wealthsimple.com

HTML metadata

Title

Wealthsimple | More is more

Description

Being better than a bank means more of everything. Spend, trade and invest with Wealthsimple.

Language

en-ca

Canonical

https://www.wealthsimple.com/en-ca

Translations

en-ca
fr-ca

Open Graph

title: Wealthsimple | More is more
description: Being better than a bank means more of everything. Spend, trade and invest with Wealthsimple.

Technology

CDN: Cloudflare
CMS: Next.js

Third-party hosts loaded (1)

videos.ctfassets.net×1

Social

Registration

Registrar

Tucows Domains Inc.

Created

2006-08-03

Expires

2026-08-03 76 days left

Updated

2025-08-02

Name servers

ns-1013.awsdns-62.net
ns-1489.awsdns-58.org
ns-1799.awsdns-32.co.uk
ns-390.awsdns-48.com

DNS records live

NS

ns-1013.awsdns-62.net
ns-1489.awsdns-58.org
ns-1799.awsdns-32.co.uk
ns-390.awsdns-48.com

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
30 aspmx2.googlemail.com
30 aspmx3.googlemail.com

TXT

Show 20 TXT records

anthropic-domain-verification-354e32=bdwFvfUoQJTh9i0U08pAJMpif
MS=ms16093367
yahoo-verification-key=tEyO6UlVLZ5AwYud2VEn06fPSREZq/wHuK11rCD6KD4=
float=float-verification-code-20926472-69f2-41d2-8cae-54bb2d96e0ce
notion-domain-verification=XmzxEmNsISaNX6131HiEY0rj0C1n7I3loZSTRLq4CE4
adobe-idp-site-verification=98a06a39ffe1d40b7cf805353b67557d661c471d7a03a60916c67ab63a09d11c
stripe-verification=FB1AD3C0CE6ED70BFE1153C028679FC884E3294C733A217D1992698556FEF824
jamf-site-verification=HPvHaznxwrytBEGOr-HhHg
mixpanel-domain-verify=dda9632b-398b-4a5a-b66f-1efce3c5e9ed
cursor-domain-verification-z15cp7=lEAIX9GlARysNkQKVDE1ChLsC
mongodb-site-verification=0qQPWwWJ6ctmaHmFwYzkJcsfXFW8dy9z
miro-verification=25708c751af0bf01d94004d869a817d6b06ef5ec
atlassian-domain-verification=PRQNKGIUMgSwW5WsZclPrLoRNQlgmArVDoRIVWTmPZPXZSHt1HCVhzOKxBRb2qcF
apple-domain-verification=HYZfm7RZfvrKoihG
rippling-domain-verification=c7708abf9c715d23
maestro-cloud-domain-verification-5wg6b5=rXmdpBI9oN34UzhWZN87jXjDZ
linear-domain-verification=cuxizdawtryq
google-site-verification=nhakyduXXr0ABlWxvUMa2KP03gN6LRqTEFZzNDldPIY
docker-verification=2e88afcb-7684-4ce5-89ad-943fc7a3ac82
google-site-verification=Ob-Sulnda1D40iFCG8f8j8nxAslpv3aSg0gmIdNDW78

Email authentication strong

SPF

v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email

policy: reject (enforced)

DKIM

Show 5 DKIM selectors

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApby0vWJhnYj+ecSywOk544bEDVP1FrqooxkdWjqFefj2SvE6wSxjy7jnKF05G0y7myiN8F1FExhsyu…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq6ANdW6VZqHDmYiTVvRDBGFCTOfqG4VIsacUBssP9l+OuHEwpEozcVq6bL075+4dI3x9sD/FZayl8OYaT…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDO1Av6y7RKMkzFsiN7lciFUqE5VkLm8XiwiFPdlfxpFV+h5mWxl3WgYLF3xKt1oxOoPoKMDr9qrjI8zAK1HgsmUy…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2026-01-12 to 2027-02-11

Expires in 268 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.wealthsimple.com/en-ca

present

strict-transport-security
content-security-policy

findings

CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' blob: data: https://*.wealthsimple.com https://api.statsig.com https://featuregates.org https://statsigapi.net https://events.statsigapi.net https://api.statsigcdn.com https://featureassets.org https://assetsconfigcdn.org https://prodregistryv2.org https://cloudflare-dns.com https://beyondwickedmapping.org https://*.fullstory.com https://*.decagon.ai https://*.google.ca https://*.google.com https://*.google.co.uk https://*.googleadservices.com https://*.jitsu.com https://*.maze.co https://*.reddit.com https://*.redditstatic.com https://*.sentry.io https://*.ingest.sentry.io https://*.snapchat.com https://*.tiktokw.us https://*.vaultdcr.com https://analytics.tiktok.com https://analytics.twitter.com https://t.co https://translate-pa.googleapis.com https://www.google-analytics.com https://insight.adsrvr.org https://ingesteer.services-prod.nsvcs.net https://googleads.
strict-transport-security: max-age=31536000; includeSubDomains