bcbsnd.com

HTML metadata

Title: Members Home | BCBSND
Description: Shop for ND's most trusted health care coverage, accepted by every hospital and most doctors in the state. Find individual and group health plans.
Language: en
Canonical: https://www.bcbsnd.com/

Technology

Server: Apache

Third-party hosts loaded (3)

maps.googleapis.com×1
rum.hlx.page×1
www.google.com×1

Social

Contact

Phone

Registration

Registrar

Network Solutions, LLC

Created

1995-04-24

Expires

2030-04-25 1437 days left

Updated

2023-05-31

Name servers

ns.bcbsnd.com
ns2.bcbsnd.com

DNS records live

NS

ns.bcbsnd.com
ns2.bcbsnd.com

MX

5 bcbsnd-com.mail.protection.outlook.com

TXT

Show 30 TXT records

2l5tg3bsv1ttq916k806rthyktjjkhs8
cisco-ci-domain-verification=468309d90b4ca13d976c3e63fcfe3ceed097925f9ad4ad5c95273727600d496
jamf-site-verification=pCpwN3_R2bYLt1SVe6IhQA
c69e3fd5-40b3-43e2-834D-23b58f036343
SFMC-1nBxqa05go5H_hPneINP-lWXpovGwXQlikh99DIz
adobe-idp-site-verification=828c044f-7170-4d12-b9ad-280c5805740a
SFMC-oi06xzVzC67UriOQG2XIGRIUtQyCzmco6UcXrMKI
SFMC-QDdkkxQWtUTAwOC9DLkNpEXFfU4dsEg6pVATAbxG
google-site-verification=Ms6K1mZABPGSKOOljr4xJby3C_F6eabpR1ERSfTNSmE
google-site-verification=pb-E6KPM0hAQ_iahxxk-60ALGV19LBPtVzVudXdgqKk
globalsign-domain-verification=06984D159DA5B4AD1091D5FFA2365507
mf/Kqes7fxWEUFJnBzoETbxdlGgBQaBkJLQiiz2iZONxIi4uXfiwhZVNd3r2FlAYvPU79pzTdexvF8/EhPKoHA==
OIlCEs+oXnCeQzBPvqF4qVraVH9nShUD6CW2Gze/JVr6NVnDxsCEzYYcf5DgGfgG1RIwCAaVwe7uyEwecOnnow==
nnrFff6K0kD7q0Odac/llUxommBIvshzPd1lNHOfYT6kAL43jPGVlYICXWDoZs2BW/fKBcwOPIW0RJMNIEFEEg==
miro-verification=cb2f453afca4e666c787a54234a48eb9fd8b85d5
MS=ms48734172
MS=2B47CB9802B98C3BAD2BDD12F725F6A56655AF7F
ucij25E7vDp01SBdY3Xashs_J_8olCo9afmZVLZzkQI
docusign=c7782840-09fa-4ff8-9194-8929903e6a47
smartsheet-site-validation=sblpZbPyMxy7a87as6zGkUOGOwzlAk02
docusign=190edd4f-4b7a-41e4-a29c-a6518e04c075
SFMC-7G-HpgltC7dTCd-bc5KrCmjLb1-OKvAWVG7KLBsx
lk9dfc4dbyk8rfk24f5n60dxrt0xtnww
/4UrLG2AEv4k/lfCKPQ/AZXpuJmM+/sd2cGC4UcdL0nQtqd//5w61WfzqpKqQ4oO/7txuQqs9u3IzvKPC5duGw==
mkW+ICOrpPYJ+Q0AUN0RSzJueV9DNZC7KF7wDvPdgyxTjs/abFVCyBBZf8FKS+f0C2EKKel3mkTSwYEnrCxPyg==
DKi+EPiPZ5h+dqN79bgq8ciwqjgwEdUi689lRME/EaPPMhCFayZKGPVwsDfJ8eA99jKJ9JAKx8Kc66+9B2HJKQ==
SFMC-_8YbrxkZAwht3yYYFmc4f2KCrRXlCtJTNSaXWagS
zGi55a5FSi1Bxwh6lGIODzbBq3yKP911qUYadnP0kSGjJO0WAVctI7+Tf/yli+mbQ/jMYaKaAi7PaD1y04YCmg==
apple-domain-verification=ityBTCQFgYwygzKL

Email authentication strong

SPF

v=spf1 include:spf1.bcbsnd.com include:spf2.bcbsnd.com ~all

softfail (~all)

DMARC

v=DMARC1;p=none;sp=none;rua=mailto:wmljftr7@ag.us.dmarcian.com

policy: none (monitoring only) · sp=none

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEXXVeDnhZp0wGonp83W/02vmewYZYKMtXd0HN8p6S3r0gz2gRKWrt2UIEvwhq45OIMsAMjoDFtSlQVluoU3…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2026-01-30 to 2027-01-30

Expires in 256 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.bcbsnd.com/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=(), usb=(), payment=()
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubdomains;
content-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://assets.adobedtm.com https://static.cloud.coveo.com https://www.gstatic.com https://www.google.com https://maps.googleapis.com https://dpm.demdex.net; https://analytics.cloud.coveo.com https://marketplace.api.healthcare.gov https://viewlicense.adobe.io https://smetrics.bcbsnd.com https://px.ads.linkedin.com https://geo.fcc.gov; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://assets.adobedtm.com https://static.cloud.coveo.com https://acrobatservices.adobe.com https://www.gstatic.com https://www.google.com https://maps.googleapis.com https://www.youtube.com https://player.vimeo.com https://connect.facebook.net https://api.dmcdn.net https://googleads.g.doubleclick.net https://snap.licdn.com https://www.googletag