highmark.com

HTML metadata

Title: Highmark: Health Insurance Plans for Individuals & Businesses
Description: Highmark is a BCBS health and wellness organization located in Pittsburgh that offers health insurance plans in PA, DE, WV, NENY and WNY.
Language: en
Canonical: https://highmark.com

Open Graph

url: https://www.highmark.com/
title: Highmark: Health Insurance Plans for Individuals & Businesses
site name: Highmark
description: Highmark Inc. is a health and wellness organization located in Pittsburgh and operates health insurance plans in PA, DE, WV, Northeastern NY and Western NY.
updated time: Fri May 15 13:25:48 EDT 2026

Technology

Fonts

Adobe Fonts
Font Awesome

Third-party hosts loaded (4)

cdnjs.cloudflare.com×2
assets.adobedtm.com×1
use.fontawesome.com×1
use.typekit.net×1

Social

Contact

Phone

1%20(800)%20241-5704

Address

rd or, if not a member, call 866-459-4418

Registration

Registrar

MarkMonitor Inc.

Created

1996-04-14

Expires

2027-04-15 331 days left

Updated

2026-03-14

Name servers

ns1.highmarkhealth.org
ns2.highmarkhealth.org

DNS records live

NS

ns1.highmarkhealth.org
ns2.highmarkhealth.org

MX

5 mailgate.highmark.com

TXT

Show 26 TXT records

SFMC-yqYWyFnA4MGJAoTMSbicbdKqjYKSP424O-rdX68g
XTvRswYB2sS4RR09YEYF2v0H4PGIaJl5jVlHzLfpkE0DHx0/cfG9qEQXw1cUhM7vvQhxSX/57LE+u3GRehzhrA==
aeirV3FouAWXPXtzhHsJdjXum5MQf9DyP6wxhDyYGDHeMLXfTg1QG90ZQl6X/dljByrEis70aL1Jg9BIDm9Jaw==
apple-domain-verification=rP954cMqVFJk1ImB
atlassian-domain-verification=CGxyIn/HSZ8qIA06soluAGaZ+OA99aynwHTJ5EkH3Xjv4mekkS05F28NvKVfqlyc
atlassian-domain-verification=j1KwqMExMRQcNkoiAumhuxVmC322CLMfb3msN2e17HxJdY9eMw7EpYOWtliZwsPU
atlassian-domain-verification=xEJ+zwGn+kZ7kKKMNqoIJwsFkao214B5bglpCfO2q8KWdX8C8m+xGipI1+zzqYn6
axway-amplify=b1c70c12-9b02-4b5b-8d36-58856db8e6a6
cisco-ci-domain-verification=7e17e276f6d70f1990c73e591cfdae949ec1f92eb00158f6032537a765729ed
fg0nim85sfv460r14bomitunhe
figma-domain-verification=59e20bd721948794cbe1bd3483ddd85887c6da9900c899403bc67bfc87af27ff-1768504186
google-site-verification=A6IALPDGFMAZFboHo2jx0lYI2H6dar5-8Z2RX74SpbU
google-site-verification=JduNDD0vYE0O3pIasqCvSSmsxnXZR-ck0ic51XlqFwo
google-site-verification=R2qm3TosbbAK08QI6vwp-I0pzBZ-LyQbe6V3s2WCvsI
google-site-verification=hL4hlLkrk9JKyGMmyLBxis188TdbwRhmtGNOhKrwPKA
oci-domain-verification=4nxX0gHEAmb1J8KjIB5LqajX7NFOuMxDFVYoTkLEQWjH
wiz-domain-verification=e0d03410d4128f53961823f16299258a503c7bd8a67fd10c03316dc2553f6abd
00D4W000006kXX2=1TBHo000000XZCC
00Ddi000001czRh=1TBdi0000000CQz
23km9umvqec3tpsol8o16ge1jd
Dynatrace-site-verification=adb3c9b5-5049-4375-b10d-6a5ed59d9503__tvtjb9vum6tuf9ul8gl5c3n1hj
SFMC-J8fl36pOy9bpiIdBwhzEe9W9n4zN7ojj6XqIJPZS
SFMC-_cOq9Ide026ftjYn5s65ACA2nk0IQ5Wfz3IdJ8Kn
SFMC-iSZxKVgAETWuYnVRwRXHU4ykHJbE1kqna3XgEMwM
SFMC-kIf1nlHsLxaqGx1eH5HNzRN7vNbJx2PiqRFQvXkM
SFMC-mpX-GQtRqvY1ycqMskr1f4WHR0UxwHFBSb0LnVgj

Email authentication strong

SPF

v=spf1 mx a:igate.highmark.com a:igate2.highmark.com ip4:157.154.7.0/24 ip4:167.164.7.48/28 ip4:13.56.105.252 ip4:66.165.128.0/19 ip4:69.89.224.0/20 ip4:199.30.235.11 ip4:74.203.185.12 include:spf.protection.outlook.com include:_spf.salesforce.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:DMARC_Notifications@highmark.com; ruf=mailto:DMARC_Notifications@highmark.com; fo=1

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCX+LvfK6LSWZVBdN2DS8cVCqU4NZ2B4o/cjwEs1Q1I3vuxAsvpJjOQBT5NGR7hdCl0LseUY1ZBCCPMGt3NoF…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCbuo8NmUMc5cZ9kvcz8S1nFB/XAREMEHVlz8h6ZscbKOXnR/LewE+9Qqu0GUHIBzMV6b+VdzpO2GCNaMLVXJ…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMyfvHVtddVG5Cpj41d3dt8IFBNgN6lgo7vsDGDWGJQmngwGcY4cv9uNDd9bAoaPYjOsXGPkMtr5/kLK4F…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtSpbanUZ+ypwl1LB5476xzUYLTTrNyLqv9o8Dck+W89lbIhDcw9+8f21sPuWPCNkFVShXHZjlDiDmuIIzcQVwiD…

selectors probed

Certificate (current)

Entrust OV TLS Issuing RSA CA 2

from 2025-09-16 to 2026-09-17

Expires in 121 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://highmark.com/

present

content-security-policy
x-frame-options

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
content-security-policy: frame-src 'self' https://www.google.com https://www.gstatic.com; default-src 'self' https://*.typekit.net https://cdnjs.cloudflare.com https://use.fontawesome.com https://fonts.googleapis.com https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://cdnjs.cloudflare.com https://assets.adobedtm.com https://solutions.invocacdn.com https://www.gstatic.com https://*.qualtrics.com; style-src 'self' 'unsafe-inline' https://*.typekit.net https://fonts.googleapis.com https://use.fontawesome.com https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https://*.google.com https://www.gstatic.com https://*.hmhs.com https://pnapi.invoca.net https://edge.adobedc.net https://adobedc.demdex.net https://*.qualtrics.com https://cdnjs.cloudflare.com; frame-ancestors 'self'; img-src 'self' https://*.qualtrics.com;