openathens.net

HTML metadata

Title: Home - OpenAthens
Description: OpenAthens is a leader in authentication with over 30 years' experience, making secure, remote access to resources simple and reliable for organizations worldwide.
Language: en-US
Generator: WPML ver:4.9.2.1 stt:1,2;
Canonical: https://www.openathens.net/

Open Graph

url: https://www.openathens.net/
title: OpenAthens - Remote Access Made Simple
locale: en_US
site name: OpenAthens
description: OpenAthens makes remote access simple. Explore how we help libraries, providers and publishers provide a great user experience to content.

Technology

Server: oaws
CMS: WordPress

Analytics

Google Tag Manager

Ads

Google Ads (DoubleClick)
Meta Pixel

Third-party hosts loaded (9)

cc.cdn.civiccomputing.com×3
www.google.com×3
www.googletagmanager.com×2
www.lightboxcdn.com×2
14693891.fls.doubleclick.net×1
connect.facebook.net×1
snap.licdn.com×1
www.gstatic.com×1
www.youtube.com×1

Social

Registration

Registrar

Squarespace Domains II LLC

Created

2007-03-16

Expires

2027-03-16 300 days left

Updated

2026-04-29

Name servers

ns-cloud-d1.googledomains.com
ns-cloud-d2.googledomains.com
ns-cloud-d3.googledomains.com
ns-cloud-d4.googledomains.com

DNS records live

NS

ns-cloud-d1.googledomains.com
ns-cloud-d2.googledomains.com
ns-cloud-d3.googledomains.com
ns-cloud-d4.googledomains.com

MX

9 openathens-net.mail.protection.outlook.com

TXT

Show 10 TXT records

rovag_verification_token=DDFB9C9AE26B4778992F9B4ED866F762
google-site-verification=2ruYuV7z2iRUwLoninG7389O74jH516BKmeEWGYwqEo
MS=ms34724098
adobe-idp-site-verification=2ce6ba94531350b5156c05aa460b2af57b5173fe16d9090e9c8bf93a4ff5def6
google-site-verification=Q3MPlkUHlFubw6Z7Rs70273kxXJTxY5T2VSsPGZyAPA
0ed1fe018a355a8acc894e4ea09444d723901f2b6f
google-site-verification=C-YSJEW3Z-muAZaTcqfK4qJaRv8jhjfCdmO2JwNxONg
site24x7-signals-domain-verification=c20e756539d11bcd74f5995ad7a5e371
atlassian-domain-verification=59yuiPclAJA1wBcwyayTUpG2BqTroCvhhjO5zu6035ubBeFzUpFq5yQ26W5hVNb5
QuoVadis=4c0baa72-3ea5-4df5-b6a0-462e1adee9ec

Email authentication strong

SPF

v=spf1 a:mailx.e-learndesign.co.uk ip4:161.35.175.33 include:_spf.google.com include:spf.eventsforce.net include:spf.protection.outlook.com include:msgfocus.com include:spf.mailjet.com include:_spf.salesforce.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:janet.dmr@ja.net;

policy: reject (enforced)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQvY6yP5LZQ3Xo7zwpGo8r/0kqFnebOwh1lc1MZwSMoh1PYhq5MmmHvivzvPJxjEUWilhUlu6/BBpJ…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucDAO4NyQpob4ckJjpdHP3PNIRtLwCPby3qzlXbnAvONtfJVNpOOAZ/N7nqTpRFXsboKKkglDR4ii5…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRj14ezfvY3e9IWNj6fVbyn3NQxqUg2gf+AaW6QEL/b/CaC/PDYJuw16S8DeW/rHvqLdeM1sDxliLx…

selectors probed

Certificate (current)

WR3

from 2026-05-06 to 2026-08-04

Expires in 77 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.openathens.net/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://*.lightboxcdn.com https://api.lightboxcdn.com https://cc.cdn.civiccomputing.com https://snap.licdn.com https://cdn.rollbar.com https://public.tableau.com https://www.gstatic.com https://www.youtube.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://www.google.com https://www.google.co.uk https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://cdnjs.cloudflare.com https://*.hotjar.com https://*.hotjar.io; style-src 'self' 'unsafe-inline' https://ams.wpml.org https://fonts.googleapis.com https://*.lightboxcdn.com; img-src 'self' https://placehold.co https://www.facebook.com https://*.openstreetmap.org https://*.google.com https://ad.doubleclick.net https://*.lightboxcdn.com https://px.ads.linkedin.com https://public.tableau.com https://secure.gravata
strict-transport-security: max-age=31536000;
cross-origin-resource-policy: same-origin