evernorth.com

HTML metadata

Title

Evernorth Health Services | Redefining Health Care

Description

Evernorth leverages innovative health solutions to deliver affordable access to health care services for any employer, health plan, and government program.

Language

en

Canonical

https://www.evernorth.com/

Translations

en

Technology

CDN: Amazon CloudFront
Server: nginx
CMS: Drupal

Third-party hosts loaded (1)

assets.adobedtm.com×1

Social

Contact

Address: St. Louis, MO 63121

Registration

Registrar

Corsearch Domains LLC

Created

2010-02-15

Expires

2027-02-15 272 days left

Updated

2026-01-14

Name servers

ns.cigna.com
ns2.cigna.com

DNS records live

NS

ns.cigna.com
ns2.cigna.com

MX

10 mxa-000e5c18.gslb.pphosted.com
10 mxb-000e5c18.gslb.pphosted.com

TXT

Show 54 TXT records

google-site-verification=MmIbSvi6OttcAs2UppuACSTxapqa1yTgcpd68giQyow
google-site-verification=yxm_IHMTNJYH0YZbrk14qteVOydeUORJVErygRKb7Qg
box-domain-verification=d35fd50f63e734b908210c9f747c34e66252d6ad7909e9898762976faff9ce91
wrike-verification=NjQzODk3ODo2ZjFlNmNkZmQ0ZjUwMjc4ZWQyZjE2ODg4MDQ0YzYwNmI4OTE4ZWNlNTU5Mzg2N2FiZGY3NWU0YzljZTYzMmJl
knowbe4-site-verification=3ed12a14586cee6fec6053bc089d71bb
openai-domain-verification=dv-4UdU778JVrPOzZdit1OFoHG0
smartsheet-site-validation=QzCyN8fy8CVymzM7jOt7l0oj-WNMU29R
wrike-verification=NDA4NDA0MTo4ZmQzYzE3MjE5YWI4M2RhOGNlNGE1MTVhMzQ3M2NhOWQ4M2EyMDBhMmQxN2MwODZjMTVhOGNmM2E1NTY0MWUy
ZOOM_verify_P0kzqKkmsWMCBUiBDMBJuD
cursor-domain-verification-5r31g6=x88dfuqVJBzRiNaONuR0qr6Ot
smartsheet-site-validation=UEsSudcBvgPsTtM1tsVSbbLGT2wNincS
DirectFedAuthUrl=https://cigna.okta.com/app/cigna_massloadtoolprod_1/exkshnxuvhIrVgnJ84x7/sso/saml
DirectFedAuthUrl=https://cigna.oktapreview.com/app/cigna_massloadtooldev_1/exk2f64bzy165xPiW0h8/sso/saml
paloaltonetworks-site-verification=abf5d21710030cff954256bf040511b005fe955b6821a09533ec38b8460f0a71
to_plzy74pyf4zy6kqccvu3fzfgupbc4jp
insomnia-validation=bfbcb4e4146c450d94998cf7d02ec5262a55012e6e1252cf818e00b5e685c6fe
docker-verification=2370b571-bf68-4c98-a58f-b315db0492e9
flexera-domain-verification-rcrewmpogpbazsje
miro-verification=762bd35f2d4ee9ffe732d9efea4cac8a2b3ae518
jamf-site-verification=DN1SbncdW8jTj1hujn_FFQ
atlassian-domain-verification=cLZ4aSg1YaGCasJWorj2M7ZYi2uizQfPH9rdCTv6yN//IDE97y5LaBR34BADeVOk
wrike-verification=Njk3NDc5NjpkOGFjYWUzODYwMmU0ZmZmYTA0ZjYyNDEyY2JjYjZjYWQyN2EwMWM5OGJmOGJlZDFjNGNiYWEyMWFlYmRhNDY2
dtm-domain-verification=mVB3TSet598B2GNPfcY51StJ7m77oH_rAqnv9W2u2-M
_qclnbfb7d4qpcgw4nxcvddibdq6cpjk
_xtcxszqcv4fdz8ivrxd6aoy0o7gy0p8
google-gws-recovery-domain-verification=68874962
paloaltonetworks-site-verification=3fe887f2c2a789fc1907e726b2cb90abd66814d7d7d9df8b38e17cba0ef2aa67
00DgP0000028qGP=1TBgP00000009RV
google-gws-recovery-domain-verification=37227118
hcp-domain-verification=a05ca0facc172eb0d9df3fd988da7e4324266eb84e47d46956d2eb9269024b91
google-site-verification=xO1ClkbtZUP2aa-7Ds0UMDLedkYz8S_FRonDvuTkD0Y
MS=ms44114641
citrix.mobile.ads.otp=4z2lugzrqj6xjhfn9yj5ki
docusign=b024617d-a48c-426c-9706-ba6b4a9f725d
docusign=c9130cc5-2b36-418f-9de0-5155f343577e
facebook-domain-verification=lbuk0e7x5nf8xb7s5wua1j4416wn4u
google-site-verification=PZzI0dbcFT6cMDN2zVQ3gMZymudM1Od8REINrFFVPA4
rFLql3+zI0oJFLsHk3KxGKt4U0WPj2DPX7XOwcaVT6+xbBcXCMoiMEOoPjh6nXNLmmglyU6BLi6JL5tL9U7mUQ==
Dynatrace-site-verification=4d6316e4-6c6a-4648-943c-e54251a8580a__ogsjhb5c5bmqha769esq4ret3u
adobe-idp-site-verification=aa409e0b2734ff4c77e2d45b53a93e5b61ecd806c972f4805d6baaeec9d2d942
cisco-ci-domain-verification=110a710998ef544aeb189251bf8c500bded3ca0bfcc12a7e49f5ffaf3c4a9a94
webexdomainverification.4C675B8BE1B2B136E053AB06FC0A3F65=9a0324fe-9bbd-405d-8836-2596eeaea786
webexdomainverification.5a3788583639858ae053ad06fc0a6fcb=fb776a67-9a69-487a-bc5b-6bcc773ac56d
wrike-verification=MzYzMTQ1MDo3MDAwOWVjM2I3YjBlY2UyMTQwZTJiZTQyOWI0MDFmMzcyNmUyMTZiMzI0YzQzMTg4NWQ1NGM2NGE1NzllNWM2
wrike-verification=Mzg4MTA3ODo0ZjdhODIwM2UxODg4NDI0ZDE1ZTNmNWQzM2NlMDBiOTQ4ZDc3MTc4YWQwYjFhYjM2MzQ5MWNlMDA4MmNjNzg3
smartsheet-site-validation=pCRnVR8FH_B8dCx9Jwd5gazoWMmW8w_a
mongodb-site-verification=cIGXdJ2Yilokq1JXvlCCRLlAQyc5NAOu
mongodb-site-verification=9HqZqDbcBEtu7GYUcPRrYMyxFMiAmfh2
mongodb-site-verification=Q1EXOm2u2gPEOnty0PU8p7WEaFT8AdZi
apple-domain-verification=YYw6C9BptWHz2M2s
mongodb-site-verification=F6gSZ78hhaN3T8e055wNeFmlcO3QCku1
vmware-cloud-verification-38222b64-496b-4302-b96d-e5f426259e2a
onetrust-domain-verification=dcfbd6854e134a0d9ecadcc430b34d8f
atlassian-domain-verification=QbsnIJOAwoJpVLcz4XBjMVWd4vLYdcciHd8XgTvkX94e/+6k7hFiod6OQS8vnsKq

Email authentication strong

SPF: v=spf1 exists:%{i}.spf.evernorth.com -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; sp=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
policy: quarantine · sp=reject
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2025-11-18 to 2026-11-19

Expires in 184 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.evernorth.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.medco.com *.express-scripts.com *.evernorth.com *.linkedin.com *.accredo.com *.adobedtm.com *.everestjs.net *.omtrdc.net *.qualtrics.com *.cigna.com *.google-analytics.com *.launchdarkly.com *.braintreegateway.com *.braintree-api.com *.paypal.com *.s3.amazonaws.com *.branch.io app.link *.googleapis.com tlt.cigna.com cdn.cookielaw.org *.onetrust.com *.adsrvr.org www.redditstatic.com pixel-config.reddit.com conversions-config.reddit.com alb.reddit.com; connect-src 'self' *.mktoresp.com *.brightcove.com dotsub.com *.prod.boltdns.net *.google-analytics.com *.s3.amazonaws.com *.112.2o7.net *.omtrdc.net *.qualtrics.com *.akamaihd.net *.demdex.net *.mktoutil.com *.nr-data.net *.facebook.com *.d41.co *.branch.io app.link *.express-scripts.com *.evernorth.com *.googleapis.com *.eloqua.com tlt.cigna.com cdn.cookielaw.org *.onetrust.com *.demandbase.com api.company-target.com *.verint-cdn.com *.wevalueyourfeedback.com *.linkedin.com *.brightcovec
strict-transport-security: max-age=315360000; includeSubDomains; preload