hiscoxre.com

.com crawl

First seen 2026-04-14 · Last seen 2026-05-10 · ok HTTP/1.1 200 3532 ms crawled 2026-05-08

US · 104.18.31.100 · AS13335 Cloudflare, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Hiscox Re
Description: Discover how Hiscox Re brings together underwriting, analytics, research and claims expertise to deliver innovative, collaborative solutions to complex risk challenges. Explore our vision, our ambition to do things differently, and how we unlock progress through expert reinsurance partnerships.
Language: en
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://www.hiscoxre.com/

Technology

CDN: Cloudflare
CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (2)

cdnjs.cloudflare.com×4
www.googletagmanager.com×1

Social

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2008-11-06

Expires

2026-11-06 170 days left

Updated

2025-11-02

Name servers

ns1.netnames.net
ns2.netnames.net
ns5.netnames.net
ns6.netnames.net

DNS records live

NS

ns1.netnames.net
ns2.netnames.net
ns5.netnames.net
ns6.netnames.net

MX

10 relay1.netnames.net
20 relay2.netnames.net

TXT

_2fn648wsvzjregqexoazf7s1wq8re6r

Email authentication weak

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-09-15 to 2026-10-07

Expires in 140 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.hiscoxre.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection

Header values

referrer-policy: no-referrer
x-frame-options: ALLOW-FROM https://www.hiscoxre.com
permissions-policy: accelerometer=(),ambient-light-sensor=(),attribution-reporting=(),autoplay=(),bluetooth=(),browsing-topics=(),camera=(),compute-pressure=(),cross-origin-isolated=(),display-capture=(),document-domain=(),encrypted-media=(),fullscreen=(),gamepad=(),geolocation=(),gyroscope=(),hid=(),identity-credentials-get=(),idle-detection=(),local-fonts=(),magnetometer=(),microphone=(),midi=(),otp-credentials=(),payment=(),picture-in-picture=(),publickey-credentials-create=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),speaker-selection=(),storage-access=(),usb=(),web-share=(),window-management=(),xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; object-src 'none'; style-src * 'unsafe-inline'; img-src * 'self' data: https:; media-src *; frame-src *; frame-ancestors https://www.slipcase.com https://marketplace.marsh.com https://www.hiscoxre.com; child-src *; font-src *; connect-src *; report-uri /report-csp-violation
strict-transport-security: max-age=31536000
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin