smiletrain.org

HTML metadata

Title

Smile Train: Cleft Lip and Palate Charity | 2M+ Surgeries

Description

Smile Train is the leading global charity supporting comprehensive cleft care. Over 2M surgeries supported, with a sustainable approach to care. Donate now.

Language

en

Canonical

https://www.smiletrain.org/

Translations

en

Open Graph

url: https://www.smiletrain.org/
title: Smile Train: Cleft Lip and Palate Charity | 2M+ Surgeries
site name: Smile Train
description: Smile Train is the leading global charity supporting comprehensive cleft care. Over 2M surgeries supported, with a sustainable approach to care. Donate now.

Technology

Server: nginx
CMS: Drupal

Fonts

Google Fonts

Third-party hosts loaded (3)

fonts.googleapis.com×3
fonts.gstatic.com×1
img.youtube.com×1

Social

Contact

Address: 633 3rd Ave 9th floor, 10017, New York, NY, US

Registration

Registrar

CSC Corporate Domains, Inc.

Created

1998-02-25

Expires

2027-02-24 281 days left

Updated

2026-02-25

Name servers

anirban.ns.cloudflare.com
linda.ns.cloudflare.com

DNS records live

NS

anirban.ns.cloudflare.com
linda.ns.cloudflare.com

MX

0 smiletrain-org.mail.protection.outlook.com

TXT

Show 14 TXT records

j4mf7kapbcgfgue7nlvrjh849d
jbvonnso09784a8ev4m0rs28aa
kU9K//I4lWQSpJHJHPZ34m8+EkTFwty9x8ArXtkm4JZYnzkbgZSYvsMnRxEAYp0k6WJZPfhKHeP2oLB2Mxe07A==
pg1h0h4j009gkib3t6gdknce1
qcmm3cieldn794urhb0cb5m1fi
s4flsm5lulvf68mrtpsc65if3r
specops-verification-code=a0d76bcc-f7a5-4c84-9979-c4c350bf76db
bevpbidovuqi3b5ng2ktlvfdp2
detectify-verification=60f6e80a94b1fa92e2eb856ff2b3b543
facebook-domain-verification=og6adalv88ahsw3408q73tp8jf6lbn
google-gws-recovery-domain-verification=70154332
google-site-verification=Gi4sjdudkZ_FZcPl0fkpKGhyIl8wFRtSHfii_TbUV_0
google-site-verification=nNuZXEwj86YDO6l3kc75wI5535_R_GV7lj0_2bECyNM
google-site-verification=rqJ09YDU5vg6FM-TD-QkMurKJB1IHL_kOi63jtBJwiI

Email authentication strong

SPF

v=spf1 ip4:192.185.4.139 ip4:208.92.36.212 ip4:34.235.226.59 include:spf.protection.outlook.com include:spf.braintreegateway.com include:_spf.salesforce.com include:spf1.smiletrain.org include:emsd1.com include:62582a.workshop-spf.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_agg@dmarc.250ok.net; ruf=mailto:dmarc_fr@dmarc.250ok.net; fo=1; pct=100; rf=afrf

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDW3yHsgWXdMCaYD42pe+xJ+KPIKxWEBULhJ7b6qk9nbvtSmx+8ssmtM/mFJuiZ1JD7ATB90DvF8V1gXva9hN…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc5UTE5nB0BAyOyUezTMJCm95YlAeeK7WPTRnoBtoY27+71JV5XiH23xwdOfctM6mIxfb6QsVfjcfRR2f/…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAyziACawZv9qLDU3hPUTnTexzQ5X1sbLYr9WEuFfYkVrYV71hKWv70+xfGkorDonZw2Ei8vhbv+yiQ+jm…

selectors probed

Certificate (current)

R12

from 2026-05-03 to 2026-08-01

Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.smiletrain.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: frame-src *; object-src 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'
strict-transport-security: max-age=31622400; includeSubDomains; preload