indexo.dev

howdencma.com

.com crawl

First seen 2026-04-21 · Last seen 2026-05-17 · ok HTTP/1.1 200 3571 ms crawled 2026-05-15

US · 104.21.38.24 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Howden Capital Markets & Advisory
Description
A leading risk, capital and strategic advisor to the global insurance and reinsurance industries.
Language
en
Generator
Drupal 11 (https://www.drupal.org)
Canonical
https://www.howdencma.com/

Open Graph

image:url
https://www.howdencma.com/sites/cma.howdenprod.com/files/styles/facebook/public/2024-12/websitehero-11.jpg?h=00546c34&itok=wxR5Vsrs

Technology

CDN
Cloudflare
CMS
Drupal
Analytics
  • Google Analytics
  • Google Tag Manager
Cookie consent
  • Iubenda
Third-party hosts loaded (10)
  • cdn.iubenda.com×2
  • www.googletagmanager.com×2
  • ajax.cloudflare.com×1
  • eu-central-1-decisionapi.lift.acquia.com×1
  • hits-i.iubenda.com×1
  • js-agent.newrelic.com×1
  • lift3assets.lift.acquia.com×1
  • production-cdn.lift.acquia.com×1
  • secure.perk0mean.com×1
  • www.google-analytics.com×1

Social

Registration

Registrar
CSC Corporate Domains, Inc.
Created
2024-02-20
Expires
2027-02-20 276 days left
Updated
2026-02-16
Name servers
  • lia.ns.cloudflare.com
  • pablo.ns.cloudflare.com

DNS records live

NS
  • lia.ns.cloudflare.com
  • pablo.ns.cloudflare.com
MX
  • 10 eu-smtp-inbound-1.mimecast.com
  • 10 eu-smtp-inbound-2.mimecast.com
TXT
Show 9 TXT records
  • anthropic-domain-verification-ykjx7c=tvz18xaibf0DKup0Y6D9TpGfh
  • apple-domain-verification=A2oW3PpzuwFVhpAe
  • google-site-verification=YjeYM7GgQHAx3GWA5l-PT4kveAko0GoA32o7GJsytQg
  • knowbe4-site-verification=0e436cd8af4a708b00f0cd56dc13f527
  • openai-domain-verification=dv-hvAEeuaPRc6XvY656t3JUNFu
  • workplace-domain-verification=itIK1hIuThgRyt2Bd6HZ5J1cvMjmXl
  • 0ed1fe018a21f6251915ad4622979392ac132e0b6c
  • MS=ms55308861
  • ZOOM_verify_VVffuAhDd7kUubm6UhQokV

Email authentication strong

SPF
v=spf1 include:_netblocks.mimecast.com -all
strict (-all)
DMARC
v=DMARC1; p=reject; adkim=s; aspf=s
policy: reject (enforced)
DKIM
no key found at common selectors

Certificate (current)

WE1
from 2026-04-03 to 2026-07-02
Expires in 44 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://www.howdencma.com/

present
  • content-security-policy
  • x-frame-options
  • x-content-type-options
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Referrer Policy
  • missing Permissions Policy
Header values
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://australiav3.hyperion.acsitefactory.com eu-central-1-decisionapi.lift.acquia.com bam.nr-data.net www.google-analytics.com https://stats.g.doubleclick.net hubspot-forms-static-embed.s3.amazonaws.com forms.hsforms.com https://app.riskpulse.com https://howdenre.us2.list-manage.com; connect-src 'self' eu-central-1-decisionapi.lift.acquia.com https://bam.nr-data.net www.google-analytics.com https://stats.g.doubleclick.net http://hits-i.iubenda.com https://rs.fullstory.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com svc.webspellchecker.net consent.iubenda.com https://edge.fullstory.com https://app.riskpulse.com https://howdenre.us2.list-manage.com *.iubenda.com https://pagead2.googlesyndication.com *.googlesyndication.com https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' https://australiav3.hyperion.acsitefactory.com fast.fonts.net https://fonts.g

Links to (10)

Linked from (2)