wonderschool.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Gatsby
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (13)
- cdn.prod.website-files.com×47
- hubspotv2.use1-marketplace-1p-apps-prod-red.if.webflow.services×2
- js.hs-scripts.com×2
- ajax.googleapis.com×1
- cdn.jsdelivr.net×1
- d3e54v103j8qbb.cloudfront.net×1
- fonts.googleapis.com×1
- fonts.gstatic.com×1
- js.hsforms.net×1
- px.ads.linkedin.com×1
- q.quora.com×1
- unpkg.com×1
- www.googletagmanager.com×1
Social
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2004-07-05
- Expires
- 2028-07-05 778 days left
- Updated
- 2023-06-25
- Name servers
-
- april.ns.cloudflare.com
- curt.ns.cloudflare.com
DNS records live
- NS
-
- april.ns.cloudflare.com
- curt.ns.cloudflare.com
- MX
-
Show 10 MX records
- 0 alt1.aspmx.l.google.com
- 0 alt2.aspmx.l.google.com
- 0 aspmx.l.google.com
- 0 aspmx2.googlemail.com
- 0 aspmx3.googlemail.com
- 1 aspmx.l.google.com
- 10 aspmx2.googlemail.com
- 10 aspmx3.googlemail.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
Show 9 TXT records
google-site-verification=Wtma_4OX6y9WYAaw-ilq0EuFiy7-ooPPoY3nThKCJMkgoogle-site-verification=ql_TEW0yV3HPTzUSgi6pgrbzjOKISAubUnvNWxoWi4sgoogle-site-verification=uU1Sq0qVkVipElY69RH_l2rSszOYRWUiWawLUVjNqnUproxy-ssl.webflow.comatlassian-domain-verification=yW2Jqw5F5Gyo/psqlaDyoHwr/jRuBuQ6zaahZYjOCjtdTRa1w5f3E7161obdqpcNgoogle-site-verification=Bug3bxW3bqAGje-1LTJ5fLKs6Sz_vZcm1Hk5ZDf-bFggoogle-site-verification=GQ0GoW1aOHZBegGgDD8DiGakNU2SnQ9Pd5eIrSXauBQgoogle-site-verification=MZC8M4KdkMF-qhzQxp6AK17xLTzhOxmxEFJ9Cb2qwTIgoogle-site-verification=S5hE83n8ipozXBw0n-oUuzK_777yx0d5Q3Bm2nwzad8
Email authentication partial
- SPF
-
v=spf1 include:_spf.google.com include:customeriomail.com include:5241961.spf01.hubspotemail.net ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; rua=mailto:dmarc@wonderschool.com; pct=100; adkim=r; aspf=rpolicy: none (monitoring only) - DKIM
-
Show 4 DKIM selectors
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY+DOqJtgMz2rEnKmgW2GB+ql+XMY8pzCuHfCovNrB2xlWvnH00e6vC6ksuQCailezQUJ617xzKt28… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6Au8ktVDKUGbrVo5nT65pA/y5yOugnxWkOoF+Z5eeOyTqUep1hxKiu/ZcOJy+9U3M2JdR9JnrY6oETAK3… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDLZTs1Yxf4COx0VQWY1FjTT7aub4JTXtfiFKud5nc2smv0LqcD5eJ2CQXyz+1Y8DAFB+pUVZrTLzAP+y4hGyVcU1… - smtpapi:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…
selectors probed - google:
Certificate (current)
WE1
Expires in 74 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- findings
-
- CSP uses wildcard sources
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
frame-ancestors 'self' https://*.webflow.com http://*.webflow.com http://*.webflow.io http://webflow.com https://webflow.com- strict-transport-security
max-age=31536000; includeSubDomains