chihealth.com

HTML metadata

Title: CHI Health | CHI Health
Description: CHI Health serves residents of Nebraska, southwest Iowa and northern Kansas.
Language: en
Canonical: https://www.chihealth.com/

Open Graph

url: https://www.chihealth.com/
title: CHI Health | CHI Health
site name: CHI Health
description: CHI Health serves residents of Nebraska, southwest Iowa and northern Kansas.

Technology

CDN: Cloudflare

Analytics

Cloudflare Insights

Third-party hosts loaded (2)

cdn1.commonspirit.org×1
static.cloudflareinsights.com×1

Social

Registration

Registrar

MarkMonitor Inc.

Created

2008-11-22

Expires

2030-11-22 1648 days left

Updated

2025-06-10

Name servers

albert.ns.cloudflare.com
beth.ns.cloudflare.com

DNS records live

NS

albert.ns.cloudflare.com
beth.ns.cloudflare.com

MX

10 mx0a-00116001.pphosted.com
10 mx0b-00116001.pphosted.com

TXT

Show 5 TXT records

_60tes1fi9dm02hvvczgvt5a37allnzy
google-site-verification=DoUo4c5VF9BpITP8X-ViDiUeeVwiWdpO-pyGlsI53B0
google-site-verification=QN_xC7pWZDweXj6vwMaFuOYRoJOGiWhUAQ2UBvyfOqI
qphfjp6jr4q9r5q0c639f9fhhby43xfw
21c07nyddbm61bzb6wfq3h3dv3cw3zsh

Email authentication strong

SPF

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: reject (enforced)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjlgwM9tcEk7cRW4Qi5C2lpOwLWLH+pLZ2FV0RtRe+0Qp5/4EL2Vgop6UIwxPF8mWyZOtE5ekTsnjs…
mail: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8nkgm9RnSuOUraMCgAqynI1JwVj9yjs7SDTPOOzAzAWCwns7QwCBrtoTSZCo7ufFayZ1Boii5eMQ+JNhKUH5…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XXr7SQX1psoGiTrj4phGxNBKgFBHm+FN083EVEuq7y66XM0mLir/9jLLxiT5qa+G77cLBmrVnrJamlG6g…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQChh20PkFUKrg052y5SoraAlVpeo5lHiqOTnC9GytiPz/Gaj6D/QM6CLaVsTzI9+9nUDSsF8z8rap6IsrkePDIcNv…

selectors probed

Certificate (current)

WE1

from 2026-04-02 to 2026-07-01

Expires in 43 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.chihealth.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: base-uri 'self'; style-src 'self' 'unsafe-inline' *.cognitoforms.com *.dignityhealth.org *.foresee.com *.hellohumankindness.org *.marketo.com cdn.commonspirit.org cdn.cookielaw.org cookie-cdn.cookiepro.com fonts.googleapis.com geolocation.onetrust.com privacyportal.onetrust.com use.typekit.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.dignityhealth.org *.evaliahealth.com *.everestjs.net *.everesttech.net *.google.com/pagead/ *.google.com/recaptcha/ *.googleadservices.com *.gstatic.com/recaptcha/ *.hellohumankindness.org *.invoca.net *.jotform.io *.marketo.com *.marketo.net *.recaptcha.net/recaptcha/ *.youtube-nocookie.com *.youtube.com adobedc.demdex.net ajax.googleapis.com ajax.microsoft.com assets.adobedtm.com assets.adobedtm.com bam.nr-data.net cdn.commonspirit.org cdn.cookielaw.org cdn1.commonspirit.org cdnjs.cloudflare.com commonspirit.experiencecloud.adobe.com cookie-cdn.cookiepro.com experience.adobe.com geolocation.onetrust.com js-agent.newrelic.com login.commonspirit.
strict-transport-security: max-age=15786000; includeSubDomains