mychartiowa.com

HTML metadata

Title: MyChart - Login Page
Language: en
Canonical: https://www.mychartiowa.com/mychartprd/Authentication/Login

Open Graph

title: MyChart - Login Page
site name: McFarland Clinic, Mary Greeley Medical Center, & Ames Surgery Center

Technology

CDN: Cloudflare

Analytics

Cloudflare Insights

Third-party hosts loaded (1)

static.cloudflareinsights.com×1

Registration

Registrar

Network Solutions, LLC

Created

2009-10-22

Expires

2029-10-22 1250 days left

Updated

2024-08-23

Name servers

kellen.ns.cloudflare.com
rose.ns.cloudflare.com

DNS records live

NS

kellen.ns.cloudflare.com
rose.ns.cloudflare.com

MX

10 mxa.mailgun.org
10 mxb.mailgun.org

TXT

_rgidmbmvz00umrubamdd95mjast3zkw

Email authentication partial

SPF: v=spf1 a mx ptr ip4:167.142.235.187 ip4:167.142.235.190 include:spf.protection.outlook.com include:mailgun.org a:mail.mgmc.com ~all
softfail (~all)
DMARC: v=DMARC1;p=none;sp=none;pct=100;rua=mailto:infrastructure@mychartiowa.com;ruf=mailto:admin@mychartiowa.com;ri=86400;aspf=r;adkim=r;fo=1
policy: none (monitoring only) · sp=none
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-05-12 to 2026-08-10

Expires in 81 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.mychartiowa.com/mychartprd/Authentication/Login

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: same-origin
x-content-type-options: nosniff
content-security-policy: default-src 'self';base-uri 'self';frame-ancestors 'self' https://*.mcfarlandclinic.com https://*.mgmc.org https://*.mychartiowa.com https://beta---online-checkin-ae65ecrdlq-uc.a.run.app/ https://covid-vaccine-scheduler-dev-ae65ecrdlq-uc.a.run.app https://demosched.mcfarlandclinic.com https://hvprdweb0046.hv.local https://hvprdweb0047.hv.local https://mcfarlandclinic.com https://mychartiowa.com https://prd-mychart03.hv.local https://prd-mychart04.hv.local;frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://mychart.personapay.com https://pay.instamed.com https://www.google.com https://www.recaptcha.net;script-src https://www.mychartiowa.com 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com;img-src https://* 'self' * blob: data: https://www.google.com https://www.gstatic.com;connect-src 'self' epichttp: https://www.google.com https://www.gstatic.com;style-src https://www.mychartiowa.com 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob
strict-transport-security: max-age=31536000
content-security-policy-report-only: default-src 'self';base-uri 'self';frame-ancestors 'self' https://*.mcfarlandclinic.com https://*.mgmc.org https://*.mychartiowa.com https://beta---online-checkin-ae65ecrdlq-uc.a.run.app/ https://covid-vaccine-scheduler-dev-ae65ecrdlq-uc.a.run.app https://demosched.mcfarlandclinic.com https://hvprdweb0046.hv.local https://hvprdweb0047.hv.local https://mcfarlandclinic.com https://mychartiowa.com https://prd-mychart03.hv.local https://prd-mychart04.hv.local;frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://mychart.personapay.com https://pay.instamed.com https://www.google.com https://www.recaptcha.net;script-src https://www.mychartiowa.com 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com;img-src https://* 'self' * blob: data: https://www.google.com https://www.gstatic.com;connect-src 'self' epichttp: https://www.google.com https://www.gstatic.com;style-src https://www.mychartiowa.com 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob

Linked from (1)

mcfarlandclinic.com×1