umr.com

.com crawl

First seen 2026-04-14 · Last seen 2026-05-17 · ok HTTP/1.1 200 4912 ms crawled 2026-05-08

US · 168.183.44.222 · AS10879 Unitedhealthcare

Reputation 100/100

Classifying

HTML metadata

Title: Home
Language: en
Canonical: /home

Technology

Third-party hosts loaded (2)

assets.adobedtm.com×1
www.onelink-edge.com×1

Registration

Registrar

CSC Corporate Domains, Inc.

Created

1996-04-12

Expires

2027-04-13 329 days left

Updated

2026-04-09

Name servers

edns4.ultradns.biz
edns4.ultradns.com
edns4.ultradns.net
edns4.ultradns.org
epla1.corpnamesvcs.com
epla2.corpnamesvcs.com

DNS records live

NS

epla1.corpnamesvcs.com
epla2.corpnamesvcs.com

MX

5 mxa-0077b904.gslb.pphosted.com
5 mxb-0077b904.gslb.pphosted.com

TXT

Show 11 TXT records

adobe-idp-site-verification=9a5c47599b4f379d5e29ede339f3da7f9e1689f8e16709c98e397c86a1c68122
cisco-ci-domain-verification=546904d4b3f98688f5b4c4a17900bbea6ba57586f1d50afe7343cf80516a802a
MS=ms17382569
3c5fccc2-9453-4c7f-93ed-ef616f8081e5
MS=98D9C24759CC1375942B8C54C54619D5D763C21F
asv_domain=3ebae330b4c8653e7b285def62a811ea
docusign=ee02416d-f3ad-464a-8e6b-948c77b04c15docusign=06d3e119-a2fb-45ec-9a32-d383989ac986
miro-verification=5ea04a0c26989ed5656ae2b88aa2e5c474f973ab
smartsheet-site-validation=8DjPYrNTAaKJA_MwpijPEIJYzkquECSQ
insomnia-validation=bd6d761368e64109bd773ef8d96faca1b865e030b81e5549806e921a1aa9b1af
Dynatrace-site-verification=69430615-b2b2-4989-902f-7680492986cc__v10jf3onqjnvn846actnladvms

Email authentication strong

SPF

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/IsN9sUnJhDC6IK8Xonyy4LHQi6Z+44LkGgAZOIovP2Pd74E1eiS1p2JizAi0/VX4HJtZF6NBL9MR…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2026-02-27 to 2027-02-28

Expires in 285 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.umr.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

short HSTS max-age
CSP uses wildcard sources
weak frame protection
weak content type protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff, nosniff
content-security-policy: block-all-mixed-content; frame-ancestors 'self' *.tpa.com *.umr.com *.uhis.com *.uhc.com *.optum.com *.mygeha.com *.werally.com *.liveperson.net *.lpsnmedia.net
strict-transport-security: max-age=300; includeSubDomains