generalitravelinsurance.com

HTML metadata

Title: Travel Insurance - Quote, Compare, & Buy Online | Generali Global Assistance
Description: Generali Global Assistance offers 24-hour support, trip cancellation, medical coverage, and more. Find travel protection plans at the right price.
Language: en-US
Canonical: https://www.generalitravelinsurance.com/

Open Graph

url: https://www.generalitravelinsurance.com/
title: Travel Insurance - Quote, Compare, & Buy Online | Generali Global Assistance
description: Generali Global Assistance offers 24-hour support, trip cancellation, medical coverage, and more. Find travel protection plans at the right price.

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (7)

view.ceros.com×2
cdn-4.convertexperiments.com×1
cse.google.com×1
s.ksrndkehqnwntyxlhgto.com×1
transcend-cdn.com×1
www.google.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Register.com - Network Solutions, LLC

Created

2015-11-17

Expires

2028-11-17 911 days left

Updated

2025-10-18

Name servers

ns-1502.awsdns-59.org
ns-1673.awsdns-17.co.uk
ns-650.awsdns-17.net
ns-76.awsdns-09.com

DNS records live

NS

ns-1502.awsdns-59.org
ns-1673.awsdns-17.co.uk
ns-650.awsdns-17.net
ns-76.awsdns-09.com

MX

10 generalitravelinsurance-com.mail.protection.outlook.com

TXT

amazonses:xIF+ASWp7ZG3beWbRIqSZ5P1Yys2uBQJhf+FHRUCN4c=
74971kdzsk4prt4hsgkfxdvsk79xm73t
IMttKN0SFXzn2b4wTnwVsEn+qgGOVyl6urS8NI1pcX5gfyjaIrRHB0BD6AZw/IzmBT6+BmbuKUakMi1bG/Id3A==

Verified for

Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:amazonses.com include:_spf.sendergen.com ip4:208.85.48.215 include:_spf.sendergen.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:xa9hnjr7@ag.us.dmarcian.com; ruf=mailto:xa9hnjr7@fr.us.dmarcian.com; fo=1;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdgmvb0/J+cIzaHtG+jWS9FQmCMxMr0rVqcDzoLBlZmQgVrvRYlG7riu35yNhkVprtLxsR/2sbufWq…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJBlZdFXu5hsByHV15QofMydA58eiGAwIdAJ+XxaxMhh2YHCCTVLLjIkh6n1ZogLcGfWt3fWN4alH+…

selectors probed

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-04-21 to 2026-05-22

Expires in 1 day

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.generalitravelinsurance.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin
x-frame-options: DENY
permissions-policy: geolocation=(self)
x-content-type-options: nosniff
content-security-policy: default-src https: data: 'self' blob: data:; style-src 'self' 'unsafe-inline' transcend-cdn.com *.goacoustic.com https://lib-us-1.brilliantcollector.com *.content-cms.com *.shopperapproved.com *.shop.pe *.cloudfront.net https://www.googletagmanager.com fonts.googleapis.com use.fontawesome.com *.mypurecloud.com *.sociablekit.com *.bootstrapcdn.com *.google.com;font-src 'self' *.goacoustic.com https://lib-us-1.brilliantcollector.com *.shopperapproved.com *.bing.com *.cloudfront.net fonts.gstatic.com use.fontawesome.com *.bootstrapcdn.com *.mypurecloud.com *.google.com blob: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' transcend-cdn.com cdn.transcend.io telemetry.us.transcend.io *.goacoustic.com *.adtrafficquality.google https://tmpxl.com *.doubleclick.net https://s.ksrndkehqnwntyxlhgto.com https://demo-1.conversionsapigateway.com https://mpc-prod-17-s6uit34pua-wl.a.run.app https://connect.facebook.net *.doubleclick.net https://demo-1.conversionsapigateway.com https://mpc-prod-1
strict-transport-security: max-age=63072000; includeSubdomains; preload
cross-origin-opener-policy: unsafe-none
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin