theprovince.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 535 ms crawled 2026-05-18

US · 34.117.147.204 · AS396982 Google LLC

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title

Home | The Province Home Page | The Province

Description

Read latest breaking news, updates, and headlines. The Province offers information on latest national and international events & more.

Language

Canonical

https://theprovince.com/

Feeds

The Province » Feed RSS

Open Graph

title: The Province
site name: theprovince

Technology

Server: istio-envoy
CMS: WordPress

Ads

Amazon Ads
Google Ads (DoubleClick)
Magnite

Fonts

Google Fonts

Third-party hosts loaded (18)

smartcdn.gprod.postmedia.digital×61
dcs-static.gprod.postmedia.digital×46
fonts.googleapis.com×3
auth.lrcontent.com×2
ak.sail-horizon.com×1
c.amazon-adsystem.com×1
cdn-gateflipp.flippback.com×1
edge-auth.microsoft.com×1
fem.gprod.postmedia.digital×1
fonts.gstatic.com×1
html-load.com×1
i.prcdn.co×1
micro.rubiconproject.com×1
postmedia-ai.wehaacdn.com×1
sb.scorecardresearch.com×1
securepubads.g.doubleclick.net×1
tags.qortex.ai×1
www.youtube.com×1

Social

Contact

Address: 365 Bloor Street East, M4W 3L4, Toronto, Ontario, Canada

Registration

Registrar

Webnames.ca Inc.

Created

1995-04-25

Expires

2027-04-26 342 days left

Updated

2026-04-28

Name servers

ns-cloud-a1.googledomains.com
ns-cloud-a2.googledomains.com
ns-cloud-a3.googledomains.com
ns-cloud-a4.googledomains.com

DNS records live

NS

ns-cloud-a1.googledomains.com
ns-cloud-a2.googledomains.com
ns-cloud-a3.googledomains.com
ns-cloud-a4.googledomains.com

MX

10 mxa-00385001.gslb.pphosted.com
10 mxb-00385001.gslb.pphosted.com

TXT

Show 6 TXT records

google-site-verification=TZdvJuGAIkBYoY7I5S8fRvMTkD0GlHRylz33njJ6vRg
facebook-domain-verification=b9khnez4sjzgmuf0zi578f8cbua6cv
tollbit-domain-verification=d6dff933bb9c526c16683236ed5bd290bb7281d5545f9336dee791a101ced96c
ms=ms97766253
globalsign-domain-verification=KaParXxs1OHDy7o8CMbPpHBN-2m_mzwdPqKMMQ66a6
google-site-verification=TmFsuqQ3bqllAeQc5_RzLv7n2G0lauogiG_NjRFalfk

Email authentication partial

SPF: v=spf1 include:amazonses.com include:spf-00385001.pphosted.com ~all
softfail (~all)
DMARC: v=DMARC1; p=none; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

WR3

from 2026-04-24 to 2026-07-23

Expires in 65 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://theprovince.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: autoplay=(*), camera=(*), display-capture=(*), encrypted-media=(*), fullscreen=(*), geolocation=(*), microphone=(*), payment=(*)
x-content-type-options: nosniff
content-security-policy: default-src * 'unsafe-eval' 'unsafe-inline' data: blob:
strict-transport-security: max-age=31536000
cross-origin-opener-policy: same-origin-allow-popups