wakesys.com

HTML metadata

Title

wakesys - Modern Booking System for Attraction Parks & FECs

Description

A booking system built by park operators, for park operators. Mobile-first, beautiful, and lightning fast. Pre-arrival waivers, group booking, and real-time POS.

Language

en

Canonical

https://www.wakesys.com

Translations

de
en
fr

Open Graph

url: https://www.wakesys.com
title: Modern Booking System for Attraction Parks & FECs
description: A booking system built by park operators. Mobile-first, beautiful, and lightning fast. Pre-arrival waivers, group booking, and real-time POS.

Technology

CDN: Vercel
CMS: Next.js

Third-party hosts loaded (1)

www.facebook.com×1

Contact

Email

Registration

Registrar

Mesh Digital Limited

Created

2010-12-20

Expires

2026-12-20 213 days left

Updated

2025-12-19

Name servers

ns-1506.awsdns-60.org
ns-1681.awsdns-18.co.uk
ns-640.awsdns-16.net
ns-90.awsdns-11.com

DNS records live

NS

ns-1506.awsdns-60.org
ns-1681.awsdns-18.co.uk
ns-640.awsdns-16.net
ns-90.awsdns-11.com

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

cloudflare_dashboard_sso=69d3742874f293bc6acb285db997caa8

Verified for

Apple
Google
Twilio

Email authentication weak

SPF

not published

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5LvR8CbpSEAVermovWTud5EjY9s/22NWwH74jEjiUF9WPtTw2saG9LtgbrJdmBwncUerQIXT5RsOFfTAs…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNk/sNzMx4TRV/UfBF07OReh1RyyMVBJTI/QY7lmIfwvfmEJoizZF1260NQ/W8nIgPD4TxzIxPBrojBtYMNLiPlx…

selectors probed

Certificate (current)

R13

from 2026-04-23 to 2026-07-22

Expires in 62 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.wakesys.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://www.google.com https://www.gstatic.com https://js.pusher.com https://va.vercel-scripts.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.clarity.ms https://scripts.clarity.ms; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.wakesys.com https://www.google-analytics.com https://www.facebook.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://pagead2.googlesyndication.com https://www.clarity.ms; font-src 'self' data:; connect-src 'self' https://*.wakesys.com https://www.google-analytics.com https://analytics.google.com https://*.google-analytics.com https://www.facebook.com https://graph.facebook.com https://*.pusher.com wss://*.pusher.com https://www.google.com https://googl
strict-transport-security: max-age=63072000; includeSubDomains; preload