smiletraincanada.org

.org crawl

First seen 2026-04-18 · Last seen 2026-05-13 · ok HTTP/1.1 200 2587 ms crawled 2026-05-12

US · 23.185.0.3 · AS54113 Fastly, Inc.

Reputation 100/100

Classifying

HTML metadata

Title

Smile Train Canada Foundation

Description

Your Support Can Save a Child's Life Today

Language

Canonical

https://www.smiletraincanada.org/

Translations

Open Graph

url: https://www.smiletraincanada.org/
title: Smile Train Canada Foundation
site name: Smile Train Canada Foundation
description: Your Support Can Save a Child's Life Today

Technology

Server: nginx
CMS: Drupal

Fonts

Google Fonts

Third-party hosts loaded (3)

fonts.googleapis.com×3
fonts.gstatic.com×1
img.youtube.com×1

Social

Contact

Phone

742997927

Address

['174 Spadina Avenue', 'Suite 404'], M5T 2C2, Toronto, ON, BR

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2011-09-29

Expires

2026-09-29 133 days left

Updated

2025-09-30

Name servers

anirban.ns.cloudflare.com
linda.ns.cloudflare.com

DNS records live

NS

anirban.ns.cloudflare.com
linda.ns.cloudflare.com

MX

0 smiletraincanada-org.mail.protection.outlook.com

TXT

google-site-verification=5pTF2e7Xo2oOI17fze8_MfvZbK702qwk9mzgZ6Rv0qk
MS=ms54597516

Email authentication strong

SPF: v=spf1 include:spf.protection.outlook.com include:_spf.e-activist.com -all
strict (-all)
DMARC: v=DMARC1; p=reject; rua=mailto:dmarc_agg@dmarc.250ok.net; ruf=mailto:dmarc_fr@dmarc.250ok.net; fo=1; pct=100; rf=afrf
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-04-13 to 2026-07-12

Expires in 54 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.smiletraincanada.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: frame-src *; object-src 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'
strict-transport-security: max-age=31622400; includeSubDomains; preload