Ads, Trackers, Security & UX Review
6 public pages rendered. The score, signal cards, and evidence tables below show what appeared in the browser sample.
Status
Scan completed
Host
xtramath.org
Confidence
72/100
Observed safety score
Signal mix
Weak2
Ad domains
19
Tracker domains
72/100
Confidence
xtramath.org
Education and student tools
AMAZON-02 - Amazon.com, Inc., US
98.88.53.96; AS16509
Enabled
Amazon
144
20 third-party domains observed
Four quick signals first. Evidence stays grouped by risk area.
Tracking signals
Header gaps
Ad pressure
Low friction
Meaning
The rendered scan observed 19 tracker-domain matches, led by cdn.prod.website-files.com (62), fonts.gstatic.com (20), google.com (6) and 16 more, and up to 12 cookies across the sampled public pages.
Evidence
Meaning
Security posture is based on observed TLS, response headers, mixed-content behavior, and usable external-check output.
Evidence
Meaning
The rendered scan observed 2 ad-domain matches across 6 sampled public pages, led by googleads.g.doubleclick.net (2), ad.doubleclick.net (1).
Evidence
Meaning
The rendered public-page sample loaded with HTTP 200 and 10278 visible text characters.
Evidence
Key signals first, with important limits kept close so the report stays useful without overstating certainty.
Captured evidence
Pages sampled
Rendered browser pass
Requests
20 third-party - 2 ad - 19 tracker
Cookies
6 third-party
Security posture
HSTS no - CSP no - X-Frame no
Request volume
144 vs 628 median
Evidence
Third-party domain count was below the same-cluster...
Evidence
Tracker-domain count was below the same-cluster med...
Scan boundary
School context
Policy, consent, paid features
Ad context
Location, consent, A/B tests
External checks
Safe Browsing
Google Transparency Report Safe Browsing status returned no threat matches for 1 URL
HTTP Observatory
MDN HTTP Observatory returned grade D with score 30 and 4 failed checks
Observed domains are grouped by company or tool, purpose, request volume, and the sampled pages where they appeared.
14
Entities
Companies or tools grouped from observed domains.
5
Categories
Most active: Tracking and measurement.
125
Requests
Classified ad or tracker requests in the sample.
2/6
Pages seen
Sampled pages with at least one classified signal.
Tracking and measurement
10 entities / 16 domains
Advertising
1 entity / 2 domains
Analytics
1 entity / 1 domain
Customer messaging
1 entity / 1 domain
Tag management
1 entity / 1 domain
Website Files
Tracking and measurement
62
requests
2/6
pages
Tracking and measurement
34
requests
2/6
pages
Hscollectedforms
Tracking and measurement
4
requests
2/6
pages
Jsdelivr
Tracking and measurement
4
requests
2/6
pages
Advertising
3
requests
2/6
pages
Amazon.com
Tracking and measurement
2
requests
2/6
pages
Raw domains and request paths classified as ad-network matches in rendered samples.
2
domains
3
classified requests
2
pages with matches
googleads.g.doubleclick.net
Matched known ad-network patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Matched hosts
Domain matched known ad-network patterns.
ad.doubleclick.net
Matched known ad-network patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: fetch.
Seen in sample
Request types
Matched hosts
Domain matched known ad-network patterns.
Raw domains and request paths classified as tracker matches in rendered samples.
19
domains
122
classified requests
2
pages with matches
cdn.prod.website-files.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: stylesheet, script, image, xhr.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
fonts.gstatic.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: font.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
google.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: fetch, image.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
cdn.jsdelivr.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: stylesheet, script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
fonts.googleapis.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: stylesheet.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
ajax.googleapis.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
api.hubapi.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: xhr.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
d3e54v103j8qbb.cloudfront.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script. Classified owner: Amazon.com. Tracker owner: Amazon.com.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker data for Amazon.com.
fonts.cdnfonts.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: stylesheet.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
forms.hscollectedforms.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: xhr.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
googleads.g.doubleclick.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
googletagmanager.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
js.hs-analytics.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
js.hs-banner.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
js.hs-scripts.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
js.hsadspixel.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
js.hscollectedforms.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
track.hubspot.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: image.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
ad.doubleclick.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: fetch.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
These options are category-relevant comparison leads for XtraMath. Each card separates why it is comparable and when it fits.
Gimkit
gimkit.com
Why compare it
Gimkit is in the education and student tools category and has rendered scan evidence, making it useful for comparing ads, trackers, cookies, and security posture.
Best fit
Use it as a comparison point when you want another option with lower observed risk in the same evidence categories.
Scan-backed comparison
Blooket
blooket.com
Why compare it
Blooket is in the education and student tools category and has rendered scan evidence, making it useful for comparing ads, trackers, cookies, and security posture.
Best fit
Use it as a comparison point when you want another option with lower observed risk in the same evidence categories.
Scan-backed comparison
ClassLink
classlink.com
Why compare it
ClassLink is in the education and student tools category and has rendered scan evidence, making it useful for comparing ads, trackers, cookies, and security posture.
Best fit
Use it as a comparison point when you want another option with lower observed risk in the same evidence categories.
Scan-backed comparison
Zearn
zearn.org
Why compare it
Zearn is in the education and student tools category and has rendered scan evidence, making it useful for comparing ads, trackers, cookies, and security posture.
Best fit
Use it as a comparison point when you want another option with lower observed risk in the same evidence categories.
Scan-backed comparison
Latest scan of XtraMath across 6 public pages captured 144 browser requests, 20 third-party domains, 2 ad-domain matches, 19 tracker-domain matches, and 12 cookies (6 third-party). Header gaps: HSTS, CSP, X-Frame-Options. External checks: Safe Browsing clear; HTTP Observatory flagged. This is not a guarantee of safety; it is a time-bound public-page evidence report.
Key observations from the rendered sample: 144 browser requests, 20 third-party domains, 2 ad-domain matches, 19 tracker-domain matches, and 6 third-party cookies. Header gaps: HSTS, CSP, X-Frame-Options.
The rendered public-page scan found 2 ad-domain matches and 19 tracker-domain matches across 6 sampled pages. The most active matches were cdn.prod.website-files.com (62), fonts.gstatic.com (20), google.com (6) and 16 more.
Use the public-page privacy and security signals here, then compare student-data terms, SSO settings, roster access, retention policy, parent consent, and district controls.
We tested xtramath.org because it is the website address selected for this report.
Compare the same evidence categories: rendered requests, ad-domain matches, tracker-domain matches, cookies, security headers, external checks, and whether each alternative fits the same user task.
No. Blockify can reduce ads, trackers, and pop-ups in the browser, but no scan can guarantee every page, account flow, future visit, or personalized state is safe.
