clinicaltrials.gov
No paid content found
Categories: Health & Medical
Visit website
Updated: 2026-09-21 21:49
Language: English (default)
Access: Normal
Profile views 3
Outbound visits 0
Related questions
More questions →What is clinicaltrials.gov?
Does clinicaltrials.gov offer paid content?
What languages does clinicaltrials.gov support?
How can I visit clinicaltrials.gov?
What are some alternatives to clinicaltrials.gov?
Website Overview
Limited stack disclosure and few obvious backend markers suggest a more restrained public footprint. That reduces easy fingerprinting clues but is not proof of overall security. An established domain and managed infrastructure suggest continuity of operations and may support dependable delivery, although neither guarantees service quality.
Domain and Registration
Registered in 2000, this domain has about 26 years of history. That suggests continuity, although ownership and purpose may have changed. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The domain uses .gov, a restricted namespace whose registration normally has eligibility requirements. Registration contact information is publicly available through RDAP.
DNS and Email
Nameservers are provided by Google Cloud DNS, indicating managed DNS hosting. MX records point to the nih.gov email service. DNSSEC is enabled, allowing validating resolvers to authenticate signed DNS data. CAA records restrict which certificate authorities are authorized to issue certificates. No CNAME was found; the observed records resolve directly to addresses.
TLS and Certificates
The certificate uses an RSA 2048-bit public key, offering broad client compatibility. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate is valid for about 198 days in total, with 171 days remaining. The SAN includes a wildcard covering multiple hostnames at the same subdomain level. Shared private keys can increase the impact of a compromise.
HTTP and Browser Security
The response lacks these common security headers: CSP, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. The via response header indicates a CDN or caching proxy in the delivery path. No obvious internal addresses or debug information were found in the headers. The Server header contains the custom value istio-envoy.
Technology Stack Analysis
No obvious technology stack is exposed. This may reflect restrained information disclosure, although the underlying technologies remain unknown.
Search and Social Sharing
No homepage meta description was detected, leaving snippet selection more dependent on page text. No homepage canonical URL was detected. If duplicate URLs exist, consolidation may be less explicit. No Open Graph metadata was detected, so social previews may depend on platform inference. Twitter Card metadata is configured. The title has 18 characters, within a common display range.
Hosting and Email
Google Cloud DNS
Hosting
Google LLC
Location
Kansas City, Missouri, United States
Pages, Search and Sharing
| Meta description | Not detected |
|---|---|
| Canonical URL | Not detected |
| Language | English (default) |
| Twitter Card | summary |
Social Sharing Preview
1 fieldsrobots.txt (opens in a new tab)
5 rules
All bots 2 allowed · 3 disallowed
All bots
/api/int//api/seo/
/api//search?/expert-search?- Interval
Crawl delay 1 seconds
No matching rules.
Sitemaps
1
Registration details RDAP / WHOIS
| Registrar | get.gov |
|---|---|
| Registered | 2000-02-03 |
| Expires | 2027-08-18 |
| Domain status | server transfer prohibited |
| Nameservers | ns-cloud-d1.googledomains.com、ns-cloud-d2.googledomains.com、ns-cloud-d3.googledomains.com、ns-cloud-d4.googledomains.com |
| DNSSEC | signed |
DNS records
| Type | Name | Value | TTL | Priority |
|---|---|---|---|---|
| A | clinicaltrials.gov | 34.107.134.59 | 78928 | — |
| AAAA | clinicaltrials.gov | 2600:1901:0:c831:: | 83533 | — |
| MX | clinicaltrials.gov | nihcesxway3.hub.nih.gov | 86400 | 10 |
| MX | clinicaltrials.gov | nihcesxway4.hub.nih.gov | 86400 | 10 |
| MX | clinicaltrials.gov | nihcesxway5.hub.nih.gov | 86400 | 10 |
| NS | clinicaltrials.gov | ns-cloud-d1.googledomains.com | 86400 | — |
| NS | clinicaltrials.gov | ns-cloud-d2.googledomains.com | 86400 | — |
| NS | clinicaltrials.gov | ns-cloud-d3.googledomains.com | 86400 | — |
| NS | clinicaltrials.gov | ns-cloud-d4.googledomains.com | 86400 | — |
| TXT | clinicaltrials.gov | GrclYGeUpoKjW0RtHDm8IoEXyQddPqL5pdiiXvLuV7za7OiNXC+wgFWXKhBJGAt5m6Qx3pTXVsPlpI18d7ykiQ== | 86400 | — |
| TXT | clinicaltrials.gov | google-site-verification=PNIgJgOfWG3Bog_wPM4sYF_UW_QJ0T-JVZHEDuDCaD4 | 86400 | — |
| TXT | clinicaltrials.gov | google-site-verification=fOlJTfzhsN7Vee2dbKTOV2EleNnSVtj2RYj6BaQezbY | 86400 | — |
| TXT | clinicaltrials.gov | o6lmcbo4cn7r8882vn65cpjcfv. | 86400 | — |
| TXT | clinicaltrials.gov | v=spf1 include:nih.gov ~all | 86400 | — |
| CAA | clinicaltrials.gov | 0 issue "godaddy.com" | 86400 | — |
| CAA | clinicaltrials.gov | 0 issue "letsencrypt.org" | 86400 | — |
| CAA | clinicaltrials.gov | 0 issuewild "godaddy.com" | 86400 | — |
| CAA | clinicaltrials.gov | 0 issuewild "letsencrypt.org" | 86400 | — |
| DS | clinicaltrials.gov | 22937 8 2 96e386912a192eef239c7496b57260f6f2dfe051f8dba209d4cc9dbfcbf1c932 | 3600 | — |
| DMARC | _dmarc.clinicaltrials.gov | v=DMARC1; p=reject; rua=mailto:[email protected],mailto:[email protected]; ruf=mailto:[email protected]; fo=1; | 86400 | — |
TLS and certificates
| Assessment | Normal configuration |
|---|---|
| Supported protocols | TLSv1.2、TLSv1.3 |
| Negotiated protocol | TLSv1.3 |
| Certificate subject | *.clinicaltrials.gov |
| Issuer | GoDaddy.com |
| Valid until | 2027-03-12T14:40 · Remaining when checked: 171 days |
| Verification details | Certificate trust: Passed · Hostname match: Passed |
HTTP response headers
| Header | Value |
|---|---|
| content-type | text/html |
| cache-control | no-cache,no-store, max-age=0, must-revalidate |
| server | istio-envoy |
| strict-transport-security | max-age=31536000; includeSubDomains; preload |
| x-frame-options | SAMEORIGIN |
Identified technologies
Technology stack: Unknown
Recent Updates
- Website images
- Screenshots
- Network details
- Website Technologies
- Pages and Search Information
- HTTP Response Information
- TLS and certificates
- DNS Information
- Domain Registration
- Website profile
- Website Name
- Website profile
- Website Description
- Website Name
User reviews (0)