mhsindiana.com

.com crawl

First seen 2026-04-23 · Last seen 2026-05-16 · ok HTTP/1.1 200 11267 ms crawled 2026-05-16

US · 204.107.62.207 · AS36092 Centene Corporation

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title

Indiana Health Insurance Plans | Get Insured with MHS Indiana

Description

MHS Indiana offers health insurance in Indiana for those eligible for Indiana Medicaid or on the Health Insurance Marketplace. Learn more about our health plans and enroll today!

Language

Translations

Technology

CDN: Amazon CloudFront
CMS: Gatsby

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (9)

fonts.googleapis.com×3
interceptor.cnc-interceptor.com×2
ajax.googleapis.com×1
assets.adobedtm.com×1
cdn.jsdelivr.net×1
js-cdn.dynatrace.com×1
www.google.com×1
www.googletagmanager.com×1
www.youtube.com×1

Social

Contact

Phone

Address

st to you. Call 1-877-647-4848

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2010-08-13

Expires

2026-08-13 84 days left

Updated

2025-10-29

Name servers

ns11.centene.com
ns13.centene.com
ns21.centene.com
ns22.centene.com

DNS records live

NS

ns11.centene.com
ns13.centene.com
ns21.centene.com
ns22.centene.com

MX

10 mxa-0020eb02.gslb.pphosted.com
10 mxb-0020eb02.gslb.pphosted.com

TXT

Rb3ov94YrSUv0VnMX4ck/f09eR1J/SjmOAAxTkF8fM0VyDkBMCNz5HOyYj74knt6+6zXyF7sGtgkg9WSXplkHw==
_klzep3lcd6tcvt170j9eyvstw94z6q9
_cqbjidaod2w6ag2zq34khyx6fuqu6sp

Verified for

Adobe
Google
Microsoft 365
Smartsheet

Email authentication weak

SPF

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all

strict (-all)

DMARC

not published

DKIM

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4N6QdTm7/vKmnNOhCUkyahNCBJoigfECFQFAFMzs4Cs+poOA8pxSBCkHT4pVE2FO0zR7ov9aJu9na…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2026-01-14 to 2027-01-14

Expires in 238 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.mhsindiana.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: img-src * data:; default-src * data: 'unsafe-eval' 'unsafe-inline' blob:; object-src 'none';
strict-transport-security: max-age=31536000; includeSubDomains