guthrie.org

HTML metadata

Title: Guthrie
Description: Guthrie is dedicated to providing high-quality and accessible health care that meets the needs of the entire family in NY and PA.
Language: en
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://www.guthrie.org/

Technology

Server: nginx
CMS: Drupal

Social

Contact

Address: 1 Guthrie Square, 18840, Sayre, PA

Registration

Registrar

Network Solutions, LLC

Created

1994-09-28

Expires

2028-09-27 861 days left

Updated

2023-09-29

Name servers

ns10.dnsmadeeasy.com
ns11.dnsmadeeasy.com
ns12.dnsmadeeasy.com
ns13.dnsmadeeasy.com
ns14.dnsmadeeasy.com
ns15.dnsmadeeasy.com

DNS records live

NS

ns10.dnsmadeeasy.com
ns11.dnsmadeeasy.com
ns12.dnsmadeeasy.com
ns13.dnsmadeeasy.com
ns14.dnsmadeeasy.com
ns15.dnsmadeeasy.com

MX

10 guthrie-org.mail.protection.outlook.com
30 mail10.guthrie.org

TXT

Show 8 TXT records

nph18qhr75hs8n5xvym50xxt84xnjxx7
facebook-domain-verification=4oemtlvpmog5jtj57ql1ovsexh7pu2
d365mktkey=IbHgoK6CdAglAUbB0Tpt4ayfoTsSunPMk7ox2UuDsW8x
workplace-domain-verification=P3rikjG2Re8dgD8IWkMHy1mAw39x3j
_qvc65tz2jwlwq3ent7fjszjko34ln7i
MS=ms62835649
v8v1v1jbyvm8c4yhpt8m53jkfhywlk7r
apple-domain-verification=egz1j0Dx4PK3F2gF

Email authentication strong

SPF

v=spf1 mx ip4:24.97.71.13 ip4:24.97.71.173 ip4:24.97.71.73 ip4:198.37.155.117 include:spf.constantcontact.com include:spf.tealeaveshealth.com include:spf.protection.outlook.com include:mail.verity.cloud include:spf_c.oraclecloud.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:bmzybigm@ag.us.dmarcian.com, mailto:dmarc@guthrie.org; ruf=mailto:bmzybigm@fr.us.dmarcian.com; fo=s

policy: quarantine

DKIM

default: v=DKIM1; g=*; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMVM2M1B7R9FWf4cA9ZppWuZ981KnwSEZOUirJnve4radGPa0T/UAAJEsdLpjF90JKXGg+xMz…
selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDAKvIJKIiEn30gCbsUDTcI62yCUA7T5jOzaG1TE+TXkI7PxSByNhFKhDyyn9qrABVhdRZfryi7BDsj1SwTiO…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-09-29 to 2026-10-31

Expires in 164 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.guthrie.org/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com builder.lift.acquia.com w.soundcloud.com formstack.com *.formstack.com *.guthrie.org *.sharethis.com cdnjs.cloudflare.com www.medtargetsystem.com match.deepintent.com ajax.googleapis.com connect.facebook.net resources.static.evaliahealth.com agadata.online trc.lhmos.com secure.adnxs.com cdn.taboola.com s.skimresources.com support.doctorpodcasting.com sky.blackbaudcdn.net payments.blackbaud.com bbox.blackbaudhosting.com www.google-analytics.com www.gstatic.com www.google.com api.airbud.io *.practicematch.com *.visualwebsiteoptimizer.com *.vwo.com *.sitescdn.net *.monsido.com *.doubleclick.net *.azureedge.net widget.thegivingblock.com *.healthsparq.com blob:; object-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src * 'unsafe-inline' *.practicematch.com *.visualwebsiteoptimizer.com app.vwo.com; img-src * data: *.practicematch.com *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; media-src *; frame-src *;
strict-transport-security: max-age=31536000; includeSubDomains