valleyhealth.com

.com crawl dns

First seen 2026-05-02 · Last seen 2026-05-16 · ok HTTP/1.1 200 2374 ms crawled 2026-05-08

US · 104.18.23.108 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Valley Health System
Description: Valley Health System is a regional healthcare system that serves residents in northern New Jersey and southern New York.
Language: en
Generator: Drupal 10 (https://www.drupal.org); Commerce 3
Canonical: https://www.valleyhealth.com/

Technology

CDN: Cloudflare
CMS: Drupal

Fonts

Adobe Fonts

Third-party hosts loaded (2)

use.typekit.net×1
valleyhealth.orbita.cloud×1

Social

Contact

Phone

18008255391

Registration

Registrar

Network Solutions, LLC

Created

1996-07-20

Expires

2031-07-19 1886 days left

Updated

2024-09-23

Name servers

ns1.valleyhealth.com
ns2.valleyhealth.com

DNS records live

NS

ns1.valleyhealth.com
ns2.valleyhealth.com

MX

0 valleyhealth-com.mail.protection.outlook.com

TXT

Show 4 TXT records

google-site-verification=-wzjKftbt2ywdZGK1en1Jp5ItZF3d2SHjWFx5A-2sLc
docusign=6d0c5db6-6be9-485e-9b1d-cc119a65bfe4
have-i-been-pwned-verification=ccaf3a877eda3a694998cbdb2adc8f65
ca3-4a170ea9868e4039af57ff85e3154cae

Email authentication strong

SPF

v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email; ruf=mailto:dmarc@valleyhealth.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCwpHEFRf9DZ3FwY/wRNAkzdZr9qvPKBj4FoAQkL2Z/dJqe6iXKcVqroXKSRI8jSPrZv504S6F/5YQYZIsmsy…

selectors probed

Certificate (current)

WE1

from 2026-05-06 to 2026-08-04

Expires in 76 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.valleyhealth.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-eval' 'unsafe-inline' www.instagram.com *.svc.dynamics.com ajax.aspnetcdn.com mktdplp102cdn.azureedge.net player.vimeo.com radiomd.com public.earthcam.net healthcare.healthrecordwizard.com connect.facebook.net *.hotjar.com www.youtube.com www.google-analytics.com bam.nr-data.net www.googletagmanager.com js-agent.newrelic.com www.gstatic.com maps.googleapis.com unpkg.com cdn.jsdelivr.net www.google.com optimize.google.com ajax.googleapis.com cdnjs.cloudflare.com blob: *.mapsindoors.com *.containers.piwik.pro cdn.orbita.cloud *.orbita.cloud:8443 *.doctorpodcasting.com *.azureedge.net public-usa.mkt.dynamics.com; object-src 'self' 'unsafe-eval' 'unsafe-inline' healthcare.healthrecordwizard.com; frame-ancestors 'self' secure.axiatech.com; report-uri /report-csp-violation; upgrade-insecure-requests
strict-transport-security: max-age=31536000; includeSubDomains