windsorstar.com
HTML metadata
Technology
- Server
- istio-envoy
- CMS
- WordPress
- Ads
-
- Amazon Ads
- Google Ads (DoubleClick)
- Magnite
- Fonts
-
- Google Fonts
Third-party hosts loaded (18)
- smartcdn.gprod.postmedia.digital×56
- dcs-static.gprod.postmedia.digital×43
- fonts.googleapis.com×3
- auth.lrcontent.com×2
- ak.sail-horizon.com×1
- c.amazon-adsystem.com×1
- cdn-gateflipp.flippback.com×1
- edge-auth.microsoft.com×1
- fem.gprod.postmedia.digital×1
- fonts.gstatic.com×1
- html-load.com×1
- i.prcdn.co×1
- micro.rubiconproject.com×1
- postmedia-ai.wehaacdn.com×1
- sb.scorecardresearch.com×1
- securepubads.g.doubleclick.net×1
- tags.qortex.ai×1
- www.youtube.com×1
Social
Contact
- Address
- 300 – 365 Bloor Street E, M4W 3L4, Toronto, Ontario, Canada
Registration
- Registrar
- Webnames.ca Inc.
- Created
- 1995-12-23
- Expires
- 2026-12-22 217 days left
- Updated
- 2026-04-28
- Name servers
-
- ns-cloud-d1.googledomains.com
- ns-cloud-d2.googledomains.com
- ns-cloud-d3.googledomains.com
- ns-cloud-d4.googledomains.com
DNS records live
- NS
-
- ns-cloud-d1.googledomains.com
- ns-cloud-d2.googledomains.com
- ns-cloud-d3.googledomains.com
- ns-cloud-d4.googledomains.com
- MX
-
- 10 mxa-00385001.gslb.pphosted.com
- 10 mxb-00385001.gslb.pphosted.com
- TXT
-
Show 7 TXT records
google-site-verification=CT60hSqqFr4l4dgTgD2DzSf-vbyeaC24k6z-QJxWo-cmandrill_verify.BOzTehDiRL1pMe56GmNlVgms=ms93438511facebook-domain-verification=qrybxteza5boze2wg1hmuf2gsbjcxmglobalsign-domain-verification=KaParXxs1OHDy7o8CMbPpHBN-2m_mzwdPqKMMQ66a6google-site-verification=hLP2qiN_jHBjJ0mwD3Xiyl-IC8GsVn_i5lyRVQCe9_Mgoogle-site-verification=JrkIjXpOy38cuT1TQjtIzB5ZEkzvLo20TRuRAFzL8A8
Email authentication partial
- SPF
-
v=spf1 include:amazonses.com include:spf.mandrillapp.com include:spf-00385001.pphosted.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.compolicy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
WR3
Expires in 34 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
autoplay=(*), camera=(*), display-capture=(*), encrypted-media=(*), fullscreen=(*), geolocation=(*), microphone=(*), payment=(*)- x-content-type-options
nosniff- content-security-policy
default-src * 'unsafe-eval' 'unsafe-inline' data: blob:- strict-transport-security
max-age=31536000- cross-origin-opener-policy
same-origin-allow-popups