aamc.org

HTML metadata

Title: Tomorrow's Doctors, Tomorrow's Cures | AAMC
Description: The AAMC is dedicated to transforming health care through innovative medical education, cutting-edge patient care, and groundbreaking medical research.
Language: en
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://www.aamc.org/

Open Graph

url: https://www.aamc.org/home
title: Tomorrow's Doctors, Tomorrow's Cures
site name: AAMC
description: The AAMC is dedicated to transforming health care through innovative medical education, cutting-edge patient care, and groundbreaking medical research.

Technology

CDN: Fastly
Server: nginx
CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (3)

aamc.tfaforms.net×5
cdnjs.cloudflare.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

NameSecure L.L.C.

Created

1993-09-30

Expires

2026-09-29 133 days left

Updated

2025-09-04

Name servers

ns-1217.awsdns-24.org
ns-436.awsdns-54.com
ns-605.awsdns-11.net

DNS records live

NS

ns-1217.awsdns-24.org
ns-1703.awsdns-20.co.uk
ns-436.awsdns-54.com
ns-605.awsdns-11.net

MX

10 aamc-org.mail.protection.outlook.com

TXT

Show 11 TXT records

_ovrga9bi27m4ngn6hdt7r3omgovbtuz
atlassian-domain-verification=4xSR/m1XaujmYcXzFnoKux1jAFFfqFwBFvnmyXArIl8v1u9LOcony034l4VwNMOS
cmthzdd3w3rw191xk9st5hmsyyrtfr29
duo_sso_verification=u8de6tVtLaUnYGN3EASCGnp3nHTxhYjc3XT3WxCMQGeon53d8laiErUf8BXt9dwU
f6hqc0qtrd9tvkq5yn4rvf43qgmm4brq
notion-domain-verification=Nz1AmXOOqbp4W4ALvziw1bS8TRPbrrkfdr7Fhm3IVuh
openai-domain-verification=dv-gQpllJ6gxggQriAi5bJtGKj1
rtwpvwypd5160tv1glp2h76jdn80j938
w01s3fh2df0f9dwc5vdp2p3mytmkhwky
ycklfwb1rssx723ddn6b21tb27x9t4nw
3ymm921w2qx6vzpg7g8bczx47dn4bdlv

Email authentication strong

SPF

v=spf1 include:a_spf.aamc.org include:b_spf.aamc.org include:c_spf.aamc.org include:d_spf.aamc.org include:_spf.salesforce.com include:_spfprod.ngpvan.com include:useastemail.verintefm.com include:spf.protection.outlook.com include:spf-us.emailsignatures365.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:postmaster@aamc.org;

policy: none (monitoring only)

DKIM

selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDTpURestntUwXjZinxF1/QXfNScn4wYnY++cKgV1rp+zMMjWxdKXdSq+Y3f8zXkA4KF+Sbim4AtJXhrl8fq7…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/xynupH65bsMXNjsMKnnhj1I6pWPl6Y3OWJpejUKOlVWGKpIAp3dLtpW/NIXeSaNGcd8xTEDLnWXXmgj+…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDGXCQy7N49SNzBI/I8BLw1vnmM+nc/QqBUTGpekGUGY1+8xi+gValYgV3TZRydz+ZJZXOkpBZkGGDek23r6cYNKT…

selectors probed

Certificate (current)

Amazon RSA 2048 M01

from 2025-12-07 to 2027-01-06

Expires in 232 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.aamc.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'unsafe-inline' 'unsafe-eval' 'self' http://cdnjs.cloudflare.com https://cdnjs.cloudflare.com *.gstatic.com *.google.com *.google-analytics.com https://js-agent.newrelic.com https://aamc.tfaforms.net *.googletagmanager.com https://gateway.foresee.com *.youtube.com *.nr-data.net https://platform.twitter.com https://api.connectedcommunity.org https://unpkg.com https://cdn.jsdelivr.net https://extend.vimeocdn.com https://ajax.googleapis.com/ https://code.highcharts.com/ https://public.tableau.com/ *.aamc.org *.googleadservices.com https://googleads.g.doubleclick.net *.google.co.in https://player.vimeo.com/ *.hotjar.com/ https://snap.licdn.com https://www.redditstatic.com; style-src 'self' 'unsafe-inline' https://gateway.foresee.com https://fonts.googleapis.com *.aamc.org https://aamc.tfaforms.net https://unpkg.com https://player.vimeo.com/; img-src 'self' *.google-analytics.com *.foresee.com data: *.aamc.org *.googletagmanager.com https://bam.nr-data.net https://aamc.tfaforms.n
strict-transport-security: max-age=31557600; preload, max-age=31557600; preload