ucsfbenioffchildrens.org

HTML metadata

Title: UCSF Benioff Children's Hospitals | Welcome to UCSF Benioff Children's Hospitals
Description: Welcome to UCSF Benioff Children's Hospitals in San Francisco and Oakland. Learn about our services, find a doctor, view our locations and more.
Language: en
Canonical: https://www.ucsfbenioffchildrens.org/

Open Graph

url: https://www.ucsfbenioffchildrens.org/
title: UCSF Benioff Children's Hospitals | Home
description: Welcome to UCSF Benioff Children's Hospitals in San Francisco and Oakland. Learn about our services, find a doctor, view our locations and more.

Technology

CDN: Cloudflare

Cookie consent

OneTrust

Third-party hosts loaded (3)

cdn.cookielaw.org×2
datalayer.ucsfhealth.org×2
assets.adobedtm.com×1

Social

Contact

Phone

Address

1975 Fourth St., 94158, San Francisco, CA, US

Registration

Registrar

GKG.NET, INC.

Created

2010-06-14

Expires

2034-06-14 2946 days left

Updated

2024-07-29

Name servers

grannbo.ns.cloudflare.com
rory.ns.cloudflare.com

DNS records live

NS

grannbo.ns.cloudflare.com
rory.ns.cloudflare.com

MX

10 mxa-002e8f01.gslb.pphosted.com
10 mxb-002e8f01.gslb.pphosted.com

Verified for

DocuSign
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:148.163.145.21/32 ip4:148.163.141.21/32 ip4:64.54.9.250 include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: reject (enforced)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3dwE4p+mETJ4gYFJjYije8qeF1BN2CDJM+sAYZDAVJKOvhQxlFj9Tll4d6undnUwkXRThlBvpnFPhF+tS…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFYI9VLq4HrbPlie4HmT6CieGJN+TQfCPnVW7lNJs9aUlaRdLzY0eVoC/li0Ez9PVBnHhwouorj/sEPt32…

selectors probed

Certificate (current)

WE1

from 2026-04-28 to 2026-07-27

Expires in 67 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.ucsfbenioffchildrens.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: connect-src adobedc.demdex.net edge.adobedc.net *.amazonaws.com *.doubleclick.net *.googleapis.com *.kyruus.com cdn.cookielaw.org geolocation.onetrust.com 'self' *.ucsfhealth.org *.visualstudio.com wss:; default-src blob: data: https: 'self'; frame-src *.agkn.com *.doubleclick.net *.google.com mdlink.ucsfmedicalcenter.org ucsfmychart.ucsfmedicalcenter.org testmyc.ucsfmedicalcenter.org 'self' *.sitecore.net *.vimeo.com *.youtube.com *.youtube-nocookie.com; script-src *.adobedtm.com *.answerscloud.com *.azurewebsites.net *.calltrk.com *.clicktale.net *.cloudflare.com *.cloudflareinsights.com *.doubleclick.net *.evaliahealth.com *.facebook.net *.foresee.com *.google.com *.googleadservices.com *.googleapis.com *.gstatic.com *.invoca.net *.invocacdn.com *.jsdelivr.net *.msecnd.net *.cookielaw.org cdn.cookielaw.org *.radiomd.com 'self' *.skyword.com *.tealiumiq.com *.tiqcdn.com *.twitter.com datalayer.ucsfhealth.org 'unsafe-eval' 'unsafe-inline' *.vimeo.com *.vimeocdn.com *.visto1.net; style
strict-transport-security: max-age=63072000; includeSubDomains; preload