catapulthealth.com

HTML metadata

Title

Save lives and money with VirtualCheckup | Catapult Health

Description

VirtualCheckup is a simple, at-home testing solution combined with face-to-face video consultations with licensed healthcare providers. Request a demo now.

Language

en

Generator

WordPress 6.8.1

Canonical

https://www.catapulthealth.com/

Feeds

Catapult Health » Feed RSS
Catapult Health » Comments Feed RSS

Open Graph

url: https://www.catapulthealth.com/
title: Save lives and money with VirtualCheckup | Catapult Health
locale: en_US
site name: Catapult Health
description: VirtualCheckup is a simple, at-home testing solution combined with face-to-face video consultations with licensed healthcare providers. Request a demo now.

Technology

Server: Apache
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (5)

kit.fontawesome.com×2
use.typekit.net×2
px.ads.linkedin.com×1
www.google.com×1
www.googletagmanager.com×1

Contact

Phone

75254214-785-220

Address

st A DemoCatapult Health5294

Registration

Registrar

Register.com - Network Solutions, LLC

Created

2010-11-17

Expires

2029-11-17 1277 days left

Updated

2023-03-29

Name servers

ns-1450.awsdns-53.org
ns-1744.awsdns-26.co.uk
ns-429.awsdns-53.com
ns-928.awsdns-52.net

DNS records live

NS

ns-1450.awsdns-53.org
ns-1744.awsdns-26.co.uk
ns-429.awsdns-53.com
ns-928.awsdns-52.net

MX

0 catapulthealth-com.mail.protection.outlook.com

TXT

Show 5 TXT records

atlassian-domain-verification=ZnO7jjdGm6GACGcWydDNvH2X5k57AXkdSYOpdh9KibmS5msj/I2EsiOxH3uwLy1Y
f4573fc71c731d5c362f0d7860945b88
google-site-verification=X2mAyAYxeETVwkkpUevQ0AJ-4UB1QHJQWlFqW9D0Dqw
00DC0000000QWZx=1TBPF00000000Kz
MS=ms90798289

Email authentication strong

SPF

v=spf1 ip4:18.190.139.253 ip4:67.227.157.172 ip4:205.201.133.57 ip4:167.89.123.54 ip4:167.89.115.56 ip4:168.245.29.147 include:_spf.salesforce.com include:spf.protection.outlook.com include:_spf.alchemer.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@5dwmwkj3.uriports.com,mailto:dmarc_agg@vali.email; ruf=mailto:dmarc@5dwmwkj3.uriports.com; fo=1:d:s;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCSr7S1/hCbLJefvrCZ5x3HNbqWBIl9H+Yl3ZvOtfS1HcuWBCBqJONN/3BknmJ5CM+RFeg8A5MMB1j…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Amazon ECDSA 384 M02

from 2025-08-07 to 2026-09-06

Expires in 109 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.catapulthealth.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline'; style-src *.typekit.net 'self' 'unsafe-inline'; script-src *.gstatic.com *.google.com *.googletagmanager.com *.google-analytics.com *.fontawesome.com snap.licdn.com 'self' 'unsafe-inline' 'unsafe-eval' blob:; font-src *.typekit.net *.fontawesome.com 'self' data:; connect-src *.doubleclick.net *.google-analytics.com *.google.com *.fontawesome.com *.linkedin.com yoast.com 'self' https://5dwmwkj3.uriports.com; frame-src *.google.com *.vimeo.com 'self'; img-src * data:; media-src * blob:; report-uri https://5dwmwkj3.uriports.com/reports/enforce; report-to default
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin

Links to (5)

Linked from (2)

octoberswimmer.com×4
brentozar.com×2