticw2.yotpo.com *.klaviyo.com *.mczbf.com *.sjwoe.com cj.dotomi.com *.emjcd.com idsync.rlcdn.com *.cj.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.yotpo.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.amazon.com *.alchemer.com *.mczbf.com *.sjwoe.com cj.dotomi.com *.emjcd.com idsync.rlcdn.com *.cj.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafsta
strict-transport-security: max-age=31536000; includeSubDomains