indexo.dev

surest.com

.com crawl

First seen 2026-05-12 · Last seen 2026-05-18 · ok HTTP/1.1 200 3209 ms crawled 2026-05-18

US · 151.101.194.117 · AS54113 Fastly, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Surest Health Plan
Description
Surest is an employer-sponsored health plan available to employers with 2+ employees.
Canonical
https://www.surest.com/

Open Graph

url
https://www.surest.com/
title
Surest Health Plan
description
Surest is an employer-sponsored health plan available to employers with 2+ employees.

Registration

Registrar
CSC Corporate Domains, Inc.
Created
1999-07-18
Expires
2026-07-18 59 days left
Updated
2025-07-14
Name servers
  • ns-1125.awsdns-12.org
  • ns-1963.awsdns-53.co.uk
  • ns-286.awsdns-35.com
  • ns-597.awsdns-10.net

DNS records live

NS
  • ns-1125.awsdns-12.org
  • ns-1963.awsdns-53.co.uk
  • ns-286.awsdns-35.com
  • ns-597.awsdns-10.net
MX
  • 5 mxa-0077b904.gslb.pphosted.com
  • 5 mxb-0077b904.gslb.pphosted.com
TXT
Show 19 TXT records
  • Dynatrace-site-verification=88c0a834-315f-446d-9485-3f4eee6f5df7__thu9hsn33h58hjg456qis4tmbg
  • MS=ms12400406
  • slack-domain-verification=ns3CFCdBhWHDE2XrbDGtNtfzK2xLMox4EuhI2pGo
  • google-site-verification=7o41mTpKZOhShF_CCASIxii2pVtnEAT18iArvMJM6yQ
  • notion-domain-verification=qFo8EEUEla873XXN79B6O9uCqnxQIC4ddoFWbGgvv1B
  • asv_domain=9821b6864053f6a67bf1bccdade03641
  • knowbe4-site-verification=a3a464993337b797df9e97d0730c407b
  • box-domain-verification=036752a3751161e3d322418a142124955ce277d15a0749afd049afc54b7fe741
  • docusign=3ed99f27-9920-4b77-b399-4df0fa9dc10d
  • MS=ms36004515
  • 86cafcee-3f42-4158-a949-37b58a0444d7
  • google-site-verification=J59kth0JQn6nciRDu7Ga1rUWWMdKejEbetKEIf8OsqM
  • facebook-domain-verification=j7nr7lf0k0dgesv9b42oz4xzdgisfl
  • figma-domain-verification=f76890900f7103ffc8eca13d23dfc3aca49fe2bf124a7e11c4f9ac03d61b8d61-1725631458
  • bitrise-verification=57adf39439083ec0-bYo5RBFEoWrz
  • google-site-verification=uUTKEf80LLMtnXbOR63oXzdQyVEZkK5ai_EgbMznB0c
  • adobe-idp-site-verification=9a5c47599b4f379d5e29ede339f3da7f9e1689f8e16709c98e397c86a1c68122
  • atlassian-domain-verification=SET43ZOLDQPh121WHS3dF0jTbqpRSg6ytsWyRqgJtalNYGPQvyPVZc5JbTi7ie6b
  • smartsheet-site-validation=NShoFEupnfiVOjPGP6k0WYapb7J-hb_c

Email authentication strong

SPF
v=spf1 ip4:64.235.144.0/20 ip4:209.222.80.0/21 include:spf.protection.outlook.com include:mktomail.com include:_spfae.corpmailsvcs.com -all
strict (-all)
DMARC
v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
policy: reject (enforced)
DKIM
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUicm0PaSbUgUNl9wHGfuV6uXp7fOPepCZXwS5nc4g91SME3ilMJTO9UxqfoLArzUwADKEErSvzoBLi9Qk…
  • s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Nb97OM3G8h1lVFyoEo01sN8oWRBhzGSjZXUPkO3hEhaq6jYZRdyxTAsiR5iERUd0NmFNsOutLKJZAnbEd…
selectors probed

Certificate (current)

R12
from 2026-03-19 to 2026-06-17
Expires in 29 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.surest.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • cross-origin-opener-policy
findings
  • CSP allows unsafe inline scripts/styles
  • missing Permissions Policy
Header values
referrer-policy
no-referrer-when-downgrade
x-frame-options
sameorigin
x-content-type-options
nosniff
content-security-policy
script-src 'unsafe-inline' 'self' 'unsafe-eval' https://analytics.tiktok.com https://fonts.googleapis.com https://js.hsforms.net https://forms.hsforms.com https://www.google.com https://www.gstatic.com https://assets.adobedtm.com https://bat.bing.com https://www.googleadservices.com https://connect.facebook.net https://static.ads-twitter.com https://snap.licdn.com https://js.hs-scripts.com https://a.quora.com https://googleads.g.doubleclick.net https://js.hs-analytics.net https://px.ads.linkedin.com https://static.hotjar.com https://analytics.twitter.com https://script.hotjar.com https://sc-static.net https://www.linkedin.com https://platform.twitter.com https://secure-ds.serving-sys.com https://optimize.google.com https://cdn.segment.com https://tags.srv.stackadapt.com https://js.hsadspixel.net https://js.hsleadflows.net https://js.hs-banner.com https://boards.greenhouse.io https://boards-cdn.greenhouse.io https://s3-cdn.greenhouse.io https://boards-api.greenhouse.io https://tag.simp
strict-transport-security
max-age=31557600
cross-origin-opener-policy
same-origin-allow-popups

Links to (2)

Linked from (1)