universityhealth.com
HTML metadata
Technology
- Server
- Microsoft-IIS
- Analytics
-
- Google Tag Manager
- Fonts
-
- Google Fonts
Third-party hosts loaded (3)
- fonts.googleapis.com×1
- img04.en25.com×1
- www.googletagmanager.com×1
Social
Contact
- Phone
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2022-08-13
- Expires
- 2026-08-13 84 days left
- Updated
- 2024-01-31
- Name servers
-
- edns2.ultradns.biz
- edns2.ultradns.com
- edns2.ultradns.net
- edns2.ultradns.org
DNS records live
- NS
-
- edns2.ultradns.biz
- edns2.ultradns.com
- edns2.ultradns.net
- edns2.ultradns.org
- MX
-
- 10 mxa-00158801.gslb.pphosted.com
- 10 mxb-00158801.gslb.pphosted.com
- Verified for
-
- GlobalSign
Email authentication weak
- SPF
-
v=spf1 mx ip4:208.89.16.62 ip4:208.89.16.61 ip4:208.89.16.73 ip4:208.89.16.72 ip4:208.89.16.111 ip4:208.89.16.112 ip4:69.42.126.188 ip4:66.119.37.185 ip4:66.119.37.186 ip4:208.89.16.141 ip4:208.109.192.71 include:spf1.uhtx.com ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
GlobalSign RSA OV SSL CA 2018
Expires in 286 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.3lift.com *.acuityplatform.com *.adadvisor.net *.adform.net *.adgrx.com *.admission.net *.admixer.net *.adnxs.com *.adotmob.com *.adsrvr.org *.adsymptotic.com *.advertising.com *.agkn.com *.alcmpn.com *.amazon-adsystem.com *.amazonaws.com *.apxlv.com *.arcgis.com *.betweendigital.com *.bfmio.com *.bidr.io *.bidswitch.net *.bluekai.com *.bootstrapcdn.com *.brandcdn.com *.cdc.gov *.choozle.com *.cloudflare.com *.cloudfront.net *.cogocast.net *.company-target.com *.contextweb.com *.crazyegg.com *.crwdcntrl.net *.demdex.net *.docscores.com *.domdex.com *.dotomi.com *.doubleclick.net *.eloqua.com *.trumba.com trumba.com *.addthis.com *.resonate.com *.emailsrvr.com *.en25.com *.ensighten.com *.entitytag.co.uk *.epichosted.com *.everesttech.net *.exelator.com *.facebook.com *.facebook.net *.fg8dgt.com *.force.com *.fwmrm.net *.google.com *.googleadservices.com *.googleapis.com *.gstatic.com *.healthgrades.com *.mercuryhealthcare.com *.i- strict-transport-security
max-age=31536000