nyp.org

HTML metadata

Title: NewYork-Presbyterian | New York Hospital & Health System
Description: NewYork-Presbyterian, a leading health system dedicated to groundbreaking research and innovative care, serves patients in the New York City area and beyond.
Language: en
Canonical: https://www.nyp.org/

Open Graph

url: https://www.nyp.org/home
title: NewYork-Presbyterian | New York Hospital & Health System
image:url: https://cdn2.webdamdb.com/1280_qQogxDEk12l4XPjh.png?20220713
site name: NewYork-Presbyterian
description: NewYork-Presbyterian, a leading health system dedicated to groundbreaking research and innovative care, serves patients in the New York City area and beyond.

Technology

CDN: Cloudflare
CMS: Drupal

Analytics

Cloudflare Insights

Third-party hosts loaded (3)

cdn2.webdamdb.com×1
maps.googleapis.com×1
static.cloudflareinsights.com×1

Social

Contact

Address: New York, NY, USA

Registration

Registrar

Network Solutions, LLC

Created

1998-06-22

Expires

2026-06-21 33 days left

Updated

2025-06-07

Name servers

ns1.nyp.org
ns2.nyp.org
dns1.med.cornell.edu
lex-dns1.med.cornell.edu

DNS records live

NS

lex-iblxext1.med.cornell.edu
ns1.nyp.org
ns2.nyp.org
york-iblxext1.med.cornell.edu

MX

10 mxa-00227301.gslb.pphosted.com
10 mxb-00227301.gslb.pphosted.com

TXT

Show 26 TXT records

adobe-sign-verification=bf5ccd346fc66b249771b0717e99cd52
f2f430f1-93d9-4bd0-9614-1a466b48d7e2
atlassian-domain-verification=Pvf4afuMBaLU1cHYHJBKU7Q4xFm/LONzatsilXm8bRsj92ea3wkAR0rCsUZ70tis
docusign=b114b0bc-eb76-49b9-8719-1649da598d50
MS=ms42914931
google-site-verification=Q0FbD6y7P5umVdRX249nFJsygMySLPBL8E99pf07Ix4
vffq4pdh9ysk29d4mf8dy4bff597nwvt
99c2574cab4047585ecdb204031f78bd.nyp.org
smartsheet-site-validation=1gBgHTrN3rQlLJPJzGg6bqxAKgCsQ64E
apple-domain-verification=BeI4zFZput0g3XCe
MS=ms72950171
MS=E46A60824184DAD306A38B6683BFC6045B08E56A
logmein-verification-code=08ed042b-49e7-447b-b181-69fffa3584c2
docusign=c8cb16b1-a924-452a-8cd1-74f232ec43ef
hpe-greenlake-domain-verification=4277417668667275565455545363542d497037536f69436659546e7048456a59
127B91CA0D6883127C7CE0CC99D04C010B55C18F9CC415239FF4DEEB0FED979E
google-site-verification=ufgBqtrFXWdjob8PXVsnrUXUoq2hLuwBYclcoUo2Oyc
ciscocidomainverification=3243b5dffab04748ce8c2697ae275919a961941b0182d7013cebe20c78f9c463
duo_sso_verification=nIbQ8Ff2tz0HlYX9qnhsWF0ocDMVJ9eph6bneXbRWDMSnOomWowfPYhU7ksYvwIA
onetrust-domain-verification=69c129793a9c4ef59a82f21232d3303d
onetrust-domain-verification=41c50c5a1a96450bb3e77db8aa2e71bc
google-site-verification=MdF06uCbm392kIznrvBgKXpPXeEgdoYWP_IqWbEDMtE
apple-domain-verification=ATvHwOKdgy4Nw8AbKZdWkha3UTjC5SKu-ZeNm87s7bE
ZOOM_verify_nHevV2GxSHqSYaA7m5x1xQ
Ara9AvXtUAzXcjfIpRAFwWpW4BCoOMeXmK5G102wwr6QvLxZWq3qyFXyO4LjftufvXpD86Lcxjauwe8/pjO0Lg==
vmware-cloud-verification-f3d64c79-c80d-4245-a898-b9ebb5b7326f

Email authentication strong

SPF

v=spf1 include:spf-00227301.pphosted.com include:spf1.nyp.org include:spf2.nyp.org ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:nyp@rua.agari.com,mailto:rua.nyp@nyp.org; ruf=mailto:nyp@ruf.agari.com,mailto:ruf.nyp@nyp.org

policy: reject (enforced)

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxnwZc4IneYo8cRg6PRR6pl4wxaqDxBVPRtJIMhHv29VTpmPUIMHKmwlShalUouq4ygcxNt90z3hfkUdmS…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDgq4WY8wH4aXqOltolkyjnUGMTJ1T6k9YscUFOesyEs68aiMRz0Kg594jiqfi6p2MVD8bbVyPEEGypzvdCcF2dX1…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2026-02-17 to 2027-02-17

Expires in 274 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.nyp.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' *.nyp.org *.prod.acquia-sites.com
strict-transport-security: max-age=31536000