uhhospitals.org

HTML metadata

Title: Nationally Ranked Healthcare - Largest Network of Hospitals, Doctors & Surgeons in Cleveland & Northeast Ohio | University Hospitals
Description: University Hospitals, based in Cleveland, OH, is one of the nation's leading healthcare systems comprised of expert and renowned surgeons, doctors, and clinicians. With hospitals, health centers, urgent care locations, and other facilities throughout Northeast Ohio, University Hospitals is positioned to provide the best patient-centric medical care to the community. Find a UH doctor or location near you.
Language: en
Canonical: https://www.uhhospitals.org/

Technology

CDN: Azure Front Door

Third-party hosts loaded (2)

assets.adobedtm.com×1
uhhospitals.cdn-v3.conductrics.com×1

Social

Contact

Phone

Registration

Registrar

GoDaddy.com, LLC

Created

2006-07-20

Expires

2026-07-20 60 days left

Updated

2025-06-21

Name servers

ns3-06.azure-dns.org
ns1-06.azure-dns.com
ns2-06.azure-dns.net
ns4-06.azure-dns.info

DNS records live

NS

ns1-06.azure-dns.com
ns2-06.azure-dns.net
ns3-06.azure-dns.org
ns4-06.azure-dns.info

MX

10 mxa-00158002.gslb.pphosted.com
10 mxb-00158002.gslb.pphosted.com

Verified for

Google
Twilio

Email authentication strong

SPF

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:spf_oci.taleo.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; adkim=r; aspf=r; fo=1; pct=100; rf=afrf; ri=3600; rua=mailto:r935346@dc.bmesrv.com,mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: reject (enforced)

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsEz1cxmld2dMQ9ifQavpn2xv/FJWtsMF6rlbVh/aoeE6pXmrL3FVgHsoFi3k7TqG9mUdRUkgspNZ8bhDI…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDe7/sVz3GjFkhJ1UPag0NV+JwbY78ak+SLZk4h/kmNF35fHgL1blXkrEIDCUQ66HSz99qVvXL4ZM1FIj+m3A+z5e…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-02-05 to 2026-08-06

Expires in 77 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.uhhospitals.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: sameorigin
x-content-type-options: nosniff
content-security-policy: worker-src blob: *.uhhospitals.org; default-src 'self' *.uhhs.com data: 'unsafe-inline' 'unsafe-eval' *.uhhospitals.org http://uhlakforceapp04.uhhs.com:8070 *.typekit.net *.siteimproveanalytics.com siteimproveanalytics.com *.bing.com *.youtube.com *.invoca.net s.ytimg.com *.ytimg.com *.facebook.net *.invocacdn.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.google.com *.facebook.com *.siteimproveanalytics.io *.doubleclick.net *.gstatic.com *.w3.com *.podbean.com *.ads-twitter.com *.twitter.com *.t.co t.co *.alphonso.tv *.calculatestuff.com calculatestuff.com doubleclick.net *.selfcare.info selfcare.info *.digitalmedia.hhs.gov api.digitalmedia.hhs.gov *.appcatalyst.com appcatalyst.com *.staywellsolutionsonline.com staywellsolutionsonline.com *.hhs.gov *.livestream.com livestream.com *.issuu.com issuu.com *.isu.pub isu.pub *.w3.org w3.org *.quantserve.com quantserve.com *.boxcloud.com boxcloud.com *.box.com box.com *.bananatag.com bananatag.com *.alpixtrack.com alpix
strict-transport-security: max-age=31536000; includeSubDomains; preload